Hi,

there's this line:

g_floor->removeReference();

below the physicsWorld->addEntity(g_floor), but the g_floor->removeReference() is the one it seems to crash to, if I have debug outputs to the log before each call, this call is the last it outputs before. Yes I have more code after this but the bit I posted is in it's own { } block. Well actually the code continues exactly from row 50 in the code I posted above, I just replaced the hkpSimpleMeshShape creation with this piece of code.

Here comes the whole stack:

 	Test.exe!hkEntityAabbUtil::entityBatchRecalcAabb(const hkpCollisionInput * collisionInput=0x00fa8e80, hkpEntity * const * entityBatch=0x0012f368, int numEntities=1)  Line 125 + 0xa3 bytes	C++
 	ntdll.dll!7c9268ad() 	
 	[Frames below may be incorrect and/or missing, no symbols loaded for ntdll.dll]	
 	ntdll.dll!7c9268ad() 	
 	Test.exe!hkp3AxisSweep::addObject(hkpBroadPhaseHandle * object=, const hkAabbUint32 & aabbIn=, hkArray<hkpBroadPhaseHandlePair> & newPairs=)  Line 1556 + 0x11 bytes	C++
 	ntdll.dll!7c90e5e5() 	
 	ntdll.dll!7c90e9ff() 	
 	kernel32.dll!7c810e16() 	
 	kernel32.dll!7c810e36() 	
 	kernel32.dll!7c810e36() 	
>	Test.exe!_write_nolock(int fh=7469004, const void * buf=0x00fa0000, unsigned int cnt=0)  Line 301 + 0x3c bytes	C
 	ntdll.dll!7c91056d() 	
 	Test.exe!_CrtIsValidHeapPointer(const void * pUserData=0x0071a904)  Line 1963	C++
 	Test.exe!_free_dbg_nolock(void * pUserData=0x00000004, int nBlockUse=7360125)  Line 1329 + 0x9 bytes	C++
 	Test.exe!_free_dbg(void * pUserData=0x00fa3818, int nBlockUse=1)  Line 1199 + 0x7 bytes	C++
 	Test.exe!_Mtxunlock(_RTL_CRITICAL_SECTION * _Mtx=0x00fa3818)  Line 54	C
 	Test.exe!free(void * pUserData=0x00fa3818)  Line 1152 + 0xb bytes	C++
 	Test.exe!std::_DebugHeapDelete<std::locale>()  + 0x16 bytes	C++
 	Test.exe!std::ios_base::_Ios_base_dtor(std::ios_base * _This=0x0012f7b4)  Line 58 + 0xc bytes	C++
 	Test.exe!cprint()  + 0xc9 bytes	C++
 	ntdll.dll!7c96e0d4() 	
 	ntdll.dll!7c926abe() 	
 	ntdll.dll!7c926abe() 	
 	ntdll.dll!7c926abe() 	
 	ntdll.dll!7c9268ad() 	
 	ntdll.dll!7c926abe() 	
 	ntdll.dll!7c9268ad() 	
 	wl_hook.dll!1000a548() 	
 	wl_hook.dll!1000a35f() 	
 	wl_hook.dll!10009d4d() 	
 	wl_hook.dll!10009f4d() 	
 	wl_hook.dll!10009f23() 	
 	wl_hook.dll!10009f01() 	
 	wl_hook.dll!10009a1b() 	
 	wl_hook.dll!10009868() 	
 	wl_hook.dll!1000727a() 	
 	wl_hook.dll!10020d26() 	
 	ntdll.dll!7c90e03c() 	
 	kernel32.dll!7c8213c0() 	
 	dinput8d.dll!6d31c636() 	
 	dinput8d.dll!6d31c6cf() 	
 	dinput8d.dll!6d31c6dd() 	
 	dinput8d.dll!6d315c86() 	
 	Test.exe!_openfile(const char * filename=0x00000078, const char * mode=0x003c5948, int shflag=3932160, _iobuf * str=0x7c926abe)  Line 221 + 0x6d bytes	C
 	ntdll.dll!7c96e0d4() 	
 	ntdll.dll!7c96e0d4() 	
 	ntdll.dll!7c94a5d0() 	
 	ntdll.dll!7c926abe() 	
 	kernel32.dll!7c809e80() 	
 	kernel32.dll!7c80bcfe() 	
 	dinput8d.dll!6d332b5f() 	
 	dinput8d.dll!6d30a9a0() 	
 	dinput8d.dll!6d30aa94() 	
 	dinput8d.dll!6d30a9a0() 	
 	dinput8d.dll!6d30aa94() 	
 	dinput8d.dll!6d30a9a0() 	
 	dinput8d.dll!6d30a9a0() 	
 	ntdll.dll!7c90fb6c() 	
 	ntdll.dll!7c90fb71() 	
 	ntdll.dll!7c90e20a() 	
 	kernel32.dll!7c80261a() 	
 	dinput8d.dll!6d30a9a0() 	
 	dinput8d.dll!6d30aa94() 	
 	dinput8d.dll!6d335ced() 	
 	dinput8d.dll!6d30a9a0() 	
 	dinput8d.dll!6d30aa94() 	
 	dinput8d.dll!6d30a9a0() 	
 	dinput8d.dll!6d30aa94() 	
 	dinput8d.dll!6d30a9a0() 	
 	dinput8d.dll!6d30aa94() 	
 	ntdll.dll!7c90d592() 	
 	advapi32.dll!77dd6bcc() 	
 	dinput8d.dll!6d30a9a0() 	
 	dinput8d.dll!6d30aa94() 	
 	dinput8d.dll!6d30c2c4() 	
 	dinput8d.dll!6d30c2e5() 	
 	dinput8d.dll!6d30f6e7() 	
 	dinput8d.dll!6d30e48e() 	
 	dinput8d.dll!6d30f713() 	
 	Test.exe!InitKeyb()  + 0xab bytes	C++
 	Test.exe!hkMatrix6::sub()  + 0x10061c bytes	C++
 	Test.exe!_WinMain@16()  + 0x13c bytes	C++
 	Test.exe!__tmainCRTStartup()  Line 315 + 0x35 bytes	C
 	Test.exe!WinMainCRTStartup()  Line 187	C
 	kernel32.dll!7c816ff7() 	

Best Regards,

vfgdfg