- fixed: CallStateChain must never allow a jumping function to set the chain's overall result to successful.

src/thingdef/thingdef_codeptr.cpp

@@ -146,6 +146,7 @@ bool ACustomInventory::CallStateChain (AActor *actor, FState *state)
 				if (proto->ReturnTypes[0] == TypeState)
 				{ // Function returns a state
 					wantret = &ret[0];
+					retval = false;	// this is a jump function which never affects the success state.
 				}
 				else if (proto->ReturnTypes[0] == TypeSInt32 || proto->ReturnTypes[0] == TypeBool)
 				{ // Function returns an int or bool

src/thingdef/thingdef_expression.cpp

@@ -3220,7 +3220,7 @@ FxExpression *FxActionSpecialCall::Resolve(FCompileContext& ctx)
 
 int DecoCallLineSpecial(VMFrameStack *stack, VMValue *param, int numparam, VMReturn *ret, int numret)
 {
-	assert(numparam > 2 && numparam < 7);
+	assert(numparam > 2 && numparam < 8);
 	assert(numret == 1);
 	assert(param[0].Type == REGT_INT);
 	assert(param[1].Type == REGT_POINTER);