Stored in ERR_SP when the game starts. A ROM error sets the stack to this word, whose value is the address of the glyph buffer.