0003166: Disable Skulltag maps from being votable

Chat on our Discord Server Get the latest version: 3.1
Source Code

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0003166

Zandronum

[All Projects] Bug

public

2017-06-22 23:49

2017-06-23 08:44

Reporter

Ivan

Assigned To

Priority

high

Severity

exploit

Reproducibility

always

Status

closed

Resolution

denied

Platform

Microsoft

Windows

OS Version

XP/Vista/7

Product Version

2.0

Target Version

Fixed in Version

Summary

0003166: Disable Skulltag maps from being votable

Description

Voting a CTF or any other Skulltag stock map will cause the current server to change it's settings. These maps will force a server's dmflags and gamemode to change by force when voted, and ruin a server. This is a potential exploit and can ruin services such as TSPG. Disable these maps from being votable (but still let people vote maps in the maplist for that matter) somehow. Maybe a new server flag?

Attached Files

Relationships

Notes
(0017878) Combinebobnt (reporter) 2017-06-22 23:56	just use a maplist

(0017884) Dusk (developer) 2017-06-23 08:44	Yeah you can avoid this by using the maplist. The Skulltag maps aren't even stock anyway but must be loaded separately so there's no basis to give them special treatment. Which means that your server is loading some maps that cause side effects and you don't want those maps to be votable, which is what the maplist accomplishes. Not to mention that the engine arbitrarily deciding what custom maps should be votable and what is not would be a pretty bad idea overall.

**Issue Community Support**
This issue is already marked as resolved. If you feel that is not the case, please reopen it and explain why.
Supporters:	No one explicitly supports this issue yet.
Opponents:	No one explicitly opposes this issue yet.

Issue History
Date Modified	Username	Field	Change
2017-06-22 23:49	Ivan	New Issue
2017-06-22 23:56	Combinebobnt	Note Added: 0017878
2017-06-23 08:44	Dusk	Note Added: 0017884
2017-06-23 08:44	Dusk	Status	new => closed
2017-06-23 08:44	Dusk	Resolution	open => denied

Questions or other issues? Contact Us.

Links

Doom and Doom II are the property of id Software.