[Franc1sco]

Description

Plugin for prevent the voice data overflow exploit that crash the clients on the server with this message:

Disconnect: Buffer overflow in net message.

And this spam on console:

Netchannel: unknown net message (48) from [Server IP Address:Port]

Tested recently on my css server where people still try to use this exploit.

You will see the attempts on addons/sourcemod/logs/voicedata_crashfix.log
Example:

L 12/17/2022 - 20:09:41: [voicedata_crashfix.smx] username (ID: STEAM_0:0:{steamid} | IP: {client ip}) was kicked for trying to crash the server with voice data overflow. Total packets: 5800

Requeriments:

Latest sourcemod version with the new speaking natives.
Or VoiceannounceEX and this branch instead if you are using a old sourcemod version.

Cvars:
Autogenerated file on cfg/sourcemod/ on first load.

// How many packets per second max?
// -
// Default: "92"
sm_voicedatacrashfix_count "92"

// Punishment. 0 = Just mute, 1 = Kick, 2 = Perm ban
// -
// Default: "1"
// Minimum: "0.000000"
// Maximum: "2.000000"
sm_voicedatacrashfix_punishment "1"

Credits:

Credits to this topic where people used the exploit on cs:go but valve fixed it, but this exploit still works on games like CS:S. I made some improvements and posted here for find it easily with support for old and recent sourcemod versions.


Download:

Main repository
Direct download
Code changes


For old sourcemod version use this:

Main repository
Direct download
Code changes

[Franc1sco]

Version 1.2

-Added logic for kick invalid steamids instead of ban (because ban should not work on invalid steamids).

[ted2020]

Originally Posted by Franc1sco Version 1.2 -Added logic for kick invalid steamids instead of ban (because ban should not work on invalid steamids).

Thanks for the updated version

It seems kick does not work. Also it seems its spitting out "INVALID" now. I tried changing it to mute now.

[Franc1sco]

Originally Posted by ted2020 Thanks for the updated version It seems kick does not work. Also it seems its spitting out "INVALID" now. I tried changing it to mute now.

I set steamid manually to "INVALID" when is not a valid steamid. Try this version that change kickid to KickClient.

Also check log errors. Mute should occur on any case.

EDIT: I added double check for the steamid.

[ted2020]

Originally Posted by Franc1sco I set steamid manually to "INVALID" when is not a valid steamid. Try this version that change kickid to KickClient. Also check log errors. Mute should occur on any case. EDIT: I added double check for the steamid.

I'll try it tonight. It would be nice if it would IP ban him aswell with "addip IP".. just as an extra measure.

Yeah, I noticed that we have KickClient and KickClientEx. Regarding the mute, funny enough it seems it never really mutes the player, meaning he keeps being able to send data to the server that relays back to other players.

[Franc1sco]

Seems that now it works well for not validated users
Before the update:

L 12/20/2022 - 22:30:01: [voicedata_crashfix.smx] uwu (ID: STEAM_ID_STOP_IGNORING_RETVALS | IP: {ip}) was kicked for trying to crash the server with voice data overflow. Total packets: 6350

After the update:

L 12/22/2022 - 23:02:24: [voicedata_crashfix.smx] uwu (ID: STEAM_0:1:{steamid} (Not Validated) | IP: {ip}) was kicked for trying to crash the server with voice data overflow. Total packets: 6350

So now it show too the real steamid (yeah he tried multiple times). I uploaded the dev to the main repositories.


Version 1.3

-Added logic for not validated users.


Now the next I added logic for ban IP from not valid users to the dev version. But probably I could automatic ban the steamid too since now I can handle it.

[coolzie]

I don't remember if plain thank you posts are allowed on this forum or not, delete if necessary. But thank you so much Franc1sco. After a little tinkering to avoid kicking regulars who were clearly not exploiting, this plugin works great.

⭐️⭐️⭐️⭐️⭐️