Raised This Month: $32 Target: $400
 8% 

Sourcemod Crash Exploit?


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
Jwu
AlliedModders Donor
Join Date: Sep 2011
Location: Austria
Old 03-06-2017 , 08:42   Sourcemod Crash Exploit?
Reply With Quote #1

Someone joined my server and wrote in chat:
Code:
Give@o+78ItemVal=(8)give@ra6+()Giv+78Item8)give@ra6+()Give@o+78ItemVal=(8)give@ra6+()Giv+78Item8)give@ra6+()Give@o+78ItemVal=
which instantly crashed my server.

Heres a dump: https://crash.limetech.org/gvx4efbin3w3

Is that a sourcmod or a problem from one of my plugins?

Update 2:
This odd line is mention in a steam community thread here:
https://steamcommunity.com/app/440/d...7886719451781/

Last edited by Jwu; 03-06-2017 at 09:10. Reason: Update 2
Jwu is offline
Pelipoika
Veteran Member
Join Date: May 2012
Location: Inside
Old 03-06-2017 , 09:45   Re: Sourcemod Crash Exploit?
Reply With Quote #2

If you write that in your servers chat does it crash?
__________________
Pelipoika is offline
Jwu
AlliedModders Donor
Join Date: Sep 2011
Location: Austria
Old 03-06-2017 , 09:52   Re: Sourcemod Crash Exploit?
Reply With Quote #3

I'm still at work, but maybe one of my admins can test that.

Update:
One of my admins tryed that out on our test server. He tryed it via chat and via conole and it didn't crash...hmmm...

Last edited by Jwu; 03-06-2017 at 10:10. Reason: Update
Jwu is offline
Lux
Veteran Member
Join Date: Jan 2015
Location: Cat
Old 03-06-2017 , 10:24   Re: Sourcemod Crash Exploit?
Reply With Quote #4

IT does not crash my L4D2 server it just post's it in the chat, and no error or anything

MetaMod:Source v1.10.4V, SourceMod v1.9.0.6056
__________________
Connect
My Plugins: KlickME
[My GitHub]

Commission me for L4D
Lux is offline
Jwu
AlliedModders Donor
Join Date: Sep 2011
Location: Austria
Old 03-06-2017 , 12:28   Re: Sourcemod Crash Exploit?
Reply With Quote #5

Nvm the odd line. It did crashed on other entries too. I rolled back an update i made for a plugin which uses
Code:
AddCommandListener(Command_Say, "say"); AddCommandListener(Command_Say, "say2"); AddCommandListener(Command_Say, "say_team");
There are a few "else ifs" for "!" commands which arent actually registered console commands (RegConsoleCmd) like
Code:
else if(StrEqual(text, "!edlogo", false) && IsPlayerAdmin[client])
That line above for some reason made the crash, even though people were not typing that in. After I removed that (which was the only change since weeks) it was fine. Coincidal there were other crashes too which are gone after that, crashes like these: https://crash.limetech.org/4chkkzdc5kdn
Jwu is offline
checkster
BANNED
Join Date: Apr 2007
Location: Norway
Old 03-06-2017 , 12:50   Re: Sourcemod Crash Exploit?
Reply With Quote #6

!Give@o+78ItemVal=(give@ra6+()Giv+78Itemg ive@ra6+()Give@o+78ItemVal=(give@ra6+()Giv+ 78Itemgive@ra6+()Give@o+78ItemVal=

? Cause anything besides that makes no sense
checkster is offline
KyleS
SourceMod Plugin Approver
Join Date: Jul 2009
Location: Segmentation Fault.
Old 03-06-2017 , 23:18   Re: Sourcemod Crash Exploit?
Reply With Quote #7

Quote:
Originally Posted by Jwu View Post
Nvm the odd line. It did crashed on other entries too. I rolled back an update i made for a plugin which uses
Code:
AddCommandListener(Command_Say, "say"); AddCommandListener(Command_Say, "say2"); AddCommandListener(Command_Say, "say_team");
There are a few "else ifs" for "!" commands which arent actually registered console commands (RegConsoleCmd) like
Code:
else if(StrEqual(text, "!edlogo", false) && IsPlayerAdmin[client])
That line above for some reason made the crash, even though people were not typing that in. After I removed that (which was the only change since weeks) it was fine. Coincidal there were other crashes too which are gone after that, crashes like these: https://crash.limetech.org/4chkkzdc5kdn
Can you attach the full plugin? I'd like to reproduce this.
KyleS is offline
Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 09:42.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode