Raised This Month: $51 Target: $400
 12% 

Serious amxx bug/exploit relating to model ignored


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
TehKonijn
Junior Member
Join Date: May 2014
Old 05-01-2017 , 07:27   Serious amxx bug/exploit relating to model ignored
Reply With Quote #1

I would like to know what's going on with this bug: https://bugs.alliedmods.net/show_bug.cgi?id=6603

Seems to have been ignored for half a month and has been around for a while before the report was filed.

This bug allows any player on a server running amxx with a plugin that loads the cstrike module select any model they supply to the model console command...

This is a game breaking flaw, if players abuse this on a dm/standard server the affects should be obvious (don't know which team someone is really on) and it also severely affects Jailbreak and Zombie servers if/when players switch their model to a different team or non-standard model.

I don't know where to go from the report that was made, which is why I'm making the post here, hoping that we can get some more information on this and hopefully work to fix it.
TehKonijn is offline
Arkshine
AMX Mod X Plugin Approver
Join Date: Oct 2005
Old 05-01-2017 , 11:47   Re: Serious amxx bug/exploit relating to model ignored
Reply With Quote #2

The bug tracker doesn't have much visibility nor there are not many people willing to help AMXX. You need to be patient.

You're saying that once you get a custom model from a plugin using the native, you can change the model with "model" command?

Which AMXX version? 1.8.2 or 1.8.3-dev. If the former, does it happen with dev version?
__________________
Arkshine is offline
PartialCloning
Senior Member
Join Date: Dec 2015
Old 05-01-2017 , 12:50   Re: Serious amxx bug/exploit relating to model ignored
Reply With Quote #3

1.8.2. The bug is reproducible on 1.8.2 but not on 1.8.3.
PartialCloning is offline
TehKonijn
Junior Member
Join Date: May 2014
Old 05-03-2017 , 18:22   Re: Serious amxx bug/exploit relating to model ignored
Reply With Quote #4

Quote:
Originally Posted by Arkshine View Post
The bug tracker doesn't have much visibility nor there are not many people willing to help AMXX. You need to be patient.
Well you say I need to be patient, but I got a reply within days here and that bug was open for half a month, so it seems I don't need to be patient I just need to make it more visible which is what I've done and now have a dialog.


Quote:
Originally Posted by Arkshine View Post
You're saying that once you get a custom model from a plugin using the native, you can change the model with "model" command?

Which AMXX version? 1.8.2 or 1.8.3-dev. If the former, does it happen with dev version?
amxx version
AMX Mod X 1.8.2 (http://www.amxmodx.org)

I haven't tried the dev build but according to PartialCloning it doesn't happen there. Not sure if I want to run the dev build across multiple active servers though, I would ask if it's stable... but if it was then presumably it wouldn't be a dev build...

Last edited by TehKonijn; 05-03-2017 at 18:23.
TehKonijn is offline
PRoSToTeM@
Veteran Member
Join Date: Jan 2010
Location: Russia, Ivanovo
Old 05-03-2017 , 18:31   Re: Serious amxx bug/exploit relating to model ignored
Reply With Quote #5

Quote:
Originally Posted by Arkshine View Post
The bug tracker doesn't have much visibility
Go go github issues .
__________________
PRoSToTeM@ is offline
Send a message via ICQ to PRoSToTeM@ Send a message via Skype™ to PRoSToTeM@
Depresie
Veteran Member
Join Date: Nov 2013
Old 05-04-2017 , 05:17   Re: Serious amxx bug/exploit relating to model ignored
Reply With Quote #6

Quote:
User: I have a problem, a serious bug on 1.8.2
Devs: Okay, we fixed that, here is the new version
User: I don't wanna use that, please fix it ASAP
You should go for the dev build, it should be more safe and efficient..
__________________
Depresie is offline
TehKonijn
Junior Member
Join Date: May 2014
Old 05-05-2017 , 14:32   Re: Serious amxx bug/exploit relating to model ignored
Reply With Quote #7

Quote:
Originally Posted by Depresie View Post
You should go for the dev build, it should be more safe and efficient..
I didn't say I don't want to use it, I just said presumably if it was stable then it would be stable release.

If it is stable then I will switch to it.
TehKonijn is offline
JusTGo
Veteran Member
Join Date: Mar 2013
Old 05-05-2017 , 14:46   Re: Serious amxx bug/exploit relating to model ignored
Reply With Quote #8

you have no choice other then switching to it cause amx 1.8.2 will not by updated thats why we have amx 1.8.3 dev, and yes its stable. even you face problem with it you can report and get it fixed unlike amx 1.8.2
__________________
JusTGo is offline
Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 05:41.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode