November+Fixes Source/Database

[Reza]

its good to see all my future victims collected in one place haha.

[Reza]

what a waste of time for such a failure of accomplishment.

 

[merl0@]

On 11/5/2021 at 1:04 PM, Scura said:




What is it? ? 




it's just what it looks! just a simple server side check ?

basically AFAIK some1 may exploit a bug into client by using a specially crafted message (MSG_PARTY_CHANGETYPE) that may lead to a crash of client app (of all party members).

Imagine some1 inviting to a party just to make u crash, funny - and ridicoulous - at the same time lol.

an example of how a simple check prevents *devastating effects* from happening, that's why it's one of my favourites.

ps: check SessionState.cpp and Party.cpp in client(look for SetDivisionType function).


5 hours ago, Reza said:




its good to see all my future victims collected in one place haha.




didnt u quit with lc /index.php?/profile/21708-reza/&do=hovercard" data-mentionid="21708" href="/index.php?/profile/21708-reza/" rel="">@Reza lol? O_o

[Scura]

20 hours ago, Reza said:




its good to see all my future victims collected in one place haha.




U back My loved chicken? 

[Scura]

14 hours ago, merl0@ said:




it's just what it looks! just a simple server side check ?



basically AFAIK some1 may exploit a bug into client by using a specially crafted message (MSG_PARTY_CHANGETYPE) that may lead to a crash of client app (of all party members).



Imagine some1 inviting to a party just to make u crash, funny - and ridicoulous - at the same time lol.



an example of how a simple check prevents *devastating effects* from happening, that's why it's one of my favourites.



ps: check SessionState.cpp and Party.cpp in client(look for SetDivisionType function).



didnt u quit with lc /index.php?/profile/21708-reza/&do=hovercard" data-mentionid="21708" href="/index.php?/profile/21708-reza/" rel="">@Reza lol? O_o




Tough it was your own release of the fix, but it is already shared by deth ? 

[merl0@]

1 hour ago, Scura said:




Tough it was your own release of the fix, but it is already shared by deth ? 




nop, the fix i did post is not mine, it is included in /index.php?/profile/2167-dethunter12/&do=hovercard" data-mentionid="2167" href="/index.php?/profile/2167-dethunter12/" rel="">@dethunter12 release!

i was wondering when this bug was discovered 4 the first time, i have the feeling this may be quite old...maybe it's hinerithed from EP3 but dunno, any idea?

[Scura]

2 minutes ago, merl0@ said:




nop, the fix i did post is not mine, it is included in /index.php?/profile/2167-dethunter12/&do=hovercard" data-mentionid="2167" href="/index.php?/profile/2167-dethunter12/" rel="">@dethunter12 release!

i was wondering when this bug was discovered 4 the first time, i have the feeling this may be quite old...maybe it's hinerithed from EP3 but dunno, any idea?




I had the ep2 source long time ago ... but i didn't remember how the party is config. Btw i think yes it come from ep3

[uouven]

Thanks

[b4rr4cud4]

I was wondering what is the highest visual studio that can be used to attempt compiling this @/index.php?/profile/2167-dethunter12/&do=hovercard&referrer=https%253A%252F%252Flckb.dev%252Fforum%252Findex.php%253F%252Ftopic%252F15124-novemberfixes-sourcedatabase%252F%2526csrfKey%253D512d7cd6700e63b701d70162a752308d" href="/index.php?/profile/2167-dethunter12/" rel="" style="background-color:#202020;color:#0789ff;font-size:13px;text-align:left;" title="Go to dethunter12's profile">dethunter12

[Desarija]

1 hour ago, b4rr4cud4 said:




I was wondering what is the highest visual studio that can be used to attempt compiling this @/index.php?/profile/2167-dethunter12/&do=hovercard&referrer=https%253A%252F%252Flckb.dev%252Fforum%252Findex.php%253F%252Ftopic%252F15124-novemberfixes-sourcedatabase%252F%2526csrfKey%253D512d7cd6700e63b701d70162a752308d" href="/index.php?/profile/2167-dethunter12/" rel="" style="background-color:#202020;color:#0789ff;font-size:13px;text-align:left;" title="Go to dethunter12's profile">dethunter12




vs2022