Quantcast
Channel: Recent Discussions — Unknown Worlds Forums
Viewing all articles
Browse latest Browse all 42799

How to cause a segfault 101 (potential security hole)

$
0
0
Hello!

If typing "exit" in console is too conventional for you, here is another way to close your game (via a segfault):
local boneCoords = Client.GetLocalPlayer()
local coords = boneCoords:Get(9999999)
Print("%s", tostring(coords.origin.x))

Yay, access violation!

I haven't checked PostArray, RenderModelArray, PointArray, etc.

This is a potential security hole, as you can read any of the game's memory (using the bit library to extract the values from the floats).
Though, the only sensitive thing I can think of is the current Steam/VAC client auth key, which could be used to impersonate someone on another server (SteamID and all, just like in GMod a while back).

On a side note (and while I have your attention), a request:

Please add CoordArray:Set(index, coords).
(with bounds checking, of course)
There are many potential uses. For example, Scatter wishes to use it to move the finger-bones of the exosuit for a specific ability.

It'd be really appreciated :D

(The performance impact of mods messing with bones using Lua-math shouldn't be an issue. Look at Player Appearance Customer 3 for GMod, which doesn't use LuaJIT and can handle dozens of models per player.)

Viewing all articles
Browse latest Browse all 42799

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>