Splatt581
Splatt581
This shellcode can really crash the server if it is sent by game client after connecting. In decrypted form, it looks like this: ``` 0000 0010: cf 7f 60 a3...
@shawns-valve This vulnerability is not fixed in the current engine build (10210). A detailed description is available here: https://github.com/2010kohtep/h1-valve-reports/tree/main/GoldSource/crash-netchan-fragment Currently, the vulnerable engines are the client and server engines and...
As far as I remember, this happens because the game client mutes other players by their `hashedcdkey` field (which it receives in the `svc_updateuserinfo` message from the server). The `hashedcdkey`...
@mikela-valve I ask also to pay attention to this bug. Just in case, I recorded a video that shows how you can remotely change the nickname of another player. [YouTube...
This happens because `name` string is part of `clcommands` array: ```cpp char *clcommands[22] = { "status", "god", "notarget", "fly", "name", // there "noclip", "kill", "pause", "spawn", "new", "sendres", "dropclient", "kick",...
@shawns-valve I noticed that HLDS (appid 90) was recently updated.  Now the depot with Windows binaries has a new server engine build: ``` Protocol version 48 Exe version 1.1.2.7/Stdio...
I tested the latest update, now Windows and Linux binaries have all the latest fixes: ``` Con_DPrintf("Exe build: 01:35:13 Oct 8 2024 (%i)\n", v14); ``` MacOS binaries are still outdated....
This is not new https://github.com/rehlds/ReHLDS/issues/1054#issuecomment-2483692821
> @Splatt581 It works fine for me, so I'm unable to reproduce the issue you've mentioned. Does it occur occasionally? It might be that no players were hosting using the...
Since the beginning of April, Valve changed something in the issuance of the list of game servers by the Master server. Now I get Steam networking servers, so I no...