I wouldn't say it was an intentional exploit as the srchlds is still beta, it may just be dodgy code ;)
Alfred, code bug ? or should we disable spectator modes just incase ? Chris -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of NeoMatrix99 Sent: 26 August 2004 14:59 To: [EMAIL PROTECTED] Subject: [hlcoders] Spectator buffer overflow exploit I've had a few experiences with a spectator buffer overflow a few users have executed on my server crashing it and locking it up. The following lines are what I usually get in the log before a crash. L 08/25/2004 - 01:45:41: "scatman<119><STEAM_ID_PENDING><>" connected, address "24.77.235.232:27005" L 08/25/2004 - 01:45:42: "scatman<119><STEAM_0:0:1498482><>" STEAM USERID validated L 08/25/2004 - 01:45:44: Server cvar "public_slots_free" = "9" L 08/25/2004 - 01:45:47: "scatman<119><STEAM_0:0:1498482><none>" entered the game L 08/25/2004 - 01:45:56: FATAL ERROR (shutting down): SZ_GetSpace: overflow without FSB_ALLOWOVERFLOW set on Server Spectator Buffer L 08/25/2004 - 02:00:33: "scatman<5><STEAM_ID_PENDING><>" connected, address "24.77.235.232:27005" L 08/25/2004 - 02:00:34: "scatman<5><STEAM_0:0:1498482><>" STEAM USERID validated L 08/25/2004 - 02:00:38: "scatman<5><STEAM_0:0:1498482><none>" entered the game nearly a page of this: L 08/25/2004 - 02:00:45: "scatman<5><><marine1team>" changed role to "soldier" L 08/25/2004 - 02:00:45: "scatman<5><><marine1team>" changed role to "soldier" L 08/25/2004 - 02:00:45: "scatman<5><><marine1team>" changed role to "soldier" L 08/25/2004 - 02:00:45: "scatman<5><><marine1team>" changed role to "soldier" then this: L 08/25/2004 - 02:00:53: "scatman<5><><marine1team>" changed role to "soldier" L 08/25/2004 - 02:00:53: "scatman<5><><marine1team>" changed role to "soldier" L 08/25/2004 - 02:00:53: "scatman<5><><marine1team>" changed role to "soldier" L 08/25/2004 - 02:00:53: FATAL ERROR (shutting down): SZ_GetSpace: overflow without FSB_ALLOWOVERFLOW set on Server Spectator Buffer L 08/25/2004 - 10:48:58: "wtf<3><STEAM_ID_PENDING><>" connected, address "24.151.113.249:27005" L 08/25/2004 - 10:48:59: "wtf<3><STEAM_0:1:419674><>" STEAM USERID validated L 08/25/2004 - 10:49:06: [ADMIN] WARNING: Your reconnect timeout is higher than 600 seconds. This may pose a security risk. L 08/25/2004 - 10:49:06: It is recommended to have a timeout of only 300 seconds. L 08/25/2004 - 10:49:08: "wtf<3><STEAM_0:1:419674><none>" entered the game page of this: L 08/25/2004 - 10:49:16: "wtf<3><><marine1team>" changed role to "soldier" L 08/25/2004 - 10:49:16: "wtf<3><><marine1team>" changed role to "soldier" L 08/25/2004 - 10:49:16: "wtf<3><><marine1team>" changed role to "soldier" L 08/25/2004 - 10:49:16: "wtf<3><><marine1team>" changed role to "soldier" then this: L 08/25/2004 - 10:50:57: "wtf<3><><marine1team>" changed role to "soldier" L 08/25/2004 - 10:50:57: "wtf<3><><marine1team>" changed role to "soldier" L 08/25/2004 - 10:50:57: "wtf<3><><marine1team>" changed role to "soldier" L 08/25/2004 - 10:50:57: FATAL ERROR (shutting down): SZ_GetSpace: overflow without FSB_ALLOWOVERFLOW set on Server Spectator Buffer no changed role msg here oddly enough: L 08/25/2004 - 20:09:35: "abel<140><STEAM_ID_PENDING><>" connected, address "24.151.113.249:27005" L 08/25/2004 - 20:09:36: "abel<140><STEAM_0:1:419674><>" STEAM USERID validated L 08/25/2004 - 20:09:44: "abel<140><STEAM_0:1:419674><none>" entered the game L 08/25/2004 - 20:10:28: FATAL ERROR (shutting down): SZ_GetSpace: overflow without FSB_ALLOWOVERFLOW set on Server Spectator Buffer same here with same guy: L 08/26/2004 - 00:17:50: "52 Cards<184><STEAM_ID_PENDING><>" connected, address "24.151.113.249:27005" L 08/26/2004 - 00:17:51: "52 Cards<184><STEAM_0:1:419674><>" STEAM USERID validated L 08/26/2004 - 00:18:00: "52 Cards<184><STEAM_0:1:419674><none>" entered the game L 08/26/2004 - 00:18:48: FATAL ERROR (shutting down): SZ_GetSpace: overflow without FSB_ALLOWOVERFLOW set on Server Spectator Buffer this guy here is a friend of there but was banned back in may for racial slurs L 08/26/2004 - 00:17:12: "DrFurious<183><STEAM_ID_PENDING><>" connected, address "24.117.139.106:27005" he didn't crash it but I beleive his friend directly above did so for him. _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlcoders *********************************************** This e-mail and its attachments are confidential and are intended for the above named recipient only. If this has come to you in error, please notify the sender immediately and delete this e-mail from your system. You must take no action based on this, nor must you copy or disclose it or any part of its contents to any person or organisation. Statements and opinions contained in this email may not necessarily represent those of Littlewoods. Please note that e-mail communications may be monitored. The registered office of Littlewoods Limited and its subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB. Registered number of Littlewoods Limited is 262152. ************************************************ _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlcoders
