And here's another crash trace probably related:
#0  0xf5c3785e in VectorTransform ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#1  0xf5c388bf in TransformAABB ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#2  0xf5ba1e1e in CTFProjectile_Arrow::PositionArrowOnBone ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#3  0xf5ba33e2 in CTFProjectile_Arrow::StrikeTarget ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#4  0xf5ba2c0b in CTFProjectile_Arrow::ArrowTouch ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#5  0xf5533062 in CBaseEntity::Touch ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#6  0xf576f8be in CBaseEntity::PhysicsStartTouch ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#7  0xf577180f in CBaseEntity::PhysicsMarkEntityAsTouched ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#8  0xf5771b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#9  0xf5771be4 in CBaseEntity::PhysicsImpact ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#10 0xf576929e in CBaseEntity::PhysicsPushEntity ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so

Maybe somehow some variables (origin, angles, etc.) are getting set to
invalid/NaN values which is messing with these functions?

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Tony Paloma
Sent: Sunday, July 19, 2009 6:33 PM
To: 'Half-Life dedicated Win32 server mailing list'
Cc: 'Eric Smith'
Subject: [hlds] ClipRayToVPhysics crash and other related crash

Lately, I've been getting crashes in the ClipRayToVPhysics function and
other physics related functions. It's been occurring on more than one server
and seems to happen more often recently. The increasing frequency leads me
to believe that it could be some kind of exploit. I do not run SourceMod.
Here are some sample stack traces.

#0  0xf771310c in CEngineTrace::ClipRayToVPhysics ()
   from /home/srcds/tf2server/orangebox/bin/engine_i486.so
#1  0xf77148f3 in CEngineTrace::ClipRayToCollideable ()
   from /home/srcds/tf2server/orangebox/bin/engine_i486.so
#2  0xf7715005 in CEngineTrace::TraceRay ()
   from /home/srcds/tf2server/orangebox/bin/engine_i486.so
#3  0xf5b67c04 in CTFSniperRifle::UpdateSniperDot ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#4  0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#5  0xf55735ce in CBasePlayer::ItemPostFrame ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#6  0xf5af971c in CTFPlayer::ItemPostFrame ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#7  0xf57aeef8 in CBasePlayer::PostThink ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#8  0xf5ae1dba in CTFPlayer::PostThink ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#9  0xf57c6872 in CPlayerMove::RunPostThink ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#10 0xf57c83ba in CPlayerMove::RunCommand ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
...


#0  0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#1  0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#2  0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#3  0xf5511062 in CBaseEntity::Touch ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#4  0xf574d8be in CBaseEntity::PhysicsStartTouch ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#5  0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#6  0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#7  0xf574fbe4 in CBaseEntity::PhysicsImpact ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#8  0xf574729e in CBaseEntity::PhysicsPushEntity ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#9  0xf575546e in CBaseEntity::PhysicsToss ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#10 0xf5755da2 in CBaseEntity::PhysicsSimulate ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#11 0xf5748b29 in Physics_SimulateEntity ()
...

This one doesn't make it to PositionArrowOnBone:
#0  0xf5b55901 in CTFProjectile_Arrow::StrikeTarget ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#1  0xf5b54c0b in CTFProjectile_Arrow::ArrowTouch ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#2  0xf54e5062 in CBaseEntity::Touch ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#3  0xf57218be in CBaseEntity::PhysicsStartTouch ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#4  0xf572380f in CBaseEntity::PhysicsMarkEntityAsTouched ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#5  0xf5723b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#6  0xf5723be4 in CBaseEntity::PhysicsImpact ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#7  0xf571b29e in CBaseEntity::PhysicsPushEntity ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#8  0xf572946e in CBaseEntity::PhysicsToss ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#9  0xf5729da2 in CBaseEntity::PhysicsSimulate ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#10 0xf571cb29 in Physics_SimulateEntity ()
   from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
#11 0xf571d0a6 in Physics_RunThinkFunctions ()
...
_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds
_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds

Reply via email to