Author Topic: PW Server Crash Exploit  (Read 1192 times)

0 Members and 1 Guest are viewing this topic.

Captain

  • Relentless Teamkiller
  • **
  • Posts: 68
    • View Profile
PW Server Crash Exploit
« on: May 26, 2016, 07:16:48 pm »
Anybody know how to do this?

Quote
I have been getting multiple private messages about players crashing servers by feeding invalid string tokens in to the local / faction / admin chat: this is not a bug caused by anything in PW, just a result of the M&B module system string composition functionality not being coded robustly, to handle errors gracefully when fed invalid strings rather than crashing the whole game engine. Since the module system has no operations for recognising characters or processing strings (except for str_is_empty, which is no use) there is no way to prevent the crash other than entirely removing local, faction, and admin chat from the mod.

As I have said in the past when people asked about it, there doesn't seem much chance of TaleWorlds fixing the bug, since Warband Native multiplayer is not affected (text strings from non admin player input are not sent to the server, for display or logging - the hard coded global and team chat do not use the module system, and exploits affecting them in the past were fixed in the engine code), and the game seems well past maintenance mode, abandoned except when external developers pay for features for "child" games (fair enough).

The best chance of dealing with the problem at the moment is using the WSE or something like it. Since people don't seem to be figuring it out themselves (or at least sharing with everyone), I have updated the "merge_wse" branch in GitHub to WSE v4.2.9 and have done some testing to see what could be done to prevent the crashing: the str_sanitize operation seems made for the purpose, and when added to the client_event_chat_message_* event handler in script_game_receive_network_message, the crashes seemed to stop for me (the sending player still crashes, but who cares). The script changes are very simple - could be one line if you wanted:

https://github.com/vornne/pw_module_system/commit/a03c3b328770fdad35158d1bccc0ceb0467b076a

Or if using the PW git repository for your server script changes, just fetch and merge the merge_wse branch, then build the module, and use the WSE to run your dedicated server.

https://forums.taleworlds.com/index.php/topic,350930.0.html
Best Warband player NA

Eddie2G

  • Online Villain
  • ***
  • Posts: 123
  • Worst Chiiter EU
    • View Profile
Re: PW Server Crash Exploit
« Reply #1 on: May 27, 2016, 05:24:31 am »
would like to know aswell whats your steam name

Captain

  • Relentless Teamkiller
  • **
  • Posts: 68
    • View Profile
Re: PW Server Crash Exploit
« Reply #2 on: June 02, 2016, 03:46:21 am »
It has something to do with inputting {} although im not quite sure yet. A certain combo probably fucks the server whilst another combo just fucks up your game client and crashes you.

PM me your steam and I'll add you fam.
Best Warband player NA

Eddie2G

  • Online Villain
  • ***
  • Posts: 123
  • Worst Chiiter EU
    • View Profile
Re: PW Server Crash Exploit
« Reply #3 on: June 02, 2016, 10:27:21 pm »
Can't send PM's yet i guess i need more post
please sent me a private message im a active m&b hacker and i want to play with somone like me
« Last Edit: June 02, 2016, 10:33:26 pm by TheBiggestTKer »

ILikeTrains1322

  • First Post
  • *
  • Posts: 1
    • View Profile
Re: PW Server Crash Exploit
« Reply #4 on: June 04, 2016, 07:34:30 am »
Someone needs to PM this shit to me, please.
Send me thou greatest Autoblock Hacks and Dankest Memes.

Captain

  • Relentless Teamkiller
  • **
  • Posts: 68
    • View Profile
Re: PW Server Crash Exploit
« Reply #5 on: July 06, 2016, 03:39:14 am »
Found it, pm me
Best Warband player NA

xichaex

  • First Post
  • *
  • Posts: 1
    • View Profile
Re: PW Server Crash Exploit
« Reply #6 on: July 06, 2016, 05:57:43 am »
Can you send me all the combinations? I can't PM thanks!

Eddie2G

  • Online Villain
  • ***
  • Posts: 123
  • Worst Chiiter EU
    • View Profile
Re: PW Server Crash Exploit
« Reply #7 on: July 07, 2016, 02:36:32 am »
@Captain i can't send a PM , i asked you to send me a PM
If you read this please do.

Maybe we can talk on steam and i can get you a gift or something.

frankie

  • First Post
  • *
  • Posts: 1
    • View Profile
Re: PW Server Crash Exploit
« Reply #8 on: July 09, 2016, 01:05:00 pm »
Yeah if you could just go ahead and not do this. Yah, that'd be great