Language: 
To browser these website, it's necessary to store cookies on your computer.
The cookies contain no personal information, they are required for program control.
  the storage of cookies while browsing this website, on Login and Register.

Author Topic:  Crash on the 5th March  (Read 3193 times)

0 Members and 0 Guests are viewing this topic.

tarriel

« on: 05, March 2010, 14:40:30 »
Hi, was asked to report a crash tonight everyone online was booted it happened pretty close to 12:22pm GMT, was allowing logins again at 12:25  We were reset to a few minutes before the crash occurred.  I was in the shop at the time, had just dropped a wand of identify lvl 71.


smacky

« Reply #1 on: 05, March 2010, 15:50:14 »
Hm, dunno exactly. The log is less than informative:
Code: [Select]
SIGSEGV received

Someone did say  hello to the Montibow grandma just before the crash, but I haven't been able to reproduce a crash this way...

The crash on March 1st looks to have been yet another /create abuse:
Code: [Select]
ERROR: Tried to insert multipart object large tent (131744817)
Fatal: Shutdown server. Reason: Fatal Error

But we've been through all this several times before...

_people_

« Reply #2 on: 06, March 2010, 03:35:54 »
A player in-game told me that someone was trying to hack the server when this crash happened...
-- _people_ :)

Mizza

« Reply #3 on: 06, March 2010, 09:30:20 »
Nope, it was sarc who was AGAIN creating multiarch items in his inventory and thus crashing the server. Isn't their a saying even donkeys won't hit themselves twice with the same stone?
At least, that's what happened 1st March. I guess you're talking about yesterday?
--Mizza
« Last Edit: 06, March 2010, 09:32:12 by Mizza »

_people_

« Reply #4 on: 06, March 2010, 18:14:15 »
Yep.
-- _people_ :)

Mizza

« Reply #5 on: 07, March 2010, 10:53:52 »
As I just logged in and heard from people it crashed like 40 minutes ago I asked someone who was there to report it :)
Because AFAIK there wasn't any other DM on.
Any info on what happened so far smacky?
--Mizza

michtoen

« Reply #6 on: 07, March 2010, 14:10:47 »
Well, we really should monitor the the DM commands with some more log lines...
I already saw here and there a crash invoked by "testing"... :)

But again: There is no pratical way to "hack the game". Even the core crossfire
or daimonin coder would problems to find vulnerable parts.

The guy who claimed to hack the game was using the program "cheat engine" which
will simply change the client memory status (i think he did not realized the client
is avaible as source and can be "hacked" by him in any way).

Of course you can change the memory of the client so you can see 1000 mithril or
whatever. But thats only a shadow on your box, the server did not cares about your memory
status. In fact the server can do this, for example when a GM is "stealing" an item out of the
inventory. The player will still see it, but try to use it...

You must have in mind that most commercial mmorpgs use their non open clients to do "some work". That can pre-calculating some stuff or something. For example had world of warcraft moved the calculation of teleport to the client, so the server had not to load and handle the whole game world.

That result was then unproved send to the server. As you can imagine, after some time and sessions with cheat engine and other memory manipulating programms, people was able to port to any point, including forbidden areas...

WoW learned their lessons fast and now they removed or controled nearly all.

For us, it will even not work with "wall hacks" because the server is even calc the LoS of a player and is only sending the visible tiles.
« Last Edit: 07, March 2010, 14:12:39 by michtoen »
vita est proelium

smacky

« Reply #7 on: 07, March 2010, 15:32:08 »
Of course you can change the memory of the client so you can see 1000 mithril or
whatever. But thats only a shadow on your box, the server did not cares about your memory
status. In fact the server can do this, for example when a GM is "stealing" an item out of the
inventory. The player will still see it, but try to use it...

In B5 I made it update the client when the inv changes. This is for the fireworks stuff. One of them can blow a player's trousers off. Before the playerdoll showed you still wearing the pair of trousers that were flying across the room (the worn pair was a ghost of course). Now it updates properly.

I'm not entirely sure if this extends to the GM stealing thing. Probably it does.


Clobber's Edit - Smacky, I love the sounds of what you are coding with the fireworks :) I can't wait to blow some people's trousers off
« Last Edit: 07, March 2010, 16:13:49 by clobber »

Tags:
 

Related Topics

  Subject / Started by Replies Last post
0 Replies
1974 Views
Last post 04, March 2005, 16:11:05
by Gecko
15 Replies
7922 Views
Last post 23, November 2005, 15:54:36
by Unislash
17 Replies
1836 Views
Last post 21, March 2006, 07:52:04
by carasoph
4 Replies
934 Views
Last post 31, October 2006, 20:51:28
by Cleopatra2
5 Replies
1485 Views
Last post 29, December 2006, 16:12:37
by clobber