hans henrik
Active Member
member Vizjus at https://otland.net/members/vizjus.230545/ was recently banned, why?
and if it's because he posted the OT crasher script at OpenTibia - Yurots crasher (https://otland.net/threads/yurots-crasher.262962/) , that was totally unwarranted.
the "join party leader that does not exist to crash the server" is an ancient known crash method that was fixed prior to OTServ 0.5.0 release (was actually fixed sometime in 0.5.0-dev, 0.4.0 is vulnerable, YurOTS was based on 0.5.0-dev and was vulnerable, and 0.5.0-release is not vulnerable, and the fix is as simple as adding
and if it's because he posted the OT crasher script at OpenTibia - Yurots crasher (https://otland.net/threads/yurots-crasher.262962/) , that was totally unwarranted.
the "join party leader that does not exist to crash the server" is an ancient known crash method that was fixed prior to OTServ 0.5.0 release (was actually fixed sometime in 0.5.0-dev, 0.4.0 is vulnerable, YurOTS was based on 0.5.0-dev and was vulnerable, and 0.5.0-release is not vulnerable, and the fix is as simple as adding
if(!creature){return;}
before Player* target = dynamic_cast<Player*>(creature);
under Protocol76::parseJoinParty
in protocol76.cpp )