• There is NO official Otland's Discord server and NO official Otland's server list. The Otland's Staff does not manage any Discord server or server list. Moderators or administrator of any Discord server or server lists have NO connection to the Otland's Staff. Do not get scammed!
  • 2026 staff recruitment is open! Check it out and consider applying!

Tfs.exe crash on Windows after player abuses depot/container depot bug

F

ffranks

New Member
Joined
Jul 19, 2025
Messages
14
Reaction score
1
Hello everyone, how are you? I opened a new 7x server version, and I’m constantly being nuked by a player using the depot chest. After he nukes, the server freezes and only comes back after a restart. Obviously, he refused to explain how he does it (unfortunately, it’s always like that).


Here’s how it works and what I’ve already checked, in case anyone knows this bug:


The player, just recently leaving Rook, goes to any DP, usually in Thais, with only the brass set from Rook and a little GPS in the BP, no house, nothing. Not even items in the DP. He logs in and out once, then after that spends a few minutes standing in front of the DP. When he logs out again, the whole server crashes. This activity lasts only a few minutes, at most 5 to 10 minutes.


Since I already know who the player is, their IP, etc., I’ve been monitoring him. I saved several copies while he was doing the process to see what he was putting in the depot, and there are no items — always empty. The character has no items, nothing. He simply does something with the depot chest that, upon login, breaks everything.


I’ve checked all reported bugs of this kind and only found things related to leavehouse, which fill up the DP and crash it, or characters who fill the DP with items causing lag/bugs, but nothing like this. Has anyone ever seen something like this?


My OT is a TFS <1x for version 7x.


Attached is my players.cpp.
Post automatically merged:

Actually, it’s not only related to the depot, because I deleted his accounts and blocked the IP, but he managed to reset the IP since that’s easy to do. By creating a character in Rook, without doing anything, he logs in and within 3 minutes everything crashes. I have no idea what it could be.
 

Attachments

Last edited:
Sort by date Sort by votes
This type of bug/exploit is fairly well-known on TFS 1.x servers (and also occurred in some 0.4 forks) when manipulating special containers like the depot chest or inbox.
What's happening is that the player is likely forcing the server to attempt to attack with an item that shouldn't be usable in combat (e.g., attempting to use the depot chest as a weapon, moving it into battle slots, or casting "use/attack" from a protected container).
This generates an infinite loop or an access violation that hangs the server until it's restarted. --- Most Common Causes
1. Lack of validation in canAttack / onUse The server doesn't properly validate whether the item used to attack is valid (e.g., it shouldn't be able to attack chests, folders, depots, inboxes, mail, etc.).
2. Special containers opened as weapons The player drags the depot chest or reward chest into their hand, or uses it as if it were a weapon, and the engine doesn't block it.
3. Manipulated packets (bot/proxy) They send a look, use, or attack with the depot chest's item ID directly via packet injection.
 
Upvote 0 Downvote
I did a test and left it without depot, and he was still able to nuke it within seconds with a newly created character from Rook. One thing I did now was disable the classicEquipmentSlots, which allowed holding any item in hand, etc. In parallel, I banned his IP range while I investigate. Regarding those issues you listed, do you know how they were normally resolved, etc.?
 
Upvote 0 Downvote
ffranks said:
I did a test and left it without depot, and he was still able to nuke it within seconds with a newly created character from Rook. One thing I did now was disable the classicEquipmentSlots, which allowed holding any item in hand, etc. In parallel, I banned his IP range while I investigate. Regarding those issues you listed, do you know how they were normally resolved, etc.?
Click to expand...
This bug is actually quite strange, I've never heard of it for years using otserver, I'm curious, could you tell us what its source really is?
 
Upvote 0 Downvote
It’s an OTX server, the sources I used are from one that was even used in SoftCore, an old 7.4 OT. I don’t know if you’re familiar with it — it’s a much older TFS.
Post automatically merged:

At first, I thought it was the depot, because he would go to the depot, stay there for a few seconds, then log out and everything would crash. Later, I removed the depots to test it, and he switched to another character (always from the same IP), went to the depot but there was no depot chest anymore, and in the middle of the protection zone he simply logged out and everything crashed.


He even told me, “there are more bugs…” and after that he created another character in Rook. Within just a few minutes, without even killing one rat because the experience rate is 0, everything crashed again.
 
Upvote 0 Downvote
Yes, I saved, and I didn’t find any abnormal item — he has just the Rook set and some gold. He can do this with any character. At the moment the crash happens, the OT freezes so it’s impossible to save, but when he logs in I keep spamming save to try to capture as close as possible to the exact second of the crash. So far, nothing abnormal.

Before, I had classicEquipmentSlots = true, which meant you could equip anything in the arrow slot, in the hands, etc. Now it only accepts the correct items — let’s see if that fixes it. Since I banned his IP range, I believe he’ll only be able to get in again if he resets his router or tries from another PC.
Post automatically merged:

i got him.

He was using the depot to bug, but since I removed the depot, now he is using the sewer to bug. He does something with the sewer item and then goes to the protection zone and logs out. When he logs out, the server crashes. In other words, he is bugging the OT with something related to containers, as the friend above mentioned. Do you have any idea? My TFS is 0.3 as I just confirmed here
 
Last edited:
Upvote 0 Downvote
TFS 0.4:
- there is a well known SQL freez/crash on this branch, some people optimize MySQL/MariaDB to work faster to make it crash less often (10-100x less often with ~4 GB RAM limit for SQL)

TFS 0.4/OTX 0.1/OTX 0.2 (old 0.2):
- there is an account ban crash/freez and OTC special code freez, both OTC 'IF' and some ban code send packet from protocolgame.cpp using network thread instead of dispatcher thread (only C++ thread allowed to send packets from OTS in TFS 0.x) - both may crash OTS or make it freez forever
 
Upvote 0 Downvote
Back
Top