How to cause a segfault 101 (potential security hole)

DecoDeco Join Date: 2010-04-10 Member: 71288Members, WC 2013 - Shadow
edited February 2014 in Modding
Hello!

If typing "exit" in console is too conventional for you, here is another way to close your game (via a segfault):

local boneCoords = Client.GetLocalPlayer()
local coords = boneCoords:Get(9999999)
Print("%s", tostring(coords.origin.x))

Yay, access violation!

I haven't checked PostArray, RenderModelArray, PointArray, etc.

This is a potential security hole, as you can read any of the game's memory (using the bit library to extract the values from the floats).
Though, the only sensitive thing I can think of is the current Steam/VAC client auth key, which could be used to impersonate someone on another server (SteamID and all, just like in GMod a while back).

Edit:
I used this thead to request a modding feature, but have now moved it to its own thread:
http://forums.unknownworlds.com/discussion/134228/bone-translation-scaling-and-rotation-in-lua?new=1

Comments

Sign In or Register to comment.