Author Topic: [fixed] Bugs in megaglest-3.3.5beta7.1  (Read 1372 times)

tomreyn

  • Local Moderator
  • Airship
  • ********
  • Posts: 2,764
    • View Profile
    • MegaGlest - the free and open source cross platform 3D real-time strategy game
[fixed] Bugs in megaglest-3.3.5beta7.1
« on: 16 June 2010, 05:02:21 »
1. When you are starting a server but the port is already in use you get an error message (which doesn't look nice, yet). Once you clicked that error message away, you end up on the server configuration screen. This doesn't make sense since you cannot run the server if it cannot bind to the server port. Clicking any button will bring you back to the previous screen. That's fine for now, it's merely a matter of good looks and hardly a nuisance.

2. When announcing a server to the master server, it's currently possible to inject arbitrary values for the various fields. This allows for falsifying information on a server. It also allows for injecting values unexpected by the client. The client will then display error messages whenever it tries to parse the server list. This currently boild down to a DoS situation, since with the error messages popping up as soon as the master server info is parsed, clients will not be able to connect to any server whatsoever.

It's also possible to add and remove fields. This allows, for example, to promote fake servers listening on arbitrary IP addresses (currently only on the hard coded default port, though).
atibox: Ryzen 1800X (8 cores @3.6GHz), 32 GB RAM, MSI Radeon RX 580 Gaming X 8G, PCI subsystem ID [1462:3417], (Radeon RX 580 chipset, POLARIS10) @3440x1440; latest stable Ubuntu release, (open source) radeon (amdgpu) / mesa video driver
atibox (old): Core2Quad Q9400 (4 cores @2.66GHz), 8 GB RAM, XFX HD-467X-DDF2, PCI subsystem ID [1682:2931], (Radeon HD 4670, RV730 XT) @1680x1050; latest stable Ubuntu release, (open source) radeon / mesa video driver
notebook: HP envy13d020ng
internet access: VDSL2+

· · · How YOU can contribute to MG · Latest development snapshot · How to build yourself · Megapack techtree · Currently hosted MG games · · ·

softcoder

  • MegaGlest Team
  • Battle Machine
  • ********
  • Posts: 2,239
    • View Profile
Re: Bugs in megaglest-3.3.5beta7.1
« Reply #1 on: 17 June 2010, 06:19:15 »
Ok did some small trivial changes to the master server to stop basic injection attacks, etc.

softcoder

  • MegaGlest Team
  • Battle Machine
  • ********
  • Posts: 2,239
    • View Profile
Re: Bugs in megaglest-3.3.5beta7.1
« Reply #2 on: 24 June 2010, 05:10:44 »
Ok these items are fixed in beta11.

tomreyn

  • Local Moderator
  • Airship
  • ********
  • Posts: 2,764
    • View Profile
    • MegaGlest - the free and open source cross platform 3D real-time strategy game
Re: Bugs in megaglest-3.3.5beta7.1
« Reply #3 on: 24 June 2010, 08:52:06 »
1. When you are starting a server but the port is already in use you get an error message (which doesn't look nice, yet). Once you clicked that error message away, you end up on the server configuration screen. This doesn't make sense since you cannot run the server if it cannot bind to the server port. Clicking any button will bring you back to the previous screen. That's fine for now, it's merely a matter of good looks and hardly a nuisance.

Thanks, the behaviour and the error message are now improved. However, if the port is already in use by another application then, whenever you the 'Control' setting of a player to 'network' (this can happen accidentially, and you don't even get to see what you switched it to) the message about the port being blocked will pop up again. It might be better to just have the message say "Can not bind to network port 61357. \nNetwork slots disabled." and to disable network slots until you leave and re-enter the game hosting menu.

This is really a minor issue, but I think it would make the game even nicer for new players.
atibox: Ryzen 1800X (8 cores @3.6GHz), 32 GB RAM, MSI Radeon RX 580 Gaming X 8G, PCI subsystem ID [1462:3417], (Radeon RX 580 chipset, POLARIS10) @3440x1440; latest stable Ubuntu release, (open source) radeon (amdgpu) / mesa video driver
atibox (old): Core2Quad Q9400 (4 cores @2.66GHz), 8 GB RAM, XFX HD-467X-DDF2, PCI subsystem ID [1682:2931], (Radeon HD 4670, RV730 XT) @1680x1050; latest stable Ubuntu release, (open source) radeon / mesa video driver
notebook: HP envy13d020ng
internet access: VDSL2+

· · · How YOU can contribute to MG · Latest development snapshot · How to build yourself · Megapack techtree · Currently hosted MG games · · ·