Maiori44 / Xilef

Small bot with commands, minigames and an economy system
7 stars 10 forks source link

Exploit to effectively deactivate Xilef #62

Open Fabizocker456 opened 2 years ago

Fabizocker456 commented 2 years ago

Brainfuck is executed in the main thread. Therefore, running e.g. +[+-] stalls Xilef globally for a few seconds. Spamming &brainfuck sandbox +[-+] can stall Xilef. I tried it out in a personal server, and he wouldn't respond in any other server. If this doesn't get patched quickly, Xilef could be made unusable, since accounts and servers are easily created with spam email addresses.

Maiori44 commented 2 years ago

every command is executed on the main thread, which might be an issue in general I'm considering using async functions, but it may need something more complex

Maiori44 commented 2 years ago

if anyone can figure out how to make the bot run multiple commands at once I can fix the rest ~@LJMSU~

LJMSU commented 2 years ago

thinking

Maiori44 commented 2 years ago

I will fix this issue, but I first need to figure out how to run multiple commands at once, @LJMSU could help there

Fabizocker456 commented 2 years ago

Y clarification needed?

Maiori44 commented 2 years ago

not sure, @LJMSU put that

LJMSU commented 2 years ago

You don't need to put in a clarification. Other people can also add clarification. For example, someone suggesting methods on how to do this.

Maiori44 commented 2 years ago

You don't need to put in a clarification. Other people can also add clarification. For example, someone suggesting methods on how to do this.

so issues "need clarification" when they lack a solution..? that sounds odd

LJMSU commented 2 years ago

explosion