dniym / IllegalStack

A spigot based plugin dedicated to fixing glitches and exploits that have made it into final Minecraft releases.
GNU General Public License v3.0
135 stars 35 forks source link

Update for Book Dupe / Chunk Saving Glitch #100

Closed blockswerker closed 1 year ago

blockswerker commented 3 years ago

I found an addendum from 2019 re: garbage characters in books. These books are used to overload a chunk and facilitate a dupe. The settings mentioned (see link below) are not in the default Illegalstack config, and the addendum recommends adding them, which I've done. I've reloaded the config in-game and restarted my server but the offending books are not effected.

Are there updated instructions for removing these books?

https://www.spigotmc.org/resources/dupe-fixes-illegal-stack-remover.44411/update?update=252989

dniym commented 3 years ago

What version of Minecraft are you running? If this option does not appear in your config it is likely the dupe does not affect your version of spigot

blockswerker commented 3 years ago

Thanks for your reply! It's Paper-387 running Minecraft 1.15.2. For now I've installed some plugin that prevents new books from using non-US ASCII but it doesn't deal with existing books. I know none of this will fix the underlying bug in Minecraft but if it's harder to do that will discourage players from doing it.

dniym commented 3 years ago

The chunk overload dupe was fixed on the Minecraft side in 1.15 so the protection auto disables.

blockswerker commented 3 years ago

Interesting, because my players are definitely engaging in it!

dniym commented 3 years ago

This is probably the new book dupe that has recently surfaced, and turning on the chunk overload dupe protection won't do anything to prevent it.

if they are abusing the new one (which affects 1.13-1.16.4) you should have messages like this in your console:

[19:58:56] [Server thread/ERROR]: Failed to save player data for (username)

they would also disconnect. If this is the case those players are using a hacked client which sends a special packet which crashes the client and prevents the inventory from saving.

You should be able to search your log files for "Failed to save player data for" and you'll immediately know which players have been duping and can roll them back / ban them. Pretty crappy dupe when it tells on the player for doing it.

In the meantime I would suggest you enable the disable all books protection until a better fix can be found, it's probably going to require blocking the malformed packet which is typically something IllegalStack does not deal with.

To enable this feature use the following command: /istack toggle DisableBookWriting

This SHOULD prevent them from being able to create books period until a better fix is found.

J3fflo commented 3 years ago

BRUH, rly, new book dupe?! Do u guys have some more info about it? I play on an anarchy server where there weren't any major dupes in the last 2 years (the server runs paper 1.13.2). The admins patch the dupes really quick, so if you would be kind enough to tell me more about the dupe it would be really helpful, anyway, thx :smiley:

dniym commented 3 years ago

https://youtu.be/1agB946DTa0

s1h4d0w commented 3 years ago

Just saw this in my chat, seems like it's working. MC 1.12 with IllegalStack 2.2.1a: image

dniym commented 1 year ago

IllegalStack version 2.8 is now out, if you are still experiencing this issue please open a new ticket.