eternalcodes / EternalJK

Effort to maintain and improve OpenJK
GNU General Public License v2.0
60 stars 23 forks source link

[MP] Merge ioquake/ioq3@b61e299 #94

Closed Yberion closed 5 years ago

Yberion commented 5 years ago

Fix exploit to reset player by sending wrong serverId

If client sends wrong serverId but is already active in the world (CS_ACTIVE) don't resend initial gamestate for the map. This isn't a valid situation. The player should be CS_CONNECTED or CS_PRIMED.

Resending gamestate to an active player will cause them to respawn without dying or disconnecting. If the player had a CTF flag it gets lost until the map is changed or restarted.

Reported by Ensiform at: https://bugzilla.icculus.org/show_bug.cgi?id=6324