Crash Exploit - Team Crash

[GoogleCodeExporter]

What steps will reproduce the problem?
Attack: t is a very low number (I've reproduced it with -2000000000)
Conditions: the attacker is connected, the attacker has no admin, and the 
"team" mutator is on

See server.cpp for the exploit

What is the expected output? What do you see instead?
The server crashes, so the crash.txt is copied from the console.

Access to this is restricted, to protect the public servers until the next 
release.

Original issue reported on code.google.com by theonlypwner on 17 Aug 2013 at 2:55

Attachments:

• server.cpp
• crash.txt

[GoogleCodeExporter]

This is fixed in TFS 30379, which also fixes Issue 140.

Original comment by theonlypwner on 24 Aug 2013 at 2:22

• Changed state: Fixed
• Removed labels: Restrict-View-Commit

[GoogleCodeExporter]

My server is immune to this exploit.

Original comment by theonlypwner on 24 Aug 2013 at 2:22

[GoogleCodeExporter]

Original comment by theonlypwner on 3 Apr 2014 at 1:42

• Changed state: Verified