Freeroam security patch - Githubissues

multitheftauto / mtasa-resources

This project maintains a list of up-to-date resources that come with Multi Theft Auto.

https://multitheftauto.com

MIT License

151 stars 151 forks source link

Freeroam security patch #516

Closed IIYAMA12 closed 2 months ago

IIYAMA12 commented 2 months ago

Currently the Freeroam Remote Player Call Functions it's parameters can be freely manipulated by any client that uses code injections.

What does this pull request includes?

Adding parameter validation to the Remote Player Call Functions. (main patch)
Some other tweaks to future proof some of the Remote Player Call Functions.
- Note some of my changes were already patched at: https://github.com/multitheftauto/mtasa-resources/blob/c96bdd5297cf180f947596c1eded8929b4982e6c/%5Bgameplay%5D/freeroam/fr_server.lua#L600 but hardcoded is always better.