wc3campaigns
WC3C Homepage - www.wc3c.netUser Control Panel (Requires Log-In)Engage in discussions with other users and join contests in the WC3C forums!Read one of our many tutorials, ranging in difficulty from beginner to advanced!Show off your artistic talents in the WC3C Gallery!Download quality models, textures, spells (vJASS/JASS), systems, and scripts!Download maps that have passed through our rigorous approval process!

Go Back   Wc3C.net > Warcraft III Modding > Developer's Corner > Triggers & Scripts
User Name
Password
Register Rules Get Hosted! Chat Pastebin FAQ and Rules Members List Calendar



Closed Thread
 
Thread Tools Search this Thread
Old 04-26-2009, 11:10 PM   #16
Toadcop
BuranX
 
Toadcop's Avatar
 
Join Date: Jul 2006
Posts: 1,886

Submissions (4)

Toadcop is just really nice (299)Toadcop is just really nice (299)

Approved Map: TcXSpell Making Session 10 Winner

Send a message via ICQ to Toadcop
Default

Quote:
found out eventually
well we hoped it would stay at eventually... no sense to provoke it at all.
__________________
Toadcop is offline  
Sponsored Links - Login to hide this ad!
Old 04-26-2009, 11:15 PM   #17
Vexorian
Free Software Terrorist
 
Vexorian's Avatar


Technical Director
 
Join Date: Apr 2003
Posts: 14,898

Submissions (37)

Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)

Hero Contest #3 - 2nd Place

Default

meh I really never expected to have a fight abotu full disclosure vs. security by obscurity in wc3c outside of off-topic.

Heh 2009 will be a fun year.
__________________
Zoom (requires log in)Wc3 map optimizer 5.0
Someone should fix .wav sound in this thing.
Zoom (requires log in)JassHelper 0.A.2.A
Turns your simple code into something that is complicated enough to work.
Faster != more useful
Vexorian is offline  
Old 04-26-2009, 11:23 PM   #18
Anitarf
Procrastination Incarnate


Development Director
 
Join Date: Feb 2004
Posts: 8,177

Submissions (19)

Anitarf has a brilliant future (903)Anitarf has a brilliant future (903)Anitarf has a brilliant future (903)Anitarf has a brilliant future (903)Anitarf has a brilliant future (903)Anitarf has a brilliant future (903)Anitarf has a brilliant future (903)Anitarf has a brilliant future (903)

2008 Spell olympics - Fire - SilverApproved Map: Old School Alliance TacticsHero Contest #2 - 3rd PlaceSpell making session 2 winner

Default

Quote:
Originally Posted by Vexorian
Anitarf, try testing the map...
Is it safe?

Well, considering the map is still there and Toadcop isn't banned yet I'll assume it is. However, it doesn't work on my version of WC3 (1.21b) so I still don't really know what it does.
__________________
Anitarf is offline  
Old 04-26-2009, 11:40 PM   #19
Toadcop
BuranX
 
Toadcop's Avatar
 
Join Date: Jul 2006
Posts: 1,886

Submissions (4)

Toadcop is just really nice (299)Toadcop is just really nice (299)

Approved Map: TcXSpell Making Session 10 Winner

Send a message via ICQ to Toadcop
Default

yes it currently can run only on 1.22 1.23 but it's not a great deal to adapt to every version =)
__________________
Toadcop is offline  
Old 04-26-2009, 11:55 PM   #20
Strilanc
User
 
Strilanc's Avatar
 
Join Date: Jun 2007
Posts: 917

Submissions (4)

Strilanc has a spectacular aura about (131)

2008 Spell olympics - Fire - Gold

Default

What kind of trust does the VM put into the byte code? Jass feels like a safe little happy land because nothing you do lets you access stuff outside the VM. But if the VM doesn't do bounds checks or anything on the byte code, then Blizzard has a very serious problem.
__________________
Don't pay attention to this signature, it's self-contradictory.
Strilanc is offline  
Old 04-27-2009, 12:08 AM   #21
PipeDream
Moderator
 
PipeDream's Avatar


Code Moderator
 
Join Date: Feb 2006
Posts: 1,405

Submissions (6)

PipeDream is a glorious beacon of light (463)PipeDream is a glorious beacon of light (463)PipeDream is a glorious beacon of light (463)PipeDream is a glorious beacon of light (463)

Default

Basically every thing you can do to crash warcraft is an opportunity. To my knowledge though this is the first time anyone has actually written the exploit.

The good news is that this required a new bug: whatever the bytecode in zOmgFuncs-shifted-by-one does to disable array bounds checking. So, blizz might fix that instead of fixing code variables.
__________________
PipeDream is offline  
Old 04-27-2009, 02:05 AM   #22
Bobo_The_Kodo
oO
 
Bobo_The_Kodo's Avatar
 
Join Date: Jul 2008
Posts: 580

Bobo_The_Kodo has a spectacular aura about (109)Bobo_The_Kodo has a spectacular aura about (109)Bobo_The_Kodo has a spectacular aura about (109)Bobo_The_Kodo has a spectacular aura about (109)

Default

The map TC posted won't save for me -- I'm getting a syntax error on the second global block in the custom common.j, even though it's fine ...
Bobo_The_Kodo is offline  
Old 04-27-2009, 03:05 AM   #23
Vexorian
Free Software Terrorist
 
Vexorian's Avatar


Technical Director
 
Join Date: Apr 2003
Posts: 14,898

Submissions (37)

Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)

Hero Contest #3 - 2nd Place

Default

Quote:
Originally Posted by Toadcop
well we hoped it would stay at eventually... no sense to provoke it at all.
What's fun though is that if you didn't post that map we would never find out this bytecode execution stuff can be used to load arbitrary machine code...
__________________
Zoom (requires log in)Wc3 map optimizer 5.0
Someone should fix .wav sound in this thing.
Zoom (requires log in)JassHelper 0.A.2.A
Turns your simple code into something that is complicated enough to work.
Faster != more useful
Vexorian is offline  
Old 04-27-2009, 03:55 AM   #24
akolyt0r
In Flames
 
akolyt0r's Avatar
 
Join Date: Jan 2006
Posts: 1,153

Submissions (3)

akolyt0r has a spectacular aura about (120)

Default

exploit confirmed... works on Linux aswell.
__________________
akolyt0r is offline  
Old 04-27-2009, 04:27 AM   #25
Vexorian
Free Software Terrorist
 
Vexorian's Avatar


Technical Director
 
Join Date: Apr 2003
Posts: 14,898

Submissions (37)

Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)Vexorian has a reputation beyond repute (1062)

Hero Contest #3 - 2nd Place

Default

sure, I only tested it onWINE.
Of course, on Linux there's not much you can do besides removing all of WINE's dummy C drive.
__________________
Zoom (requires log in)Wc3 map optimizer 5.0
Someone should fix .wav sound in this thing.
Zoom (requires log in)JassHelper 0.A.2.A
Turns your simple code into something that is complicated enough to work.
Faster != more useful
Vexorian is offline  
Old 04-27-2009, 04:34 AM   #26
cosmicat
Probably AFK
 
cosmicat's Avatar
 
Join Date: Feb 2009
Posts: 635

cosmicat will become famous soon enough (71)cosmicat will become famous soon enough (71)cosmicat will become famous soon enough (71)

Default

What worries me is that it's difficult to get wc3 to run in Vista without giving it administrative permissions. And this thing definitely works in XP/Vista.
__________________
+++++++++++[>++++++>++++++++++>++++++++++<<<-]>+.>+.++++.+>-.----.------.--.<.
cosmicat is offline  
Old 04-27-2009, 04:48 AM   #27
ToukoAozaki
extends net.wc3c.Jasser
 
Join Date: Jun 2008
Posts: 336

Submissions (5)

ToukoAozaki will become famous soon enough (60)ToukoAozaki will become famous soon enough (60)ToukoAozaki will become famous soon enough (60)

Send a message via MSN to ToukoAozaki
Default

All I get is a fatal error (ACCESS_VIOLATION at 001B:011FBD51). What exactly is going on?
ToukoAozaki is offline  
Old 04-27-2009, 05:08 AM   #28
cosmicat
Probably AFK
 
cosmicat's Avatar
 
Join Date: Feb 2009
Posts: 635

cosmicat will become famous soon enough (71)cosmicat will become famous soon enough (71)cosmicat will become famous soon enough (71)

Default

You're probably running a version of wc3 that isn't 1.22 or 1.23. That or your system is otherwise "safe" from this...thing.
(Please don't take this as an indication that you actually are safe. It's a guess, and probably wrong.)
__________________
+++++++++++[>++++++>++++++++++>++++++++++<<<-]>+.>+.++++.+>-.----.------.--.<.

Last edited by cosmicat : 04-27-2009 at 05:09 AM.
cosmicat is offline  
Old 04-27-2009, 06:17 AM   #30
Drain Pipe
User
 
Join Date: May 2006
Posts: 129

Drain Pipe has little to show at this moment (3)

Default

what does it do?
Drain Pipe is offline  
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT. The time now is 11:46 PM.


Affiliates
The Hubb The JASS Vault Clan WEnW Campaign Creations Clan CBS GamesModding Flixreel Videos

Powered by vBulletin (Copyright ©2000 - 2017, Jelsoft Enterprises Ltd).
Hosted by www.OICcam.com
IT Support and Services provided by Executive IT Services