Author Topic: Found another possible bug/exploit tonight while confirming the jail thing  (Read 1876 times)

0 Members and 1 Guest are viewing this topic.

Offline MrPresident

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 2728
  • Karma: 430
    • |G4P| Gman4President
Here is a list of steps that will help you replicate the bug on your own. This may be something you already know about and cant fix.. or maybe not. =)

Get permission from someone before doing this to them.. it'll make them have to reconnect to the server to fix themself...

1. Ragdoll someone. They will become a ragdoll owned by n/a
2. Physgun them to own them...
3. Simply go to Utilities > Client Clean Up > Remove all props (this is not the Simple Prop Protection cleanup.. this is the built-in one.
4. Their ragdoll will disappear and no matter what you do you cant unragdoll them. They retain the isragdolled flag and cant do anything. If they suicide they'll respawn spectating the person who deleted them/owned them. In order to fix this, they'll have to disconnect and reconnect.

This exploit is shared between SPP and ULX. I think a possible fix would be when you spawn the ragdoll, to spawn it owned either by the person who's body it is, or owned by the world. I think you guys already have it set up to where you cant delete the ragdoll with the tool gun, so spawning it owned by world would prevent players from owniing them and removing them with cleanup.

 ;D

Offline Megiddo

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 6214
  • Karma: 394
  • Project Lead
Re: Found another possible bug/exploit tonight while confirming the jail thing
« Reply #1 on: December 10, 2007, 03:58:28 PM »
There's not a whole lot we can do about rogue third-party scripts that do dumb things like assign world props to players. Even worse is that SPP is letting you remove them.
Experiencing God's grace one day at a time.