Page MenuHomeFeedback Tracker

[Security] Can open Debug Console in MP
Closed, ResolvedPublic

Description

If I run this on client in MP

  • spawn {

createDialog "RscDisplayArcadeMap";
waitUntil {!isNull findDisplay 26};
uinamespace setvariable ["gui_displays", [findDisplay 26] + (uinamespace getvariable "gui_displays")];
closeDialog 0;
createDialog "RscDisplayMPInterrupt";
};

Debug Console becomes available and is possible to execute global commands across network with global exec, or server exec if you want.

Proposed solution:

Change Line 15 in initDisplay.sqf from

((uinamespace getvariable "gui_displays") find (finddisplay 26) in [0,1])

to

((uinamespace getvariable "gui_displays") find (finddisplay 26) in [0,1] && !isMultiplayer)

Details

Legacy ID
1635569288
Severity
None
Resolution
Fixed
Reproducibility
Always
Category
Scripting
Steps To Reproduce

see above

Event Timeline

Killzone_Kid edited Additional Information. (Show Details)
Killzone_Kid set Category to Scripting.
Killzone_Kid set Reproducibility to Always.
Killzone_Kid set Severity to None.
Killzone_Kid set Resolution to Fixed.
Killzone_Kid set Legacy ID to 1635569288.May 7 2016, 6:18 PM

Fixed in the upcoming dev build update

Sorry for distracting you from your Zeus work, Karel, but recent changes made to accommodate debug console as include in Params array made it even easier to launch debug console on client providing all the benefits of remote execution.

createdialog 'RscDisplayDebugPublic'; //all it needs now

MadDogX added a subscriber: MadDogX.May 7 2016, 6:18 PM

Mass closing tickets marked as resolved more than 1 month ago.

If the issue is in fact not resolved, please create a new ticket referencing this one and ask for it to be re-opened.