ATTENTION! Don't run maps you've downloaded!
Offline
ohaz has writtenwhich could cause huge problems for you (like viruses or other stuff).
^ this.
probably because of the trigger_if in the map editor.
Forum
CS2D General ATTENTION! Don't run maps you've downloaded! ohaz has written^ this.
probably because of the trigger_if in the map editor.
I think I got it now..
Ahmad has writtenDoes it work with offline servers as well?
ohaz has writtenUNTIL IT'S FIXED: Please DON'T start maps you've downloaded from servers on your pc / server! It's for your own safety!
Lol..hah...
no, i dont think cause how the hell can you download maps with offline servers.. well i guess we should all have the same warning for not running any downloaded scripts in the file archive since those could potentially do the same
cs2d's lua should have os. and io. tables set to nil by default so that nothing can access it.
FlooD: Also on main state(on server.lua)? no, i disagree. Why? it destroys the playing experience, for example saving, scripted bans, temporary vip, etc.Well, i'm agree if Trigger_If use separated state or use
Starkkz script to run downloaded map. Sparty: I mean when I start an offline server with the infected maps. Ahmad: It is dangerous in offline servers, too.@
FlooD: I don't think they should disable io and os functions completly. It would be nice if they would be nice to have functions wich are restricted only to save and read in the CS2D directory. and also disable some functions like os.execute and os.exit. I don't want to have absolutly no access to the file system. It would be aweful to have no way for saving information.Also functions like require sould be disabled. I don't have any experience with LibFunctions at all but I think the could access everything anyways.
edited 1×, last 25.01.14 02:40:48 pm
Whenever you start a downloaded map there could be the danger that it contains 'viruses'. It's not all about trigger_if. the trigger is just the key.
Starkkz: You have to lock freehook function and all stuff like that, too. 1
2
3
4
2
3
4
io.popen = nil os.execute = nil os.remove = nil os.rename = nil
Avo: I should make a list of functions that must be disabled or protected, you can easily hack my last Lua script with getfenv and return to the main state function environment (The values stored in the _G table), that would remove the protection. However, my next theory is protecting the C functions with Lua functions that have a redefined function environment, so when you try to get the function environment of a C function, you won't have access to the _G table of the main state. FlooD has writtenwhat i meant was
1
2
3
4
2
3
4
io.popen = nil os.execute = nil os.remove = nil os.rename = nil
then you need some libraries to get list of directories
TimeQuesT has writtenI thought it was impossible to transfer virus in a Game like CS2D.
DC: ) I do not guarantee that this will work 100% correctly.
How to use:
1.Place the executable inside your cs2d root folder.
(The one which contains all files)
2.Execute it.
3.Check results.
You can download it here:
DOWNLOAD | dynamic libgcc (WIN32 only)
DOWNLOAD | static libgcc (Should work correctly | WIN32 only)
DOWNLOAD (non-bplaced link)
edited 1×, last 04.02.14 04:37:32 pm