Re: [hlds] ClipRayToVPhysics crash and other related crash
Steven, Brian here has managed to create 3 different topics, in his first one before remaking this one he posted the link to his plugin: https://forums.alliedmods.net/showthread.php?p=841590 Kyle On Wed, Aug 5, 2009 at 10:50 AM, Steven Crothers wrote: > Whats your plugin? I'm using all these rules. > iptables -I INPUT -p udp -m string --algo bm --string 'soundscape_flush' -j > DROP > iptables -I INPUT -p udp -m string --algo bm --string 'mem_dump' -j DROP > iptables -I INPUT -p udp -m string --algo bm --string 'physics_select' -j > DROP > iptables -I INPUT -p udp -m string --algo bm --string 'dumpcountedstrings' > -j DROP > iptables -I INPUT -p udp -m string --algo bm --string 'dbghist_dump' -j > DROP > iptables -I INPUT -p udp -m string --algo bm --string 'dumpeventqueue' -j > DROP > iptables -I INPUT -p udp -m string --algo bm --string 'dump_globals' -j > DROP > iptables -I INPUT -p udp -m string --algo bm --string > 'physics_debug_entity' > -j DROP > iptables -I INPUT -p udp -m string --algo bm --string 'dump_entity_sizes' > -j > DROP > iptables -I INPUT -p udp -m string --algo bm --string 'dumpentityfactories' > -j DROP > iptables -I INPUT -p udp -m string --algo bm --string 'dump_terrain' -j > DROP > iptables -I INPUT -p udp -m string --algo bm --string 'mp_dump_timers' -j > DROP > iptables -I INPUT -p tcp -m string --algo bm --string 'soundscape_flush' -j > DROP > iptables -I INPUT -p tcp -m string --algo bm --string 'mem_dump' -j DROP > iptables -I INPUT -p tcp -m string --algo bm --string 'physics_select' -j > DROP > iptables -I INPUT -p tcp -m string --algo bm --string 'dumpcountedstrings' > -j DROP > iptables -I INPUT -p tcp -m string --algo bm --string 'dbghist_dump' -j > DROP > iptables -I INPUT -p tcp -m string --algo bm --string 'dumpeventqueue' -j > DROP > iptables -I INPUT -p tcp -m string --algo bm --string 'dump_globals' -j > DROP > iptables -I INPUT -p tcp -m string --algo bm --string > 'physics_debug_entity' > -j DROP > iptables -I INPUT -p tcp -m string --algo bm --string 'dump_entity_sizes' > -j > DROP > iptables -I INPUT -p tcp -m string --algo bm --string 'dumpentityfactories' > -j DROP > iptables -I INPUT -p tcp -m string --algo bm --string 'dump_terrain' -j > DROP > iptables -I INPUT -p tcp -m string --algo bm --string 'mp_dump_timers' -j > DROP > > On Wed, Aug 5, 2009 at 1:35 PM, Brian Rak wrote: > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > My plugin fixes this, you don't need firewall rules to do it. Plus, > > there's many commands that can be exploited to do this, it's not > > limited to just physics_select > > > > - - Brian "devicenull" Rak > > -BEGIN PGP SIGNATURE- > > Version: GnuPG v1.4.9 (MingW32) > > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > > > iEYEARECAAYFAkp5wuAACgkQdYIfzEQqW+lD1wCfY+N8RPTgEOLbc9FFq3+b+KSO > > L0oAoL1ftvH22ZXdmINYngvtnDcAq4DY > > =MtDE > > -END PGP SIGNATURE- > > > > > > ___ > > To unsubscribe, edit your list preferences, or view the list archives, > > please visit: > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
Whats your plugin? I'm using all these rules. iptables -I INPUT -p udp -m string --algo bm --string 'soundscape_flush' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'mem_dump' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'physics_select' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dumpcountedstrings' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dbghist_dump' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dumpeventqueue' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dump_globals' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'physics_debug_entity' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dump_entity_sizes' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dumpentityfactories' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dump_terrain' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'mp_dump_timers' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'soundscape_flush' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'mem_dump' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'physics_select' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dumpcountedstrings' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dbghist_dump' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dumpeventqueue' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dump_globals' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'physics_debug_entity' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dump_entity_sizes' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dumpentityfactories' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dump_terrain' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'mp_dump_timers' -j DROP On Wed, Aug 5, 2009 at 1:35 PM, Brian Rak wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > My plugin fixes this, you don't need firewall rules to do it. Plus, > there's many commands that can be exploited to do this, it's not > limited to just physics_select > > - - Brian "devicenull" Rak > -BEGIN PGP SIGNATURE- > Version: GnuPG v1.4.9 (MingW32) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > iEYEARECAAYFAkp5wuAACgkQdYIfzEQqW+lD1wCfY+N8RPTgEOLbc9FFq3+b+KSO > L0oAoL1ftvH22ZXdmINYngvtnDcAq4DY > =MtDE > -END PGP SIGNATURE- > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
iptables -I INPUT -p udp -m string --algo bm --string 'physics_select' -j DROPRequires: ipt_string firewall module. Thats the IPTables command that fully blocks this attack. Feel free to use it on your own servers. The attack was generating from a clan called "MIA" they run a Jailbreak server. They also seem to be attacking anyone who runs a map with "MIA" in the name from what I can gather. Hopefully this will help you guys out. Also feel free to block more commands with that as well. For our Windows counter parts I have no idea what your going to use. If this has helped even one person, please show your support by simply visiting our community, joinuv.com. On Wed, Aug 5, 2009 at 3:10 AM, Kenny Loggins wrote: > I think I just was hit by the same thing that hit you. Everyone of my > server > just lagged out big-time and I had to restart everything. I was watching > the > person do it server by server.. > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > Sent: Tuesday, August 04, 2009 9:05 PM > To: 'Half-Life dedicated Win32 server mailing list' > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > Several of my servers just lagged severely. I don't know many details, but > it was on at least three srcds instances roughly the same time on two > different machines on two different networks. Smells like exploit. > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins > Sent: Tuesday, August 04, 2009 6:53 PM > To: Half-Life dedicated Win32 server mailing list > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > Whatever it is I'm getting hit hardcore right after this email went > out. I hope someone can figure something out. > > > On Aug 4, 2009, at 6:30 PM, Ian wrote: > > > Found something that may be of information to those being having their > > servers crashed before being able to get their IP. > > > > > > http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html > > > > Newly discovered exploit. And there is a supposed fix for it for > > Sourcemod users: > http://forums.alliedmods.net/showthread.php?t=93934&page=5 > > > > Post 43 is where you want to look. The rcon_lock plugin updated just > > days after the exploit was discovered. > > > > Hope this helps. > > > > - Ian > > > > > > > > > > Tony Paloma wrote: > >> Interesting. After it crashes, it makes the same trace? Could be two > >> unrelated crashes. > >> > >> -----Original Message- > >> From: hlds-boun...@list.valvesoftware.com > >> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle > >> Sanderson > >> Sent: Tuesday, August 04, 2009 2:01 AM > >> To: Half-Life dedicated Win32 server mailing list > >> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > >> > >> Tony, as far as I can tell this is the case. > >> > >> One of my admins who was looking in HLSW found this a second before > >> the > >> server crashed. > >> 00:09:09 L 08/02/2009 - 17:43:43: "Add serverdown to friends to > >> bu<286><>" connected, address "75.39.129.249:27005" > >> > >> Anyways, Yes. This is most definitely related. > >> Kyle. > >> > >> On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers > >> wrote: > >> > >> > >>> I'm not sure what the command is, but I'm 99% positive it was the > >>> last > >>> person for my servers... one of the community members egged him on > >>> and > >>> there > >>> are some xfire logs to substantiate the accusations. > >>> Something else I noticed, when his steam ID finally resolves, its > >>> been > >>> resolving with really low ID's - and not always the same. Like 42, > >>> 31, 29 > >>> ect. > >>> > >>> On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma > >>> > >>> wrote: > >>> > >>> > >>>> I'm not so sure it's the fault of the last person to connect. You > >>>> think > >>>> it's > >>>> because of a command? Do you know what the commands is? > >>>> > >>>> -Original Message- > >>>> From: hlds-boun...@list.valv
Re: [hlds] ClipRayToVPhysics crash and other related crash
I think I just was hit by the same thing that hit you. Everyone of my server just lagged out big-time and I had to restart everything. I was watching the person do it server by server.. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Tuesday, August 04, 2009 9:05 PM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Several of my servers just lagged severely. I don't know many details, but it was on at least three srcds instances roughly the same time on two different machines on two different networks. Smells like exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Tuesday, August 04, 2009 6:53 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Whatever it is I'm getting hit hardcore right after this email went out. I hope someone can figure something out. On Aug 4, 2009, at 6:30 PM, Ian wrote: > Found something that may be of information to those being having their > servers crashed before being able to get their IP. > > http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html > > Newly discovered exploit. And there is a supposed fix for it for > Sourcemod users: http://forums.alliedmods.net/showthread.php?t=93934&page=5 > > Post 43 is where you want to look. The rcon_lock plugin updated just > days after the exploit was discovered. > > Hope this helps. > > - Ian > > > > > Tony Paloma wrote: >> Interesting. After it crashes, it makes the same trace? Could be two >> unrelated crashes. >> >> -Original Message- >> From: hlds-boun...@list.valvesoftware.com >> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle >> Sanderson >> Sent: Tuesday, August 04, 2009 2:01 AM >> To: Half-Life dedicated Win32 server mailing list >> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash >> >> Tony, as far as I can tell this is the case. >> >> One of my admins who was looking in HLSW found this a second before >> the >> server crashed. >> 00:09:09 L 08/02/2009 - 17:43:43: "Add serverdown to friends to >> bu<286><>" connected, address "75.39.129.249:27005" >> >> Anyways, Yes. This is most definitely related. >> Kyle. >> >> On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers >> wrote: >> >> >>> I'm not sure what the command is, but I'm 99% positive it was the >>> last >>> person for my servers... one of the community members egged him on >>> and >>> there >>> are some xfire logs to substantiate the accusations. >>> Something else I noticed, when his steam ID finally resolves, its >>> been >>> resolving with really low ID's - and not always the same. Like 42, >>> 31, 29 >>> ect. >>> >>> On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma >>> >>> wrote: >>> >>> >>>> I'm not so sure it's the fault of the last person to connect. You >>>> think >>>> it's >>>> because of a command? Do you know what the commands is? >>>> >>>> -Original Message- >>>> From: hlds-boun...@list.valvesoftware.com >>>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven >>>> >>> Crothers >>> >>>> Sent: Saturday, August 01, 2009 4:02 PM >>>> To: Half-Life dedicated Win32 server mailing list >>>> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash >>>> >>>> I've gotten the same crash on my servers today. I've been >>>> harvesting his >>>> IP's (I cant confirm they are all him, but I've been banning the >>>> last >>>> connector before each crash) and blocking him via iptables. >>>> I'm getting one of my modders to work on an SM mod to attempt to >>>> block >>>> >>> the >>> >>>> console commands he's running. However is there any word from >>>> Valve on >>>> >>> the >>> >>>> subject? >>>> >>>> On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins >>>> wrote: >>>> >>>> >>>>> No I didn't check that and no crashes
Re: [hlds] ClipRayToVPhysics crash and other related crash
Someone must be out to get you guys. Piss anyone off lately? On Tue, Aug 4, 2009 at 7:23 PM, Kenny Loggins wrote: > Same for me TCadmin just restarted the service due to non responder. > Not at a pc so I can't look into it but it was about 6 servers all in > a 2 minute time frame. > > Sent from my iPhone > > On Aug 4, 2009, at 9:04 PM, "Tony Paloma" > wrote: > > > Several of my servers just lagged severely. I don't know many > > details, but > > it was on at least three srcds instances roughly the same time on two > > different machines on two different networks. Smells like exploit. > > > > -Original Message- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny > > Loggins > > Sent: Tuesday, August 04, 2009 6:53 PM > > To: Half-Life dedicated Win32 server mailing list > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > Whatever it is I'm getting hit hardcore right after this email went > > out. I hope someone can figure something out. > > > > > > On Aug 4, 2009, at 6:30 PM, Ian wrote: > > > >> Found something that may be of information to those being having > >> their > >> servers crashed before being able to get their IP. > >> > >> > > > http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html > >> > >> Newly discovered exploit. And there is a supposed fix for it for > >> Sourcemod users: > > http://forums.alliedmods.net/showthread.php?t=93934&page=5 > >> > >> Post 43 is where you want to look. The rcon_lock plugin updated just > >> days after the exploit was discovered. > >> > >> Hope this helps. > >> > >> - Ian > >> > >> > >> > >> > >> Tony Paloma wrote: > >>> Interesting. After it crashes, it makes the same trace? Could be two > >>> unrelated crashes. > >>> > >>> -Original Message- > >>> From: hlds-boun...@list.valvesoftware.com > >>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle > >>> Sanderson > >>> Sent: Tuesday, August 04, 2009 2:01 AM > >>> To: Half-Life dedicated Win32 server mailing list > >>> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > >>> > >>> Tony, as far as I can tell this is the case. > >>> > >>> One of my admins who was looking in HLSW found this a second before > >>> the > >>> server crashed. > >>> 00:09:09 L 08/02/2009 - 17:43:43: "Add serverdown to friends to > >>> bu<286><>" connected, address > >>> "75.39.129.249:27005" > >>> > >>> Anyways, Yes. This is most definitely related. > >>> Kyle. > >>> > >>> On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers > >>> wrote: > >>> > >>> > >>>> I'm not sure what the command is, but I'm 99% positive it was the > >>>> last > >>>> person for my servers... one of the community members egged him on > >>>> and > >>>> there > >>>> are some xfire logs to substantiate the accusations. > >>>> Something else I noticed, when his steam ID finally resolves, its > >>>> been > >>>> resolving with really low ID's - and not always the same. Like 42, > >>>> 31, 29 > >>>> ect. > >>>> > >>>> On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma > >>>> > >>>> wrote: > >>>> > >>>> > >>>>> I'm not so sure it's the fault of the last person to connect. You > >>>>> think > >>>>> it's > >>>>> because of a command? Do you know what the commands is? > >>>>> > >>>>> -Original Message- > >>>>> From: hlds-boun...@list.valvesoftware.com > >>>>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven > >>>>> > >>>> Crothers > >>>> > >>>>> Sent: Saturday, August 01, 2009 4:02 PM > >>>>> To: Half-Life dedicated Win32 server mailing list > >>>>> Subject: Re: [hlds] ClipRayToVPhysics crash and other related > >>>>> crash > >>>>> > >&g
Re: [hlds] ClipRayToVPhysics crash and other related crash
Same for me TCadmin just restarted the service due to non responder. Not at a pc so I can't look into it but it was about 6 servers all in a 2 minute time frame. Sent from my iPhone On Aug 4, 2009, at 9:04 PM, "Tony Paloma" wrote: > Several of my servers just lagged severely. I don't know many > details, but > it was on at least three srcds instances roughly the same time on two > different machines on two different networks. Smells like exploit. > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny > Loggins > Sent: Tuesday, August 04, 2009 6:53 PM > To: Half-Life dedicated Win32 server mailing list > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > Whatever it is I'm getting hit hardcore right after this email went > out. I hope someone can figure something out. > > > On Aug 4, 2009, at 6:30 PM, Ian wrote: > >> Found something that may be of information to those being having >> their >> servers crashed before being able to get their IP. >> >> > http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html >> >> Newly discovered exploit. And there is a supposed fix for it for >> Sourcemod users: > http://forums.alliedmods.net/showthread.php?t=93934&page=5 >> >> Post 43 is where you want to look. The rcon_lock plugin updated just >> days after the exploit was discovered. >> >> Hope this helps. >> >> - Ian >> >> >> >> >> Tony Paloma wrote: >>> Interesting. After it crashes, it makes the same trace? Could be two >>> unrelated crashes. >>> >>> -Original Message- >>> From: hlds-boun...@list.valvesoftware.com >>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle >>> Sanderson >>> Sent: Tuesday, August 04, 2009 2:01 AM >>> To: Half-Life dedicated Win32 server mailing list >>> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash >>> >>> Tony, as far as I can tell this is the case. >>> >>> One of my admins who was looking in HLSW found this a second before >>> the >>> server crashed. >>> 00:09:09 L 08/02/2009 - 17:43:43: "Add serverdown to friends to >>> bu<286><>" connected, address >>> "75.39.129.249:27005" >>> >>> Anyways, Yes. This is most definitely related. >>> Kyle. >>> >>> On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers >>> wrote: >>> >>> >>>> I'm not sure what the command is, but I'm 99% positive it was the >>>> last >>>> person for my servers... one of the community members egged him on >>>> and >>>> there >>>> are some xfire logs to substantiate the accusations. >>>> Something else I noticed, when his steam ID finally resolves, its >>>> been >>>> resolving with really low ID's - and not always the same. Like 42, >>>> 31, 29 >>>> ect. >>>> >>>> On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma >>>> >>>> wrote: >>>> >>>> >>>>> I'm not so sure it's the fault of the last person to connect. You >>>>> think >>>>> it's >>>>> because of a command? Do you know what the commands is? >>>>> >>>>> -Original Message- >>>>> From: hlds-boun...@list.valvesoftware.com >>>>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven >>>>> >>>> Crothers >>>> >>>>> Sent: Saturday, August 01, 2009 4:02 PM >>>>> To: Half-Life dedicated Win32 server mailing list >>>>> Subject: Re: [hlds] ClipRayToVPhysics crash and other related >>>>> crash >>>>> >>>>> I've gotten the same crash on my servers today. I've been >>>>> harvesting his >>>>> IP's (I cant confirm they are all him, but I've been banning the >>>>> last >>>>> connector before each crash) and blocking him via iptables. >>>>> I'm getting one of my modders to work on an SM mod to attempt to >>>>> block >>>>> >>>> the >>>> >>>>> console commands he's running. However is there any word from >>>>> Valve on >>>>> >>>> the >
Re: [hlds] ClipRayToVPhysics crash and other related crash
Several of my servers just lagged severely. I don't know many details, but it was on at least three srcds instances roughly the same time on two different machines on two different networks. Smells like exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Tuesday, August 04, 2009 6:53 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Whatever it is I'm getting hit hardcore right after this email went out. I hope someone can figure something out. On Aug 4, 2009, at 6:30 PM, Ian wrote: > Found something that may be of information to those being having their > servers crashed before being able to get their IP. > > http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html > > Newly discovered exploit. And there is a supposed fix for it for > Sourcemod users: http://forums.alliedmods.net/showthread.php?t=93934&page=5 > > Post 43 is where you want to look. The rcon_lock plugin updated just > days after the exploit was discovered. > > Hope this helps. > > - Ian > > > > > Tony Paloma wrote: >> Interesting. After it crashes, it makes the same trace? Could be two >> unrelated crashes. >> >> -Original Message- >> From: hlds-boun...@list.valvesoftware.com >> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle >> Sanderson >> Sent: Tuesday, August 04, 2009 2:01 AM >> To: Half-Life dedicated Win32 server mailing list >> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash >> >> Tony, as far as I can tell this is the case. >> >> One of my admins who was looking in HLSW found this a second before >> the >> server crashed. >> 00:09:09 L 08/02/2009 - 17:43:43: "Add serverdown to friends to >> bu<286><>" connected, address "75.39.129.249:27005" >> >> Anyways, Yes. This is most definitely related. >> Kyle. >> >> On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers >> wrote: >> >> >>> I'm not sure what the command is, but I'm 99% positive it was the >>> last >>> person for my servers... one of the community members egged him on >>> and >>> there >>> are some xfire logs to substantiate the accusations. >>> Something else I noticed, when his steam ID finally resolves, its >>> been >>> resolving with really low ID's - and not always the same. Like 42, >>> 31, 29 >>> ect. >>> >>> On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma >>> >>> wrote: >>> >>> >>>> I'm not so sure it's the fault of the last person to connect. You >>>> think >>>> it's >>>> because of a command? Do you know what the commands is? >>>> >>>> -Original Message- >>>> From: hlds-boun...@list.valvesoftware.com >>>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven >>>> >>> Crothers >>> >>>> Sent: Saturday, August 01, 2009 4:02 PM >>>> To: Half-Life dedicated Win32 server mailing list >>>> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash >>>> >>>> I've gotten the same crash on my servers today. I've been >>>> harvesting his >>>> IP's (I cant confirm they are all him, but I've been banning the >>>> last >>>> connector before each crash) and blocking him via iptables. >>>> I'm getting one of my modders to work on an SM mod to attempt to >>>> block >>>> >>> the >>> >>>> console commands he's running. However is there any word from >>>> Valve on >>>> >>> the >>> >>>> subject? >>>> >>>> On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins >>>> wrote: >>>> >>>> >>>>> No I didn't check that and no crashes since yesterday. Turns out >>>>> it >>>>> >> was >> >>> a >>> >>>>> strange crash from a new plugin (No errors were kicked out at all) >>>>> >>> since >>> >>>> no >>>> >>>>> errors were ever kicked out I just assumed that it was something >>>>> or >>>>> >>>> someone >>>> >>>>> external
Re: [hlds] ClipRayToVPhysics crash and other related crash
Whatever it is I'm getting hit hardcore right after this email went out. I hope someone can figure something out. On Aug 4, 2009, at 6:30 PM, Ian wrote: > Found something that may be of information to those being having their > servers crashed before being able to get their IP. > > http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html > > Newly discovered exploit. And there is a supposed fix for it for > Sourcemod users: http://forums.alliedmods.net/showthread.php?t=93934&page=5 > > Post 43 is where you want to look. The rcon_lock plugin updated just > days after the exploit was discovered. > > Hope this helps. > > - Ian > > > > > Tony Paloma wrote: >> Interesting. After it crashes, it makes the same trace? Could be two >> unrelated crashes. >> >> -Original Message- >> From: hlds-boun...@list.valvesoftware.com >> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle >> Sanderson >> Sent: Tuesday, August 04, 2009 2:01 AM >> To: Half-Life dedicated Win32 server mailing list >> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash >> >> Tony, as far as I can tell this is the case. >> >> One of my admins who was looking in HLSW found this a second before >> the >> server crashed. >> 00:09:09 L 08/02/2009 - 17:43:43: "Add serverdown to friends to >> bu<286><>" connected, address "75.39.129.249:27005" >> >> Anyways, Yes. This is most definitely related. >> Kyle. >> >> On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers >> wrote: >> >> >>> I'm not sure what the command is, but I'm 99% positive it was the >>> last >>> person for my servers... one of the community members egged him on >>> and >>> there >>> are some xfire logs to substantiate the accusations. >>> Something else I noticed, when his steam ID finally resolves, its >>> been >>> resolving with really low ID's - and not always the same. Like 42, >>> 31, 29 >>> ect. >>> >>> On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma >>> >>> wrote: >>> >>> >>>> I'm not so sure it's the fault of the last person to connect. You >>>> think >>>> it's >>>> because of a command? Do you know what the commands is? >>>> >>>> -Original Message- >>>> From: hlds-boun...@list.valvesoftware.com >>>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven >>>> >>> Crothers >>> >>>> Sent: Saturday, August 01, 2009 4:02 PM >>>> To: Half-Life dedicated Win32 server mailing list >>>> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash >>>> >>>> I've gotten the same crash on my servers today. I've been >>>> harvesting his >>>> IP's (I cant confirm they are all him, but I've been banning the >>>> last >>>> connector before each crash) and blocking him via iptables. >>>> I'm getting one of my modders to work on an SM mod to attempt to >>>> block >>>> >>> the >>> >>>> console commands he's running. However is there any word from >>>> Valve on >>>> >>> the >>> >>>> subject? >>>> >>>> On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins >>>> wrote: >>>> >>>> >>>>> No I didn't check that and no crashes since yesterday. Turns out >>>>> it >>>>> >> was >> >>> a >>> >>>>> strange crash from a new plugin (No errors were kicked out at all) >>>>> >>> since >>> >>>> no >>>> >>>>> errors were ever kicked out I just assumed that it was something >>>>> or >>>>> >>>> someone >>>> >>>>> external. That's what I get for assuming I guess :| >>>>> >>>>> -Original Message- >>>>> From: hlds-boun...@list.valvesoftware.com >>>>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony >>>>> Paloma >>>>> Sent: Thursday, July 30, 2009 10:10 AM >>>>> To: 'Half-Life dedicated Win32 server mailing list' >>>>> Subject: Re: [hlds] ClipRayToVPhysics crash and othe
Re: [hlds] ClipRayToVPhysics crash and other related crash
Found something that may be of information to those being having their servers crashed before being able to get their IP. http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html Newly discovered exploit. And there is a supposed fix for it for Sourcemod users: http://forums.alliedmods.net/showthread.php?t=93934&page=5 Post 43 is where you want to look. The rcon_lock plugin updated just days after the exploit was discovered. Hope this helps. - Ian Tony Paloma wrote: > Interesting. After it crashes, it makes the same trace? Could be two > unrelated crashes. > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson > Sent: Tuesday, August 04, 2009 2:01 AM > To: Half-Life dedicated Win32 server mailing list > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > Tony, as far as I can tell this is the case. > > One of my admins who was looking in HLSW found this a second before the > server crashed. > 00:09:09 L 08/02/2009 - 17:43:43: "Add serverdown to friends to > bu<286><>" connected, address "75.39.129.249:27005" > > Anyways, Yes. This is most definitely related. > Kyle. > > On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers > wrote: > > >> I'm not sure what the command is, but I'm 99% positive it was the last >> person for my servers... one of the community members egged him on and >> there >> are some xfire logs to substantiate the accusations. >> Something else I noticed, when his steam ID finally resolves, its been >> resolving with really low ID's - and not always the same. Like 42, 31, 29 >> ect. >> >> On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma >> wrote: >> >> >>> I'm not so sure it's the fault of the last person to connect. You think >>> it's >>> because of a command? Do you know what the commands is? >>> >>> -Original Message- >>> From: hlds-boun...@list.valvesoftware.com >>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven >>> >> Crothers >> >>> Sent: Saturday, August 01, 2009 4:02 PM >>> To: Half-Life dedicated Win32 server mailing list >>> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash >>> >>> I've gotten the same crash on my servers today. I've been harvesting his >>> IP's (I cant confirm they are all him, but I've been banning the last >>> connector before each crash) and blocking him via iptables. >>> I'm getting one of my modders to work on an SM mod to attempt to block >>> >> the >> >>> console commands he's running. However is there any word from Valve on >>> >> the >> >>> subject? >>> >>> On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins >>> wrote: >>> >>> >>>> No I didn't check that and no crashes since yesterday. Turns out it >>>> > was > >> a >> >>>> strange crash from a new plugin (No errors were kicked out at all) >>>> >> since >> >>> no >>> >>>> errors were ever kicked out I just assumed that it was something or >>>> >>> someone >>> >>>> external. That's what I get for assuming I guess :| >>>> >>>> -Original Message----- >>>> From: hlds-boun...@list.valvesoftware.com >>>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma >>>> Sent: Thursday, July 30, 2009 10:10 AM >>>> To: 'Half-Life dedicated Win32 server mailing list' >>>> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash >>>> >>>> Have you even checked the stack trace? >>>> >>>> -Original Message----- >>>> From: hlds-boun...@list.valvesoftware.com >>>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny >>>> >> Loggins >> >>>> Sent: Thursday, July 30, 2009 1:30 AM >>>> To: 'Half-Life dedicated Win32 server mailing list' >>>> Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash >>>> >>>> Ok I'm going to recant this because I need to look more into it. I'm >>>> >> not >> >>>> 100% sure it rela
Re: [hlds] ClipRayToVPhysics crash and other related crash
Interesting. After it crashes, it makes the same trace? Could be two unrelated crashes. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Tuesday, August 04, 2009 2:01 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Tony, as far as I can tell this is the case. One of my admins who was looking in HLSW found this a second before the server crashed. 00:09:09 L 08/02/2009 - 17:43:43: "Add serverdown to friends to bu<286><>" connected, address "75.39.129.249:27005" Anyways, Yes. This is most definitely related. Kyle. On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers wrote: > I'm not sure what the command is, but I'm 99% positive it was the last > person for my servers... one of the community members egged him on and > there > are some xfire logs to substantiate the accusations. > Something else I noticed, when his steam ID finally resolves, its been > resolving with really low ID's - and not always the same. Like 42, 31, 29 > ect. > > On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma > wrote: > > > I'm not so sure it's the fault of the last person to connect. You think > > it's > > because of a command? Do you know what the commands is? > > > > -Original Message- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven > Crothers > > Sent: Saturday, August 01, 2009 4:02 PM > > To: Half-Life dedicated Win32 server mailing list > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > I've gotten the same crash on my servers today. I've been harvesting his > > IP's (I cant confirm they are all him, but I've been banning the last > > connector before each crash) and blocking him via iptables. > > I'm getting one of my modders to work on an SM mod to attempt to block > the > > console commands he's running. However is there any word from Valve on > the > > subject? > > > > On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins > > wrote: > > > > > No I didn't check that and no crashes since yesterday. Turns out it was > a > > > strange crash from a new plugin (No errors were kicked out at all) > since > > no > > > errors were ever kicked out I just assumed that it was something or > > someone > > > external. That's what I get for assuming I guess :| > > > > > > -Original Message- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > > > Sent: Thursday, July 30, 2009 10:10 AM > > > To: 'Half-Life dedicated Win32 server mailing list' > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > Have you even checked the stack trace? > > > > > > -Original Message- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny > Loggins > > > Sent: Thursday, July 30, 2009 1:30 AM > > > To: 'Half-Life dedicated Win32 server mailing list' > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > Ok I'm going to recant this because I need to look more into it. I'm > not > > > 100% sure it related to anything external right now. > > > > > > > > > -Original Message- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny > Loggins > > > Sent: Thursday, July 30, 2009 12:57 AM > > > To: 'Half-Life dedicated Win32 server mailing list' > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > Any headway on this? Some douchebag has been crashing my servers for > the > > > past 2 days now and today was really bad (20+ crashes) > > > > > > -Original Message- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > > > Sent: Sunday, July 19, 2009 8:33 PM > > > To: 'Half-Life dedicated Win32 server mailing list' > > > Cc: 'Eric Smith' > > > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > Lately, I've been getting crashes in the ClipRayToVPhysics f
Re: [hlds] ClipRayToVPhysics crash and other related crash
Tony, as far as I can tell this is the case. One of my admins who was looking in HLSW found this a second before the server crashed. 00:09:09 L 08/02/2009 - 17:43:43: "Add serverdown to friends to bu<286><>" connected, address "75.39.129.249:27005" Anyways, Yes. This is most definitely related. Kyle. On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers wrote: > I'm not sure what the command is, but I'm 99% positive it was the last > person for my servers... one of the community members egged him on and > there > are some xfire logs to substantiate the accusations. > Something else I noticed, when his steam ID finally resolves, its been > resolving with really low ID's - and not always the same. Like 42, 31, 29 > ect. > > On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma > wrote: > > > I'm not so sure it's the fault of the last person to connect. You think > > it's > > because of a command? Do you know what the commands is? > > > > -Original Message- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven > Crothers > > Sent: Saturday, August 01, 2009 4:02 PM > > To: Half-Life dedicated Win32 server mailing list > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > I've gotten the same crash on my servers today. I've been harvesting his > > IP's (I cant confirm they are all him, but I've been banning the last > > connector before each crash) and blocking him via iptables. > > I'm getting one of my modders to work on an SM mod to attempt to block > the > > console commands he's running. However is there any word from Valve on > the > > subject? > > > > On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins > > wrote: > > > > > No I didn't check that and no crashes since yesterday. Turns out it was > a > > > strange crash from a new plugin (No errors were kicked out at all) > since > > no > > > errors were ever kicked out I just assumed that it was something or > > someone > > > external. That's what I get for assuming I guess :| > > > > > > -Original Message- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > > > Sent: Thursday, July 30, 2009 10:10 AM > > > To: 'Half-Life dedicated Win32 server mailing list' > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > Have you even checked the stack trace? > > > > > > -Original Message- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny > Loggins > > > Sent: Thursday, July 30, 2009 1:30 AM > > > To: 'Half-Life dedicated Win32 server mailing list' > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > Ok I'm going to recant this because I need to look more into it. I'm > not > > > 100% sure it related to anything external right now. > > > > > > > > > -Original Message- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny > Loggins > > > Sent: Thursday, July 30, 2009 12:57 AM > > > To: 'Half-Life dedicated Win32 server mailing list' > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > Any headway on this? Some douchebag has been crashing my servers for > the > > > past 2 days now and today was really bad (20+ crashes) > > > > > > -Original Message- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > > > Sent: Sunday, July 19, 2009 8:33 PM > > > To: 'Half-Life dedicated Win32 server mailing list' > > > Cc: 'Eric Smith' > > > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > Lately, I've been getting crashes in the ClipRayToVPhysics function and > > > other physics related functions. It's been occurring on more than one > > > server > > > and seems to happen more often recently. The increasing frequency leads > > me > > > to believe that it could be some kind of exploit. I do not run > SourceMod. > > > Here are some sample stack traces. > > > >
Re: [hlds] ClipRayToVPhysics crash and other related crash
I'm not sure what the command is, but I'm 99% positive it was the last person for my servers... one of the community members egged him on and there are some xfire logs to substantiate the accusations. Something else I noticed, when his steam ID finally resolves, its been resolving with really low ID's - and not always the same. Like 42, 31, 29 ect. On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma wrote: > I'm not so sure it's the fault of the last person to connect. You think > it's > because of a command? Do you know what the commands is? > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers > Sent: Saturday, August 01, 2009 4:02 PM > To: Half-Life dedicated Win32 server mailing list > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > I've gotten the same crash on my servers today. I've been harvesting his > IP's (I cant confirm they are all him, but I've been banning the last > connector before each crash) and blocking him via iptables. > I'm getting one of my modders to work on an SM mod to attempt to block the > console commands he's running. However is there any word from Valve on the > subject? > > On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins > wrote: > > > No I didn't check that and no crashes since yesterday. Turns out it was a > > strange crash from a new plugin (No errors were kicked out at all) since > no > > errors were ever kicked out I just assumed that it was something or > someone > > external. That's what I get for assuming I guess :| > > > > -Original Message- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > > Sent: Thursday, July 30, 2009 10:10 AM > > To: 'Half-Life dedicated Win32 server mailing list' > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > Have you even checked the stack trace? > > > > -Original Message----- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins > > Sent: Thursday, July 30, 2009 1:30 AM > > To: 'Half-Life dedicated Win32 server mailing list' > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > Ok I'm going to recant this because I need to look more into it. I'm not > > 100% sure it related to anything external right now. > > > > > > -Original Message- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins > > Sent: Thursday, July 30, 2009 12:57 AM > > To: 'Half-Life dedicated Win32 server mailing list' > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > Any headway on this? Some douchebag has been crashing my servers for the > > past 2 days now and today was really bad (20+ crashes) > > > > -Original Message- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > > Sent: Sunday, July 19, 2009 8:33 PM > > To: 'Half-Life dedicated Win32 server mailing list' > > Cc: 'Eric Smith' > > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > > > Lately, I've been getting crashes in the ClipRayToVPhysics function and > > other physics related functions. It's been occurring on more than one > > server > > and seems to happen more often recently. The increasing frequency leads > me > > to believe that it could be some kind of exploit. I do not run SourceMod. > > Here are some sample stack traces. > > > > #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > #2 0xf7715005 in CEngineTrace::TraceRay () > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #5 0xf55735ce in CBasePlayer::ItemPostFrame () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #6 0xf5af971c in CTFPlayer::ItemPostFrame () > > from /home/srcd
Re: [hlds] ClipRayToVPhysics crash and other related crash
I'm not so sure it's the fault of the last person to connect. You think it's because of a command? Do you know what the commands is? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers Sent: Saturday, August 01, 2009 4:02 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins wrote: > No I didn't check that and no crashes since yesterday. Turns out it was a > strange crash from a new plugin (No errors were kicked out at all) since no > errors were ever kicked out I just assumed that it was something or someone > external. That's what I get for assuming I guess :| > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > Sent: Thursday, July 30, 2009 10:10 AM > To: 'Half-Life dedicated Win32 server mailing list' > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > Have you even checked the stack trace? > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins > Sent: Thursday, July 30, 2009 1:30 AM > To: 'Half-Life dedicated Win32 server mailing list' > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > Ok I'm going to recant this because I need to look more into it. I'm not > 100% sure it related to anything external right now. > > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins > Sent: Thursday, July 30, 2009 12:57 AM > To: 'Half-Life dedicated Win32 server mailing list' > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > Any headway on this? Some douchebag has been crashing my servers for the > past 2 days now and today was really bad (20+ crashes) > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > Sent: Sunday, July 19, 2009 8:33 PM > To: 'Half-Life dedicated Win32 server mailing list' > Cc: 'Eric Smith' > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > Lately, I've been getting crashes in the ClipRayToVPhysics function and > other physics related functions. It's been occurring on more than one > server > and seems to happen more often recently. The increasing frequency leads me > to believe that it could be some kind of exploit. I do not run SourceMod. > Here are some sample stack traces. > > #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #2 0xf7715005 in CEngineTrace::TraceRay () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #5 0xf55735ce in CBasePlayer::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #6 0xf5af971c in CTFPlayer::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #7 0xf57aeef8 in CBasePlayer::PostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #8 0xf5ae1dba in CTFPlayer::PostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #9 0xf57c6872 in CPlayerMove::RunPostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #10 0xf57c83ba in CPlayerMove::RunCommand () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > > > > ___ > To unsubscribe, edit your list preferences, or view the list
Re: [hlds] ClipRayToVPhysics crash and other related crash
I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins wrote: > No I didn't check that and no crashes since yesterday. Turns out it was a > strange crash from a new plugin (No errors were kicked out at all) since no > errors were ever kicked out I just assumed that it was something or someone > external. That's what I get for assuming I guess :| > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > Sent: Thursday, July 30, 2009 10:10 AM > To: 'Half-Life dedicated Win32 server mailing list' > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > Have you even checked the stack trace? > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins > Sent: Thursday, July 30, 2009 1:30 AM > To: 'Half-Life dedicated Win32 server mailing list' > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > Ok I'm going to recant this because I need to look more into it. I'm not > 100% sure it related to anything external right now. > > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins > Sent: Thursday, July 30, 2009 12:57 AM > To: 'Half-Life dedicated Win32 server mailing list' > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > Any headway on this? Some douchebag has been crashing my servers for the > past 2 days now and today was really bad (20+ crashes) > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > Sent: Sunday, July 19, 2009 8:33 PM > To: 'Half-Life dedicated Win32 server mailing list' > Cc: 'Eric Smith' > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > Lately, I've been getting crashes in the ClipRayToVPhysics function and > other physics related functions. It's been occurring on more than one > server > and seems to happen more often recently. The increasing frequency leads me > to believe that it could be some kind of exploit. I do not run SourceMod. > Here are some sample stack traces. > > #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #2 0xf7715005 in CEngineTrace::TraceRay () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #5 0xf55735ce in CBasePlayer::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #6 0xf5af971c in CTFPlayer::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #7 0xf57aeef8 in CBasePlayer::PostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #8 0xf5ae1dba in CTFPlayer::PostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #9 0xf57c6872 in CPlayerMove::RunPostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #10 0xf57c83ba in CPlayerMove::RunCommand () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > ___ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
No I didn't check that and no crashes since yesterday. Turns out it was a strange crash from a new plugin (No errors were kicked out at all) since no errors were ever kicked out I just assumed that it was something or someone external. That's what I get for assuming I guess :| -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Thursday, July 30, 2009 10:10 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
For me, one player joins then the server instantaneously crashes... After I added this kids SteamID to my servers banlist it hasn't crashed for the past 36hours... Which says a lot to me. However this topic has been hijacked so lets try to bring it back to Tony's issue with ClipRayToVPhysics. Just thought I should throw out there that the GSP is running CentOS and I'm running a Counter-Strike Source server. Kyle. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
I am using Linux, and I've just started getting crashes every other map, and I suspect this issue... how are you guys determining who is causing the crash? On Thu, Jul 23, 2009 at 10:36 AM, GardenGroveVW wrote: > Steam id: > STEAM_0:1:11902529 > > IP: > 24.61.156.157 > > HLStatsx: > http://ego.hlstatsx.com/?mode=playerinfo&player=428993 > > Steam community page: > http://steamcommunity.com/id/gun_grave/ > > This guy crashed our server. > > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson > Sent: Thursday, July 23, 2009 2:23 AM > To: Half-Life dedicated Win32 server mailing list > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > Found him, atleast someone from HellsGamers did. > http://hellsgamers.com/forums/showpost.php?p=41295&postcount=5 > > http://www.google.com/search?hl=en&rlz=1G1GGLQ_ENUS337&q=STEAM_0%3A1%3A12689 > 235&btnG=Search&aq=f&oq=&aqi=<http://www.google.com/search?hl=en&rlz=1G1GGLQ_ENUS337&q=STEAM_0%3A1%3A12689%0A235&btnG=Search&aq=f&oq=&aqi=> > > http://steamcommunity.com/profiles/76561197985644199 > STEAM_0:1:12689235<http://steamcommunity.com/profiles/76561197985644199%0ASTEAM_0:1:12689235> > > Banned here. > Kyle > > On Thu, Jul 23, 2009 at 12:19 AM, DontWannaName! > wrote: > > > Last Online: 248 days ago + VAC ban? > > > > On Wed, Jul 22, 2009 at 10:04 PM, Tony Paloma > >wrote: > > > > > http://steamcommunity.com/profiles/76561197969629969 > > > > > > STEAM_0:1:4682120 > > > > > > -Original Message----- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle > Sanderson > > > Sent: Wednesday, July 22, 2009 7:23 PM > > > To: Half-Life dedicated Win32 server mailing list > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > The player's name is Nowayz and I know he is subscribed to this list as > > 90% > > > of all exploiters are so Hi to you. When I mean a second after he joins > > the > > > server crashes I mean a second. It isn't even long enough for him to be > > > ingame or anything, his entry isn't even logged. This is starting to > look > > > like that physics_select exploit. > > > > > > Kyle. > > > > > > On Wed, Jul 22, 2009 at 7:08 PM, msleeper > > wrote: > > > > > > > Post their name/SteamID for the benefit of the rest of us. > > > > > > > > > > > > On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: > > > > > Someone is deliberately crashing my Linux Installation of SRCDS (I > am > > > > aware > > > > > this is the Windows discussion but this is happening to a whole set > > of > > > > > servers both running Windows and Linux, mine just happens to be > > Linux), > > > > I'm > > > > > with a GSP so I cannot grab any mdmp files sadly. However it is > being > > > > > deliberately done as this one player always joins then the server > > > > > instantaneously crashes. Usually when the server crashes it > obviously > > > > comes > > > > > back up as there are scripts set in place to do so, however in this > > > case, > > > > it > > > > > does not come back automatically. > > > > > > > > > > I hope I'm making sense to at least a few of you, > > > > > Kyle. > > > > > > > > > > > > > > > On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma < > > drunkenf...@hotmail.com > > > > >wrote: > > > > > > > > > > > Do you mean srcds crashes and you don't have anything to > > > automatically > > > > > > restart it? If so, it could be what I've been experiencing. > > > > > > > > > > > > If you mean srcds is locking up, I've seen that too, but I think > > it's > > > > > > because of a rarely occurring bug. > > > > > > > > > > > > -Original Message- > > > > > > From: hlds-boun...@list.valvesoftware.com > > > > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle > > > > Sanderson > > > > > > Sent: Wednesday, July 22, 200
Re: [hlds] ClipRayToVPhysics crash and other related crash
Steam id: STEAM_0:1:11902529 IP: 24.61.156.157 HLStatsx: http://ego.hlstatsx.com/?mode=playerinfo&player=428993 Steam community page: http://steamcommunity.com/id/gun_grave/ This guy crashed our server. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Thursday, July 23, 2009 2:23 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Found him, atleast someone from HellsGamers did. http://hellsgamers.com/forums/showpost.php?p=41295&postcount=5 http://www.google.com/search?hl=en&rlz=1G1GGLQ_ENUS337&q=STEAM_0%3A1%3A12689 235&btnG=Search&aq=f&oq=&aqi= http://steamcommunity.com/profiles/76561197985644199 STEAM_0:1:12689235 Banned here. Kyle On Thu, Jul 23, 2009 at 12:19 AM, DontWannaName! wrote: > Last Online: 248 days ago + VAC ban? > > On Wed, Jul 22, 2009 at 10:04 PM, Tony Paloma >wrote: > > > http://steamcommunity.com/profiles/76561197969629969 > > > > STEAM_0:1:4682120 > > > > -Original Message- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson > > Sent: Wednesday, July 22, 2009 7:23 PM > > To: Half-Life dedicated Win32 server mailing list > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > The player's name is Nowayz and I know he is subscribed to this list as > 90% > > of all exploiters are so Hi to you. When I mean a second after he joins > the > > server crashes I mean a second. It isn't even long enough for him to be > > ingame or anything, his entry isn't even logged. This is starting to look > > like that physics_select exploit. > > > > Kyle. > > > > On Wed, Jul 22, 2009 at 7:08 PM, msleeper > wrote: > > > > > Post their name/SteamID for the benefit of the rest of us. > > > > > > > > > On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: > > > > Someone is deliberately crashing my Linux Installation of SRCDS (I am > > > aware > > > > this is the Windows discussion but this is happening to a whole set > of > > > > servers both running Windows and Linux, mine just happens to be > Linux), > > > I'm > > > > with a GSP so I cannot grab any mdmp files sadly. However it is being > > > > deliberately done as this one player always joins then the server > > > > instantaneously crashes. Usually when the server crashes it obviously > > > comes > > > > back up as there are scripts set in place to do so, however in this > > case, > > > it > > > > does not come back automatically. > > > > > > > > I hope I'm making sense to at least a few of you, > > > > Kyle. > > > > > > > > > > > > On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma < > drunkenf...@hotmail.com > > > >wrote: > > > > > > > > > Do you mean srcds crashes and you don't have anything to > > automatically > > > > > restart it? If so, it could be what I've been experiencing. > > > > > > > > > > If you mean srcds is locking up, I've seen that too, but I think > it's > > > > > because of a rarely occurring bug. > > > > > > > > > > -Original Message- > > > > > From: hlds-boun...@list.valvesoftware.com > > > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle > > > Sanderson > > > > > Sent: Wednesday, July 22, 2009 1:01 PM > > > > > To: Half-Life dedicated Win32 server mailing list > > > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > > > > > My server/s at the moment are just getting attacked/crashed non > stop > > at > > > the > > > > > moment. They've moved off from the timeleft/nextmap spamming but > I'm > > > not > > > > > sure what is causing it now. These arn't soft crashes either where > > > SRCDS is > > > > > able to come back up, they are actually shut down and cannot > > > automatically > > > > > come back. > > > > > > > > > > If anyone has any information at all, please contact me. > > > > > Kyle. > > > > > > > > > > On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma < > > drunkenf...@ho
Re: [hlds] ClipRayToVPhysics crash and other related crash
Found him, atleast someone from HellsGamers did. http://hellsgamers.com/forums/showpost.php?p=41295&postcount=5 http://www.google.com/search?hl=en&rlz=1G1GGLQ_ENUS337&q=STEAM_0%3A1%3A12689235&btnG=Search&aq=f&oq=&aqi= http://steamcommunity.com/profiles/76561197985644199 STEAM_0:1:12689235 Banned here. Kyle On Thu, Jul 23, 2009 at 12:19 AM, DontWannaName! wrote: > Last Online: 248 days ago + VAC ban? > > On Wed, Jul 22, 2009 at 10:04 PM, Tony Paloma >wrote: > > > http://steamcommunity.com/profiles/76561197969629969 > > > > STEAM_0:1:4682120 > > > > -Original Message- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson > > Sent: Wednesday, July 22, 2009 7:23 PM > > To: Half-Life dedicated Win32 server mailing list > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > The player's name is Nowayz and I know he is subscribed to this list as > 90% > > of all exploiters are so Hi to you. When I mean a second after he joins > the > > server crashes I mean a second. It isn't even long enough for him to be > > ingame or anything, his entry isn't even logged. This is starting to look > > like that physics_select exploit. > > > > Kyle. > > > > On Wed, Jul 22, 2009 at 7:08 PM, msleeper > wrote: > > > > > Post their name/SteamID for the benefit of the rest of us. > > > > > > > > > On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: > > > > Someone is deliberately crashing my Linux Installation of SRCDS (I am > > > aware > > > > this is the Windows discussion but this is happening to a whole set > of > > > > servers both running Windows and Linux, mine just happens to be > Linux), > > > I'm > > > > with a GSP so I cannot grab any mdmp files sadly. However it is being > > > > deliberately done as this one player always joins then the server > > > > instantaneously crashes. Usually when the server crashes it obviously > > > comes > > > > back up as there are scripts set in place to do so, however in this > > case, > > > it > > > > does not come back automatically. > > > > > > > > I hope I'm making sense to at least a few of you, > > > > Kyle. > > > > > > > > > > > > On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma < > drunkenf...@hotmail.com > > > >wrote: > > > > > > > > > Do you mean srcds crashes and you don't have anything to > > automatically > > > > > restart it? If so, it could be what I've been experiencing. > > > > > > > > > > If you mean srcds is locking up, I've seen that too, but I think > it's > > > > > because of a rarely occurring bug. > > > > > > > > > > -Original Message- > > > > > From: hlds-boun...@list.valvesoftware.com > > > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle > > > Sanderson > > > > > Sent: Wednesday, July 22, 2009 1:01 PM > > > > > To: Half-Life dedicated Win32 server mailing list > > > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > > > > > My server/s at the moment are just getting attacked/crashed non > stop > > at > > > the > > > > > moment. They've moved off from the timeleft/nextmap spamming but > I'm > > > not > > > > > sure what is causing it now. These arn't soft crashes either where > > > SRCDS is > > > > > able to come back up, they are actually shut down and cannot > > > automatically > > > > > come back. > > > > > > > > > > If anyone has any information at all, please contact me. > > > > > Kyle. > > > > > > > > > > On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma < > > drunkenf...@hotmail.com > > > > > >wrote: > > > > > > > > > > > Happened three times in five minutes on one of my servers last > > night. > > > > > > Definitely an exploit. > > > > > > > > > > > > -Original Message- > > > > > > From: hlds-boun...@list.valvesoftware.com > > > > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony > > > Palo
Re: [hlds] ClipRayToVPhysics crash and other related crash
Last Online: 248 days ago + VAC ban? On Wed, Jul 22, 2009 at 10:04 PM, Tony Paloma wrote: > http://steamcommunity.com/profiles/76561197969629969 > > STEAM_0:1:4682120 > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson > Sent: Wednesday, July 22, 2009 7:23 PM > To: Half-Life dedicated Win32 server mailing list > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > The player's name is Nowayz and I know he is subscribed to this list as 90% > of all exploiters are so Hi to you. When I mean a second after he joins the > server crashes I mean a second. It isn't even long enough for him to be > ingame or anything, his entry isn't even logged. This is starting to look > like that physics_select exploit. > > Kyle. > > On Wed, Jul 22, 2009 at 7:08 PM, msleeper wrote: > > > Post their name/SteamID for the benefit of the rest of us. > > > > > > On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: > > > Someone is deliberately crashing my Linux Installation of SRCDS (I am > > aware > > > this is the Windows discussion but this is happening to a whole set of > > > servers both running Windows and Linux, mine just happens to be Linux), > > I'm > > > with a GSP so I cannot grab any mdmp files sadly. However it is being > > > deliberately done as this one player always joins then the server > > > instantaneously crashes. Usually when the server crashes it obviously > > comes > > > back up as there are scripts set in place to do so, however in this > case, > > it > > > does not come back automatically. > > > > > > I hope I'm making sense to at least a few of you, > > > Kyle. > > > > > > > > > On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma > >wrote: > > > > > > > Do you mean srcds crashes and you don't have anything to > automatically > > > > restart it? If so, it could be what I've been experiencing. > > > > > > > > If you mean srcds is locking up, I've seen that too, but I think it's > > > > because of a rarely occurring bug. > > > > > > > > -Original Message- > > > > From: hlds-boun...@list.valvesoftware.com > > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle > > Sanderson > > > > Sent: Wednesday, July 22, 2009 1:01 PM > > > > To: Half-Life dedicated Win32 server mailing list > > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > > > My server/s at the moment are just getting attacked/crashed non stop > at > > the > > > > moment. They've moved off from the timeleft/nextmap spamming but I'm > > not > > > > sure what is causing it now. These arn't soft crashes either where > > SRCDS is > > > > able to come back up, they are actually shut down and cannot > > automatically > > > > come back. > > > > > > > > If anyone has any information at all, please contact me. > > > > Kyle. > > > > > > > > On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma < > drunkenf...@hotmail.com > > > > >wrote: > > > > > > > > > Happened three times in five minutes on one of my servers last > night. > > > > > Definitely an exploit. > > > > > > > > > > -Original Message- > > > > > From: hlds-boun...@list.valvesoftware.com > > > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony > > Paloma > > > > > Sent: Sunday, July 19, 2009 6:33 PM > > > > > To: 'Half-Life dedicated Win32 server mailing list' > > > > > Cc: 'Eric Smith' > > > > > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > > > > > Lately, I've been getting crashes in the ClipRayToVPhysics function > > and > > > > > other physics related functions. It's been occurring on more than > one > > > > > server > > > > > and seems to happen more often recently. The increasing frequency > > leads > > > > me > > > > > to believe that it could be some kind of exploit. I do not run > > SourceMod. > > > > > Here are some sample stack traces. > > > > > > > > > > #0 0xf771310c in C
Re: [hlds] ClipRayToVPhysics crash and other related crash
http://steamcommunity.com/profiles/76561197969629969 STEAM_0:1:4682120 -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 7:23 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash The player's name is Nowayz and I know he is subscribed to this list as 90% of all exploiters are so Hi to you. When I mean a second after he joins the server crashes I mean a second. It isn't even long enough for him to be ingame or anything, his entry isn't even logged. This is starting to look like that physics_select exploit. Kyle. On Wed, Jul 22, 2009 at 7:08 PM, msleeper wrote: > Post their name/SteamID for the benefit of the rest of us. > > > On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: > > Someone is deliberately crashing my Linux Installation of SRCDS (I am > aware > > this is the Windows discussion but this is happening to a whole set of > > servers both running Windows and Linux, mine just happens to be Linux), > I'm > > with a GSP so I cannot grab any mdmp files sadly. However it is being > > deliberately done as this one player always joins then the server > > instantaneously crashes. Usually when the server crashes it obviously > comes > > back up as there are scripts set in place to do so, however in this case, > it > > does not come back automatically. > > > > I hope I'm making sense to at least a few of you, > > Kyle. > > > > > > On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma >wrote: > > > > > Do you mean srcds crashes and you don't have anything to automatically > > > restart it? If so, it could be what I've been experiencing. > > > > > > If you mean srcds is locking up, I've seen that too, but I think it's > > > because of a rarely occurring bug. > > > > > > -Original Message- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle > Sanderson > > > Sent: Wednesday, July 22, 2009 1:01 PM > > > To: Half-Life dedicated Win32 server mailing list > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > My server/s at the moment are just getting attacked/crashed non stop at > the > > > moment. They've moved off from the timeleft/nextmap spamming but I'm > not > > > sure what is causing it now. These arn't soft crashes either where > SRCDS is > > > able to come back up, they are actually shut down and cannot > automatically > > > come back. > > > > > > If anyone has any information at all, please contact me. > > > Kyle. > > > > > > On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma > > >wrote: > > > > > > > Happened three times in five minutes on one of my servers last night. > > > > Definitely an exploit. > > > > > > > > -Original Message- > > > > From: hlds-boun...@list.valvesoftware.com > > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony > Paloma > > > > Sent: Sunday, July 19, 2009 6:33 PM > > > > To: 'Half-Life dedicated Win32 server mailing list' > > > > Cc: 'Eric Smith' > > > > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > > > Lately, I've been getting crashes in the ClipRayToVPhysics function > and > > > > other physics related functions. It's been occurring on more than one > > > > server > > > > and seems to happen more often recently. The increasing frequency > leads > > > me > > > > to believe that it could be some kind of exploit. I do not run > SourceMod. > > > > Here are some sample stack traces. > > > > > > > > #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () > > > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > > > #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () > > > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > > > #2 0xf7715005 in CEngineTrace::TraceRay () > > > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > > > #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () > > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > > #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () > >
Re: [hlds] ClipRayToVPhysics crash and other related crash
The player's name is Nowayz and I know he is subscribed to this list as 90% of all exploiters are so Hi to you. When I mean a second after he joins the server crashes I mean a second. It isn't even long enough for him to be ingame or anything, his entry isn't even logged. This is starting to look like that physics_select exploit. Kyle. On Wed, Jul 22, 2009 at 7:08 PM, msleeper wrote: > Post their name/SteamID for the benefit of the rest of us. > > > On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: > > Someone is deliberately crashing my Linux Installation of SRCDS (I am > aware > > this is the Windows discussion but this is happening to a whole set of > > servers both running Windows and Linux, mine just happens to be Linux), > I'm > > with a GSP so I cannot grab any mdmp files sadly. However it is being > > deliberately done as this one player always joins then the server > > instantaneously crashes. Usually when the server crashes it obviously > comes > > back up as there are scripts set in place to do so, however in this case, > it > > does not come back automatically. > > > > I hope I'm making sense to at least a few of you, > > Kyle. > > > > > > On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma >wrote: > > > > > Do you mean srcds crashes and you don't have anything to automatically > > > restart it? If so, it could be what I've been experiencing. > > > > > > If you mean srcds is locking up, I've seen that too, but I think it's > > > because of a rarely occurring bug. > > > > > > -Original Message- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle > Sanderson > > > Sent: Wednesday, July 22, 2009 1:01 PM > > > To: Half-Life dedicated Win32 server mailing list > > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > My server/s at the moment are just getting attacked/crashed non stop at > the > > > moment. They've moved off from the timeleft/nextmap spamming but I'm > not > > > sure what is causing it now. These arn't soft crashes either where > SRCDS is > > > able to come back up, they are actually shut down and cannot > automatically > > > come back. > > > > > > If anyone has any information at all, please contact me. > > > Kyle. > > > > > > On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma > > >wrote: > > > > > > > Happened three times in five minutes on one of my servers last night. > > > > Definitely an exploit. > > > > > > > > -Original Message- > > > > From: hlds-boun...@list.valvesoftware.com > > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony > Paloma > > > > Sent: Sunday, July 19, 2009 6:33 PM > > > > To: 'Half-Life dedicated Win32 server mailing list' > > > > Cc: 'Eric Smith' > > > > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > > > Lately, I've been getting crashes in the ClipRayToVPhysics function > and > > > > other physics related functions. It's been occurring on more than one > > > > server > > > > and seems to happen more often recently. The increasing frequency > leads > > > me > > > > to believe that it could be some kind of exploit. I do not run > SourceMod. > > > > Here are some sample stack traces. > > > > > > > > #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () > > > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > > > #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () > > > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > > > #2 0xf7715005 in CEngineTrace::TraceRay () > > > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > > > #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () > > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > > #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () > > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > > #5 0xf55735ce in CBasePlayer::ItemPostFrame () > > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > > #6 0xf5af971c in CTFPlayer::ItemPostFrame () > > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > >
Re: [hlds] ClipRayToVPhysics crash and other related crash
Post their name/SteamID for the benefit of the rest of us. On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: > Someone is deliberately crashing my Linux Installation of SRCDS (I am aware > this is the Windows discussion but this is happening to a whole set of > servers both running Windows and Linux, mine just happens to be Linux), I'm > with a GSP so I cannot grab any mdmp files sadly. However it is being > deliberately done as this one player always joins then the server > instantaneously crashes. Usually when the server crashes it obviously comes > back up as there are scripts set in place to do so, however in this case, it > does not come back automatically. > > I hope I'm making sense to at least a few of you, > Kyle. > > > On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma wrote: > > > Do you mean srcds crashes and you don't have anything to automatically > > restart it? If so, it could be what I've been experiencing. > > > > If you mean srcds is locking up, I've seen that too, but I think it's > > because of a rarely occurring bug. > > > > -Original Message- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson > > Sent: Wednesday, July 22, 2009 1:01 PM > > To: Half-Life dedicated Win32 server mailing list > > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > > > My server/s at the moment are just getting attacked/crashed non stop at the > > moment. They've moved off from the timeleft/nextmap spamming but I'm not > > sure what is causing it now. These arn't soft crashes either where SRCDS is > > able to come back up, they are actually shut down and cannot automatically > > come back. > > > > If anyone has any information at all, please contact me. > > Kyle. > > > > On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma > >wrote: > > > > > Happened three times in five minutes on one of my servers last night. > > > Definitely an exploit. > > > > > > -Original Message- > > > From: hlds-boun...@list.valvesoftware.com > > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > > > Sent: Sunday, July 19, 2009 6:33 PM > > > To: 'Half-Life dedicated Win32 server mailing list' > > > Cc: 'Eric Smith' > > > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > > > > > Lately, I've been getting crashes in the ClipRayToVPhysics function and > > > other physics related functions. It's been occurring on more than one > > > server > > > and seems to happen more often recently. The increasing frequency leads > > me > > > to believe that it could be some kind of exploit. I do not run SourceMod. > > > Here are some sample stack traces. > > > > > > #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () > > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > > #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () > > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > > #2 0xf7715005 in CEngineTrace::TraceRay () > > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > > #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > #5 0xf55735ce in CBasePlayer::ItemPostFrame () > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > #6 0xf5af971c in CTFPlayer::ItemPostFrame () > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > #7 0xf57aeef8 in CBasePlayer::PostThink () > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > #8 0xf5ae1dba in CTFPlayer::PostThink () > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > #9 0xf57c6872 in CPlayerMove::RunPostThink () > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > #10 0xf57c83ba in CPlayerMove::RunCommand () > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > ... > > > > > > > > > #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () > > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > > #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () > > > from /home/srcds/tf2server/ora
Re: [hlds] ClipRayToVPhysics crash and other related crash
Someone is deliberately crashing my Linux Installation of SRCDS (I am aware this is the Windows discussion but this is happening to a whole set of servers both running Windows and Linux, mine just happens to be Linux), I'm with a GSP so I cannot grab any mdmp files sadly. However it is being deliberately done as this one player always joins then the server instantaneously crashes. Usually when the server crashes it obviously comes back up as there are scripts set in place to do so, however in this case, it does not come back automatically. I hope I'm making sense to at least a few of you, Kyle. On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma wrote: > Do you mean srcds crashes and you don't have anything to automatically > restart it? If so, it could be what I've been experiencing. > > If you mean srcds is locking up, I've seen that too, but I think it's > because of a rarely occurring bug. > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson > Sent: Wednesday, July 22, 2009 1:01 PM > To: Half-Life dedicated Win32 server mailing list > Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash > > My server/s at the moment are just getting attacked/crashed non stop at the > moment. They've moved off from the timeleft/nextmap spamming but I'm not > sure what is causing it now. These arn't soft crashes either where SRCDS is > able to come back up, they are actually shut down and cannot automatically > come back. > > If anyone has any information at all, please contact me. > Kyle. > > On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma >wrote: > > > Happened three times in five minutes on one of my servers last night. > > Definitely an exploit. > > > > -Original Message- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > > Sent: Sunday, July 19, 2009 6:33 PM > > To: 'Half-Life dedicated Win32 server mailing list' > > Cc: 'Eric Smith' > > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > > > Lately, I've been getting crashes in the ClipRayToVPhysics function and > > other physics related functions. It's been occurring on more than one > > server > > and seems to happen more often recently. The increasing frequency leads > me > > to believe that it could be some kind of exploit. I do not run SourceMod. > > Here are some sample stack traces. > > > > #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > #2 0xf7715005 in CEngineTrace::TraceRay () > > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > > #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #5 0xf55735ce in CBasePlayer::ItemPostFrame () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #6 0xf5af971c in CTFPlayer::ItemPostFrame () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #7 0xf57aeef8 in CBasePlayer::PostThink () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #8 0xf5ae1dba in CTFPlayer::PostThink () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #9 0xf57c6872 in CPlayerMove::RunPostThink () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #10 0xf57c83ba in CPlayerMove::RunCommand () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > ... > > > > > > #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #3 0xf5511062 in CBaseEntity::Touch () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () > > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so &g
Re: [hlds] ClipRayToVPhysics crash and other related crash
Do you mean srcds crashes and you don't have anything to automatically restart it? If so, it could be what I've been experiencing. If you mean srcds is locking up, I've seen that too, but I think it's because of a rarely occurring bug. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 1:01 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma wrote: > Happened three times in five minutes on one of my servers last night. > Definitely an exploit. > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > Sent: Sunday, July 19, 2009 6:33 PM > To: 'Half-Life dedicated Win32 server mailing list' > Cc: 'Eric Smith' > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > Lately, I've been getting crashes in the ClipRayToVPhysics function and > other physics related functions. It's been occurring on more than one > server > and seems to happen more often recently. The increasing frequency leads me > to believe that it could be some kind of exploit. I do not run SourceMod. > Here are some sample stack traces. > > #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #2 0xf7715005 in CEngineTrace::TraceRay () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #5 0xf55735ce in CBasePlayer::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #6 0xf5af971c in CTFPlayer::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #7 0xf57aeef8 in CBasePlayer::PostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #8 0xf5ae1dba in CTFPlayer::PostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #9 0xf57c6872 in CPlayerMove::RunPostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #10 0xf57c83ba in CPlayerMove::RunCommand () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > ... > > > #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #3 0xf5511062 in CBaseEntity::Touch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #8 0xf574729e in CBaseEntity::PhysicsPushEntity () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #9 0xf575546e in CBaseEntity::PhysicsToss () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #11 0xf5748b29 in Physics_SimulateEntity () > ... > > This one doesn't make it to PositionArrowOnBone: > #0 0xf5b55901 in CTFProjectile_Arrow::StrikeTarget () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #1 0xf5b54c0b in CTFProjectile_Arrow::ArrowTouch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #2 0xf54e5062 in CBaseEntity::Touch () > from /home/srcds/tf2server
Re: [hlds] ClipRayToVPhysics crash and other related crash
My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma wrote: > Happened three times in five minutes on one of my servers last night. > Definitely an exploit. > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > Sent: Sunday, July 19, 2009 6:33 PM > To: 'Half-Life dedicated Win32 server mailing list' > Cc: 'Eric Smith' > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > Lately, I've been getting crashes in the ClipRayToVPhysics function and > other physics related functions. It's been occurring on more than one > server > and seems to happen more often recently. The increasing frequency leads me > to believe that it could be some kind of exploit. I do not run SourceMod. > Here are some sample stack traces. > > #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #2 0xf7715005 in CEngineTrace::TraceRay () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #5 0xf55735ce in CBasePlayer::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #6 0xf5af971c in CTFPlayer::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #7 0xf57aeef8 in CBasePlayer::PostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #8 0xf5ae1dba in CTFPlayer::PostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #9 0xf57c6872 in CPlayerMove::RunPostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #10 0xf57c83ba in CPlayerMove::RunCommand () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > ... > > > #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #3 0xf5511062 in CBaseEntity::Touch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #8 0xf574729e in CBaseEntity::PhysicsPushEntity () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #9 0xf575546e in CBaseEntity::PhysicsToss () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #11 0xf5748b29 in Physics_SimulateEntity () > ... > > This one doesn't make it to PositionArrowOnBone: > #0 0xf5b55901 in CTFProjectile_Arrow::StrikeTarget () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #1 0xf5b54c0b in CTFProjectile_Arrow::ArrowTouch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #2 0xf54e5062 in CBaseEntity::Touch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #3 0xf57218be in CBaseEntity::PhysicsStartTouch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #4 0xf572380f in CBaseEntity::PhysicsMarkEntityAsTouched () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #5 0xf5723b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #6 0xf5723be4 in CBaseEntity::PhysicsImpact () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #7 0xf571b29e in CBaseEntity::PhysicsPushEntity () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #8 0xf572946e in CBaseEntity::PhysicsToss () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #9 0xf5729da2 in CBaseEntity::PhysicsSimulate () > from /home/srcds/tf2server/orangebox/tf/
Re: [hlds] ClipRayToVPhysics crash and other related crash
Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5511062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf574729e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf575546e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #11 0xf5748b29 in Physics_SimulateEntity () ... This one doesn't make it to PositionArrowOnBone: #0 0xf5b55901 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b54c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf54e5062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf57218be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf572380f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf5723b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5723be4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf571b29e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf572946e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf5729da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf571cb29 in Physics_SimulateEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #11 0xf571d0a6 in Physics_RunThinkFunctions () ... ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
give us all your server info like specs of the server wat version of tf etc all i can tell is that it you are on linux oh do you have the times of when these errors occured and to check the log files On Sun, Jul 19, 2009 at 10:47 PM, Tony Paloma wrote: > And here's another crash trace probably related: > #0 0xf5c3785e in VectorTransform () >from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #1 0xf5c388bf in TransformAABB () >from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #2 0xf5ba1e1e in CTFProjectile_Arrow::PositionArrowOnBone () >from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #3 0xf5ba33e2 in CTFProjectile_Arrow::StrikeTarget () >from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #4 0xf5ba2c0b in CTFProjectile_Arrow::ArrowTouch () >from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #5 0xf5533062 in CBaseEntity::Touch () >from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #6 0xf576f8be in CBaseEntity::PhysicsStartTouch () >from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #7 0xf577180f in CBaseEntity::PhysicsMarkEntityAsTouched () >from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #8 0xf5771b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () >from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #9 0xf5771be4 in CBaseEntity::PhysicsImpact () >from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #10 0xf576929e in CBaseEntity::PhysicsPushEntity () >from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > > Maybe somehow some variables (origin, angles, etc.) are getting set to > invalid/NaN values which is messing with these functions? > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma > Sent: Sunday, July 19, 2009 6:33 PM > To: 'Half-Life dedicated Win32 server mailing list' > Cc: 'Eric Smith' > Subject: [hlds] ClipRayToVPhysics crash and other related crash > > Lately, I've been getting crashes in the ClipRayToVPhysics function and > other physics related functions. It's been occurring on more than one > server > and seems to happen more often recently. The increasing frequency leads me > to believe that it could be some kind of exploit. I do not run SourceMod. > Here are some sample stack traces. > > #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #2 0xf7715005 in CEngineTrace::TraceRay () > from /home/srcds/tf2server/orangebox/bin/engine_i486.so > #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #5 0xf55735ce in CBasePlayer::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #6 0xf5af971c in CTFPlayer::ItemPostFrame () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #7 0xf57aeef8 in CBasePlayer::PostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #8 0xf5ae1dba in CTFPlayer::PostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #9 0xf57c6872 in CPlayerMove::RunPostThink () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #10 0xf57c83ba in CPlayerMove::RunCommand () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > ... > > > #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #3 0xf5511062 in CBaseEntity::Touch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #8 0xf574729e in CBaseEntity::PhysicsPushEntity () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #9 0xf575546e in CBaseEntity::PhysicsToss () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () > from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so > #11 0xf5748b29 in Physics_SimulateEntity () > ... > >
Re: [hlds] ClipRayToVPhysics crash and other related crash
And here's another crash trace probably related: #0 0xf5c3785e in VectorTransform () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5c388bf in TransformAABB () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5ba1e1e in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5ba33e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5ba2c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf5533062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf576f8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf577180f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5771b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf5771be4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf576929e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so Maybe somehow some variables (origin, angles, etc.) are getting set to invalid/NaN values which is messing with these functions? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5511062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf574729e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf575546e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #11 0xf5748b29 in Physics_SimulateEntity () ... This one doesn't make it to PositionArrowOnBone: #0 0xf5b55901 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b54c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf54e5062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf57218be in CBaseEntity:
