Re: [hlds] ClipRayToVPhysics crash and other related crash
Steven, Brian here has managed to create 3 different topics, in his first one before remaking this one he posted the link to his plugin: https://forums.alliedmods.net/showthread.php?p=841590 Kyle On Wed, Aug 5, 2009 at 10:50 AM, Steven Crothers steven.croth...@gmail.comwrote: Whats your plugin? I'm using all these rules. iptables -I INPUT -p udp -m string --algo bm --string 'soundscape_flush' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'mem_dump' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'physics_select' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dumpcountedstrings' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dbghist_dump' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dumpeventqueue' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dump_globals' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'physics_debug_entity' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dump_entity_sizes' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dumpentityfactories' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dump_terrain' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'mp_dump_timers' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'soundscape_flush' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'mem_dump' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'physics_select' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dumpcountedstrings' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dbghist_dump' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dumpeventqueue' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dump_globals' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'physics_debug_entity' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dump_entity_sizes' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dumpentityfactories' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dump_terrain' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'mp_dump_timers' -j DROP On Wed, Aug 5, 2009 at 1:35 PM, Brian Rak d...@devicenull.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 My plugin fixes this, you don't need firewall rules to do it. Plus, there's many commands that can be exploited to do this, it's not limited to just physics_select - - Brian devicenull Rak -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkp5wuAACgkQdYIfzEQqW+lD1wCfY+N8RPTgEOLbc9FFq3+b+KSO L0oAoL1ftvH22ZXdmINYngvtnDcAq4DY =MtDE -END PGP SIGNATURE- ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
Someone must be out to get you guys. Piss anyone off lately? On Tue, Aug 4, 2009 at 7:23 PM, Kenny Loggins kenny.logg...@clanao.comwrote: Same for me TCadmin just restarted the service due to non responder. Not at a pc so I can't look into it but it was about 6 servers all in a 2 minute time frame. Sent from my iPhone On Aug 4, 2009, at 9:04 PM, Tony Paloma drunkenf...@hotmail.com wrote: Several of my servers just lagged severely. I don't know many details, but it was on at least three srcds instances roughly the same time on two different machines on two different networks. Smells like exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Tuesday, August 04, 2009 6:53 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Whatever it is I'm getting hit hardcore right after this email went out. I hope someone can figure something out. On Aug 4, 2009, at 6:30 PM, Ian phoen...@buckeye-express.com wrote: Found something that may be of information to those being having their servers crashed before being able to get their IP. http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html Newly discovered exploit. And there is a supposed fix for it for Sourcemod users: http://forums.alliedmods.net/showthread.php?t=93934page=5 Post 43 is where you want to look. The rcon_lock plugin updated just days after the exploit was discovered. Hope this helps. - Ian Tony Paloma wrote: Interesting. After it crashes, it makes the same trace? Could be two unrelated crashes. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Tuesday, August 04, 2009 2:01 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Tony, as far as I can tell this is the case. One of my admins who was looking in HLSW found this a second before the server crashed. 00:09:09 L 08/02/2009 - 17:43:43: Add serverdown to friends to bu286STEAM_ID_PENDING connected, address 75.39.129.249:27005 Anyways, Yes. This is most definitely related. Kyle. On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers steven.croth...@gmail.comwrote: I'm not sure what the command is, but I'm 99% positive it was the last person for my servers... one of the community members egged him on and there are some xfire logs to substantiate the accusations. Something else I noticed, when his steam ID finally resolves, its been resolving with really low ID's - and not always the same. Like 42, 31, 29 ect. On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma drunkenf...@hotmail.com wrote: I'm not so sure it's the fault of the last person to connect. You think it's because of a command? Do you know what the commands is? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers Sent: Saturday, August 01, 2009 4:02 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins kenny.logg...@clanao.comwrote: No I didn't check that and no crashes since yesterday. Turns out it was a strange crash from a new plugin (No errors were kicked out at all) since no errors were ever kicked out I just assumed that it was something or someone external. That's what I get for assuming I guess :| -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Thursday, July 30, 2009 10:10 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100
Re: [hlds] ClipRayToVPhysics crash and other related crash
I think I just was hit by the same thing that hit you. Everyone of my server just lagged out big-time and I had to restart everything. I was watching the person do it server by server.. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Tuesday, August 04, 2009 9:05 PM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Several of my servers just lagged severely. I don't know many details, but it was on at least three srcds instances roughly the same time on two different machines on two different networks. Smells like exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Tuesday, August 04, 2009 6:53 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Whatever it is I'm getting hit hardcore right after this email went out. I hope someone can figure something out. On Aug 4, 2009, at 6:30 PM, Ian phoen...@buckeye-express.com wrote: Found something that may be of information to those being having their servers crashed before being able to get their IP. http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html Newly discovered exploit. And there is a supposed fix for it for Sourcemod users: http://forums.alliedmods.net/showthread.php?t=93934page=5 Post 43 is where you want to look. The rcon_lock plugin updated just days after the exploit was discovered. Hope this helps. - Ian Tony Paloma wrote: Interesting. After it crashes, it makes the same trace? Could be two unrelated crashes. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Tuesday, August 04, 2009 2:01 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Tony, as far as I can tell this is the case. One of my admins who was looking in HLSW found this a second before the server crashed. 00:09:09 L 08/02/2009 - 17:43:43: Add serverdown to friends to bu286STEAM_ID_PENDING connected, address 75.39.129.249:27005 Anyways, Yes. This is most definitely related. Kyle. On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers steven.croth...@gmail.comwrote: I'm not sure what the command is, but I'm 99% positive it was the last person for my servers... one of the community members egged him on and there are some xfire logs to substantiate the accusations. Something else I noticed, when his steam ID finally resolves, its been resolving with really low ID's - and not always the same. Like 42, 31, 29 ect. On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma drunkenf...@hotmail.com wrote: I'm not so sure it's the fault of the last person to connect. You think it's because of a command? Do you know what the commands is? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers Sent: Saturday, August 01, 2009 4:02 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins kenny.logg...@clanao.comwrote: No I didn't check that and no crashes since yesterday. Turns out it was a strange crash from a new plugin (No errors were kicked out at all) since no errors were ever kicked out I just assumed that it was something or someone external. That's what I get for assuming I guess :| -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Thursday, July 30, 2009 10:10 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message
Re: [hlds] ClipRayToVPhysics crash and other related crash
iptables -I INPUT -p udp -m string --algo bm --string 'physics_select' -j DROPRequires: ipt_string firewall module. Thats the IPTables command that fully blocks this attack. Feel free to use it on your own servers. The attack was generating from a clan called MIA they run a Jailbreak server. They also seem to be attacking anyone who runs a map with MIA in the name from what I can gather. Hopefully this will help you guys out. Also feel free to block more commands with that as well. For our Windows counter parts I have no idea what your going to use. If this has helped even one person, please show your support by simply visiting our community, joinuv.com. On Wed, Aug 5, 2009 at 3:10 AM, Kenny Loggins kenny.logg...@clanao.comwrote: I think I just was hit by the same thing that hit you. Everyone of my server just lagged out big-time and I had to restart everything. I was watching the person do it server by server.. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Tuesday, August 04, 2009 9:05 PM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Several of my servers just lagged severely. I don't know many details, but it was on at least three srcds instances roughly the same time on two different machines on two different networks. Smells like exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Tuesday, August 04, 2009 6:53 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Whatever it is I'm getting hit hardcore right after this email went out. I hope someone can figure something out. On Aug 4, 2009, at 6:30 PM, Ian phoen...@buckeye-express.com wrote: Found something that may be of information to those being having their servers crashed before being able to get their IP. http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html Newly discovered exploit. And there is a supposed fix for it for Sourcemod users: http://forums.alliedmods.net/showthread.php?t=93934page=5 Post 43 is where you want to look. The rcon_lock plugin updated just days after the exploit was discovered. Hope this helps. - Ian Tony Paloma wrote: Interesting. After it crashes, it makes the same trace? Could be two unrelated crashes. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Tuesday, August 04, 2009 2:01 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Tony, as far as I can tell this is the case. One of my admins who was looking in HLSW found this a second before the server crashed. 00:09:09 L 08/02/2009 - 17:43:43: Add serverdown to friends to bu286STEAM_ID_PENDING connected, address 75.39.129.249:27005 Anyways, Yes. This is most definitely related. Kyle. On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers steven.croth...@gmail.comwrote: I'm not sure what the command is, but I'm 99% positive it was the last person for my servers... one of the community members egged him on and there are some xfire logs to substantiate the accusations. Something else I noticed, when his steam ID finally resolves, its been resolving with really low ID's - and not always the same. Like 42, 31, 29 ect. On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma drunkenf...@hotmail.com wrote: I'm not so sure it's the fault of the last person to connect. You think it's because of a command? Do you know what the commands is? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers Sent: Saturday, August 01, 2009 4:02 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins kenny.logg...@clanao.comwrote: No I didn't check that and no crashes since yesterday. Turns out it was a strange crash from a new plugin (No errors were kicked out at all) since no errors were ever kicked out I just assumed that it was something or someone external. That's
[hlds] ClipRayToVPhysics crash and other related crash
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 My plugin fixes this, you don't need firewall rules to do it. Plus, there's many commands that can be exploited to do this, it's not limited to just physics_select - - Brian devicenull Rak -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkp5wuAACgkQdYIfzEQqW+lD1wCfY+N8RPTgEOLbc9FFq3+b+KSO L0oAoL1ftvH22ZXdmINYngvtnDcAq4DY =MtDE -END PGP SIGNATURE- ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
Whats your plugin? I'm using all these rules. iptables -I INPUT -p udp -m string --algo bm --string 'soundscape_flush' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'mem_dump' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'physics_select' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dumpcountedstrings' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dbghist_dump' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dumpeventqueue' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dump_globals' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'physics_debug_entity' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dump_entity_sizes' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dumpentityfactories' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'dump_terrain' -j DROP iptables -I INPUT -p udp -m string --algo bm --string 'mp_dump_timers' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'soundscape_flush' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'mem_dump' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'physics_select' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dumpcountedstrings' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dbghist_dump' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dumpeventqueue' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dump_globals' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'physics_debug_entity' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dump_entity_sizes' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dumpentityfactories' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'dump_terrain' -j DROP iptables -I INPUT -p tcp -m string --algo bm --string 'mp_dump_timers' -j DROP On Wed, Aug 5, 2009 at 1:35 PM, Brian Rak d...@devicenull.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 My plugin fixes this, you don't need firewall rules to do it. Plus, there's many commands that can be exploited to do this, it's not limited to just physics_select - - Brian devicenull Rak -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkp5wuAACgkQdYIfzEQqW+lD1wCfY+N8RPTgEOLbc9FFq3+b+KSO L0oAoL1ftvH22ZXdmINYngvtnDcAq4DY =MtDE -END PGP SIGNATURE- ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
Tony, as far as I can tell this is the case. One of my admins who was looking in HLSW found this a second before the server crashed. 00:09:09 L 08/02/2009 - 17:43:43: Add serverdown to friends to bu286STEAM_ID_PENDING connected, address 75.39.129.249:27005 Anyways, Yes. This is most definitely related. Kyle. On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers steven.croth...@gmail.comwrote: I'm not sure what the command is, but I'm 99% positive it was the last person for my servers... one of the community members egged him on and there are some xfire logs to substantiate the accusations. Something else I noticed, when his steam ID finally resolves, its been resolving with really low ID's - and not always the same. Like 42, 31, 29 ect. On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma drunkenf...@hotmail.com wrote: I'm not so sure it's the fault of the last person to connect. You think it's because of a command? Do you know what the commands is? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers Sent: Saturday, August 01, 2009 4:02 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins kenny.logg...@clanao.comwrote: No I didn't check that and no crashes since yesterday. Turns out it was a strange crash from a new plugin (No errors were kicked out at all) since no errors were ever kicked out I just assumed that it was something or someone external. That's what I get for assuming I guess :| -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Thursday, July 30, 2009 10:10 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink
Re: [hlds] ClipRayToVPhysics crash and other related crash
Found something that may be of information to those being having their servers crashed before being able to get their IP. http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html Newly discovered exploit. And there is a supposed fix for it for Sourcemod users: http://forums.alliedmods.net/showthread.php?t=93934page=5 Post 43 is where you want to look. The rcon_lock plugin updated just days after the exploit was discovered. Hope this helps. - Ian Tony Paloma wrote: Interesting. After it crashes, it makes the same trace? Could be two unrelated crashes. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Tuesday, August 04, 2009 2:01 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Tony, as far as I can tell this is the case. One of my admins who was looking in HLSW found this a second before the server crashed. 00:09:09 L 08/02/2009 - 17:43:43: Add serverdown to friends to bu286STEAM_ID_PENDING connected, address 75.39.129.249:27005 Anyways, Yes. This is most definitely related. Kyle. On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers steven.croth...@gmail.comwrote: I'm not sure what the command is, but I'm 99% positive it was the last person for my servers... one of the community members egged him on and there are some xfire logs to substantiate the accusations. Something else I noticed, when his steam ID finally resolves, its been resolving with really low ID's - and not always the same. Like 42, 31, 29 ect. On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma drunkenf...@hotmail.com wrote: I'm not so sure it's the fault of the last person to connect. You think it's because of a command? Do you know what the commands is? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers Sent: Saturday, August 01, 2009 4:02 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins kenny.logg...@clanao.comwrote: No I didn't check that and no crashes since yesterday. Turns out it was a strange crash from a new plugin (No errors were kicked out at all) since no errors were ever kicked out I just assumed that it was something or someone external. That's what I get for assuming I guess :| -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Thursday, July 30, 2009 10:10 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run
Re: [hlds] ClipRayToVPhysics crash and other related crash
Whatever it is I'm getting hit hardcore right after this email went out. I hope someone can figure something out. On Aug 4, 2009, at 6:30 PM, Ian phoen...@buckeye-express.com wrote: Found something that may be of information to those being having their servers crashed before being able to get their IP. http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html Newly discovered exploit. And there is a supposed fix for it for Sourcemod users: http://forums.alliedmods.net/showthread.php?t=93934page=5 Post 43 is where you want to look. The rcon_lock plugin updated just days after the exploit was discovered. Hope this helps. - Ian Tony Paloma wrote: Interesting. After it crashes, it makes the same trace? Could be two unrelated crashes. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Tuesday, August 04, 2009 2:01 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Tony, as far as I can tell this is the case. One of my admins who was looking in HLSW found this a second before the server crashed. 00:09:09 L 08/02/2009 - 17:43:43: Add serverdown to friends to bu286STEAM_ID_PENDING connected, address 75.39.129.249:27005 Anyways, Yes. This is most definitely related. Kyle. On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers steven.croth...@gmail.comwrote: I'm not sure what the command is, but I'm 99% positive it was the last person for my servers... one of the community members egged him on and there are some xfire logs to substantiate the accusations. Something else I noticed, when his steam ID finally resolves, its been resolving with really low ID's - and not always the same. Like 42, 31, 29 ect. On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma drunkenf...@hotmail.com wrote: I'm not so sure it's the fault of the last person to connect. You think it's because of a command? Do you know what the commands is? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers Sent: Saturday, August 01, 2009 4:02 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins kenny.logg...@clanao.comwrote: No I didn't check that and no crashes since yesterday. Turns out it was a strange crash from a new plugin (No errors were kicked out at all) since no errors were ever kicked out I just assumed that it was something or someone external. That's what I get for assuming I guess :| -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Thursday, July 30, 2009 10:10 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me
Re: [hlds] ClipRayToVPhysics crash and other related crash
Several of my servers just lagged severely. I don't know many details, but it was on at least three srcds instances roughly the same time on two different machines on two different networks. Smells like exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Tuesday, August 04, 2009 6:53 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Whatever it is I'm getting hit hardcore right after this email went out. I hope someone can figure something out. On Aug 4, 2009, at 6:30 PM, Ian phoen...@buckeye-express.com wrote: Found something that may be of information to those being having their servers crashed before being able to get their IP. http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html Newly discovered exploit. And there is a supposed fix for it for Sourcemod users: http://forums.alliedmods.net/showthread.php?t=93934page=5 Post 43 is where you want to look. The rcon_lock plugin updated just days after the exploit was discovered. Hope this helps. - Ian Tony Paloma wrote: Interesting. After it crashes, it makes the same trace? Could be two unrelated crashes. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Tuesday, August 04, 2009 2:01 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Tony, as far as I can tell this is the case. One of my admins who was looking in HLSW found this a second before the server crashed. 00:09:09 L 08/02/2009 - 17:43:43: Add serverdown to friends to bu286STEAM_ID_PENDING connected, address 75.39.129.249:27005 Anyways, Yes. This is most definitely related. Kyle. On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers steven.croth...@gmail.comwrote: I'm not sure what the command is, but I'm 99% positive it was the last person for my servers... one of the community members egged him on and there are some xfire logs to substantiate the accusations. Something else I noticed, when his steam ID finally resolves, its been resolving with really low ID's - and not always the same. Like 42, 31, 29 ect. On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma drunkenf...@hotmail.com wrote: I'm not so sure it's the fault of the last person to connect. You think it's because of a command? Do you know what the commands is? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers Sent: Saturday, August 01, 2009 4:02 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins kenny.logg...@clanao.comwrote: No I didn't check that and no crashes since yesterday. Turns out it was a strange crash from a new plugin (No errors were kicked out at all) since no errors were ever kicked out I just assumed that it was something or someone external. That's what I get for assuming I guess :| -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Thursday, July 30, 2009 10:10 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun
Re: [hlds] ClipRayToVPhysics crash and other related crash
Same for me TCadmin just restarted the service due to non responder. Not at a pc so I can't look into it but it was about 6 servers all in a 2 minute time frame. Sent from my iPhone On Aug 4, 2009, at 9:04 PM, Tony Paloma drunkenf...@hotmail.com wrote: Several of my servers just lagged severely. I don't know many details, but it was on at least three srcds instances roughly the same time on two different machines on two different networks. Smells like exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Tuesday, August 04, 2009 6:53 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Whatever it is I'm getting hit hardcore right after this email went out. I hope someone can figure something out. On Aug 4, 2009, at 6:30 PM, Ian phoen...@buckeye-express.com wrote: Found something that may be of information to those being having their servers crashed before being able to get their IP. http://aluigi.freeforums.org/source-engine-seg-fault-crash-exploit-t993.html Newly discovered exploit. And there is a supposed fix for it for Sourcemod users: http://forums.alliedmods.net/showthread.php?t=93934page=5 Post 43 is where you want to look. The rcon_lock plugin updated just days after the exploit was discovered. Hope this helps. - Ian Tony Paloma wrote: Interesting. After it crashes, it makes the same trace? Could be two unrelated crashes. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Tuesday, August 04, 2009 2:01 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Tony, as far as I can tell this is the case. One of my admins who was looking in HLSW found this a second before the server crashed. 00:09:09 L 08/02/2009 - 17:43:43: Add serverdown to friends to bu286STEAM_ID_PENDING connected, address 75.39.129.249:27005 Anyways, Yes. This is most definitely related. Kyle. On Sun, Aug 2, 2009 at 2:58 PM, Steven Crothers steven.croth...@gmail.comwrote: I'm not sure what the command is, but I'm 99% positive it was the last person for my servers... one of the community members egged him on and there are some xfire logs to substantiate the accusations. Something else I noticed, when his steam ID finally resolves, its been resolving with really low ID's - and not always the same. Like 42, 31, 29 ect. On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma drunkenf...@hotmail.com wrote: I'm not so sure it's the fault of the last person to connect. You think it's because of a command? Do you know what the commands is? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers Sent: Saturday, August 01, 2009 4:02 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins kenny.logg...@clanao.comwrote: No I didn't check that and no crashes since yesterday. Turns out it was a strange crash from a new plugin (No errors were kicked out at all) since no errors were ever kicked out I just assumed that it was something or someone external. That's what I get for assuming I guess :| -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Thursday, July 30, 2009 10:10 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re
Re: [hlds] ClipRayToVPhysics crash and other related crash
I'm not sure what the command is, but I'm 99% positive it was the last person for my servers... one of the community members egged him on and there are some xfire logs to substantiate the accusations. Something else I noticed, when his steam ID finally resolves, its been resolving with really low ID's - and not always the same. Like 42, 31, 29 ect. On Sat, Aug 1, 2009 at 7:40 PM, Tony Paloma drunkenf...@hotmail.com wrote: I'm not so sure it's the fault of the last person to connect. You think it's because of a command? Do you know what the commands is? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers Sent: Saturday, August 01, 2009 4:02 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins kenny.logg...@clanao.comwrote: No I didn't check that and no crashes since yesterday. Turns out it was a strange crash from a new plugin (No errors were kicked out at all) since no errors were ever kicked out I just assumed that it was something or someone external. That's what I get for assuming I guess :| -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Thursday, July 30, 2009 10:10 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
I'm not so sure it's the fault of the last person to connect. You think it's because of a command? Do you know what the commands is? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers Sent: Saturday, August 01, 2009 4:02 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash I've gotten the same crash on my servers today. I've been harvesting his IP's (I cant confirm they are all him, but I've been banning the last connector before each crash) and blocking him via iptables. I'm getting one of my modders to work on an SM mod to attempt to block the console commands he's running. However is there any word from Valve on the subject? On Thu, Jul 30, 2009 at 12:26 PM, Kenny Loggins kenny.logg...@clanao.comwrote: No I didn't check that and no crashes since yesterday. Turns out it was a strange crash from a new plugin (No errors were kicked out at all) since no errors were ever kicked out I just assumed that it was something or someone external. That's what I get for assuming I guess :| -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Thursday, July 30, 2009 10:10 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com
Re: [hlds] ClipRayToVPhysics crash and other related crash
Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
Have you even checked the stack trace? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 1:30 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Ok I'm going to recant this because I need to look more into it. I'm not 100% sure it related to anything external right now. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kenny Loggins Sent: Thursday, July 30, 2009 12:57 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
Any headway on this? Some douchebag has been crashing my servers for the past 2 days now and today was really bad (20+ crashes) -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 8:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
[hlds] ClipRayToVPhysics crash and other related crash
I get those exact 2 crashes, where gdb shows it was either in ClipRayToVPhysics() or CTFProjectile_Arrow::PositionArrowOnBone() If anyone at Valve wants my crash dumps, I'll be happy to send the relevant ones. Or if anyone else has a clue on how this is being done, I'd sure at least like to know what to look for, like if you have to be a sniper, or standing in the spawn, or zoomed in and looking at something, then I can know who to ban/firewall! ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
Last Online: 248 days ago + VAC ban? On Wed, Jul 22, 2009 at 10:04 PM, Tony Paloma drunkenf...@hotmail.comwrote: http://steamcommunity.com/profiles/76561197969629969 STEAM_0:1:4682120 -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 7:23 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash The player's name is Nowayz and I know he is subscribed to this list as 90% of all exploiters are so Hi to you. When I mean a second after he joins the server crashes I mean a second. It isn't even long enough for him to be ingame or anything, his entry isn't even logged. This is starting to look like that physics_select exploit. Kyle. On Wed, Jul 22, 2009 at 7:08 PM, msleeper mslee...@cyberwurx.com wrote: Post their name/SteamID for the benefit of the rest of us. On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: Someone is deliberately crashing my Linux Installation of SRCDS (I am aware this is the Windows discussion but this is happening to a whole set of servers both running Windows and Linux, mine just happens to be Linux), I'm with a GSP so I cannot grab any mdmp files sadly. However it is being deliberately done as this one player always joins then the server instantaneously crashes. Usually when the server crashes it obviously comes back up as there are scripts set in place to do so, however in this case, it does not come back automatically. I hope I'm making sense to at least a few of you, Kyle. On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma drunkenf...@hotmail.com wrote: Do you mean srcds crashes and you don't have anything to automatically restart it? If so, it could be what I've been experiencing. If you mean srcds is locking up, I've seen that too, but I think it's because of a rarely occurring bug. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 1:01 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma drunkenf...@hotmail.com wrote: Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin
Re: [hlds] ClipRayToVPhysics crash and other related crash
Found him, atleast someone from HellsGamers did. http://hellsgamers.com/forums/showpost.php?p=41295postcount=5 http://www.google.com/search?hl=enrlz=1G1GGLQ_ENUS337q=STEAM_0%3A1%3A12689235btnG=Searchaq=foq=aqi= http://steamcommunity.com/profiles/76561197985644199 STEAM_0:1:12689235 Banned here. Kyle On Thu, Jul 23, 2009 at 12:19 AM, DontWannaName! ad...@topnotchclan.comwrote: Last Online: 248 days ago + VAC ban? On Wed, Jul 22, 2009 at 10:04 PM, Tony Paloma drunkenf...@hotmail.com wrote: http://steamcommunity.com/profiles/76561197969629969 STEAM_0:1:4682120 -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 7:23 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash The player's name is Nowayz and I know he is subscribed to this list as 90% of all exploiters are so Hi to you. When I mean a second after he joins the server crashes I mean a second. It isn't even long enough for him to be ingame or anything, his entry isn't even logged. This is starting to look like that physics_select exploit. Kyle. On Wed, Jul 22, 2009 at 7:08 PM, msleeper mslee...@cyberwurx.com wrote: Post their name/SteamID for the benefit of the rest of us. On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: Someone is deliberately crashing my Linux Installation of SRCDS (I am aware this is the Windows discussion but this is happening to a whole set of servers both running Windows and Linux, mine just happens to be Linux), I'm with a GSP so I cannot grab any mdmp files sadly. However it is being deliberately done as this one player always joins then the server instantaneously crashes. Usually when the server crashes it obviously comes back up as there are scripts set in place to do so, however in this case, it does not come back automatically. I hope I'm making sense to at least a few of you, Kyle. On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma drunkenf...@hotmail.com wrote: Do you mean srcds crashes and you don't have anything to automatically restart it? If so, it could be what I've been experiencing. If you mean srcds is locking up, I've seen that too, but I think it's because of a rarely occurring bug. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 1:01 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma drunkenf...@hotmail.com wrote: Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame
Re: [hlds] ClipRayToVPhysics crash and other related crash
Steam id: STEAM_0:1:11902529 IP: 24.61.156.157 HLStatsx: http://ego.hlstatsx.com/?mode=playerinfoplayer=428993 Steam community page: http://steamcommunity.com/id/gun_grave/ This guy crashed our server. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Thursday, July 23, 2009 2:23 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Found him, atleast someone from HellsGamers did. http://hellsgamers.com/forums/showpost.php?p=41295postcount=5 http://www.google.com/search?hl=enrlz=1G1GGLQ_ENUS337q=STEAM_0%3A1%3A12689 235btnG=Searchaq=foq=aqi= http://steamcommunity.com/profiles/76561197985644199 STEAM_0:1:12689235 Banned here. Kyle On Thu, Jul 23, 2009 at 12:19 AM, DontWannaName! ad...@topnotchclan.comwrote: Last Online: 248 days ago + VAC ban? On Wed, Jul 22, 2009 at 10:04 PM, Tony Paloma drunkenf...@hotmail.com wrote: http://steamcommunity.com/profiles/76561197969629969 STEAM_0:1:4682120 -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 7:23 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash The player's name is Nowayz and I know he is subscribed to this list as 90% of all exploiters are so Hi to you. When I mean a second after he joins the server crashes I mean a second. It isn't even long enough for him to be ingame or anything, his entry isn't even logged. This is starting to look like that physics_select exploit. Kyle. On Wed, Jul 22, 2009 at 7:08 PM, msleeper mslee...@cyberwurx.com wrote: Post their name/SteamID for the benefit of the rest of us. On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: Someone is deliberately crashing my Linux Installation of SRCDS (I am aware this is the Windows discussion but this is happening to a whole set of servers both running Windows and Linux, mine just happens to be Linux), I'm with a GSP so I cannot grab any mdmp files sadly. However it is being deliberately done as this one player always joins then the server instantaneously crashes. Usually when the server crashes it obviously comes back up as there are scripts set in place to do so, however in this case, it does not come back automatically. I hope I'm making sense to at least a few of you, Kyle. On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma drunkenf...@hotmail.com wrote: Do you mean srcds crashes and you don't have anything to automatically restart it? If so, it could be what I've been experiencing. If you mean srcds is locking up, I've seen that too, but I think it's because of a rarely occurring bug. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 1:01 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma drunkenf...@hotmail.com wrote: Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005
Re: [hlds] ClipRayToVPhysics crash and other related crash
I am using Linux, and I've just started getting crashes every other map, and I suspect this issue... how are you guys determining who is causing the crash? On Thu, Jul 23, 2009 at 10:36 AM, GardenGroveVW hldsl...@taberprame.comwrote: Steam id: STEAM_0:1:11902529 IP: 24.61.156.157 HLStatsx: http://ego.hlstatsx.com/?mode=playerinfoplayer=428993 Steam community page: http://steamcommunity.com/id/gun_grave/ This guy crashed our server. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Thursday, July 23, 2009 2:23 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash Found him, atleast someone from HellsGamers did. http://hellsgamers.com/forums/showpost.php?p=41295postcount=5 http://www.google.com/search?hl=enrlz=1G1GGLQ_ENUS337q=STEAM_0%3A1%3A12689 235btnG=Searchaq=foq=aqi=http://www.google.com/search?hl=enrlz=1G1GGLQ_ENUS337q=STEAM_0%3A1%3A12689%0A235btnG=Searchaq=foq=aqi= http://steamcommunity.com/profiles/76561197985644199 STEAM_0:1:12689235http://steamcommunity.com/profiles/76561197985644199%0ASTEAM_0:1:12689235 Banned here. Kyle On Thu, Jul 23, 2009 at 12:19 AM, DontWannaName! ad...@topnotchclan.comwrote: Last Online: 248 days ago + VAC ban? On Wed, Jul 22, 2009 at 10:04 PM, Tony Paloma drunkenf...@hotmail.com wrote: http://steamcommunity.com/profiles/76561197969629969 STEAM_0:1:4682120 -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 7:23 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash The player's name is Nowayz and I know he is subscribed to this list as 90% of all exploiters are so Hi to you. When I mean a second after he joins the server crashes I mean a second. It isn't even long enough for him to be ingame or anything, his entry isn't even logged. This is starting to look like that physics_select exploit. Kyle. On Wed, Jul 22, 2009 at 7:08 PM, msleeper mslee...@cyberwurx.com wrote: Post their name/SteamID for the benefit of the rest of us. On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: Someone is deliberately crashing my Linux Installation of SRCDS (I am aware this is the Windows discussion but this is happening to a whole set of servers both running Windows and Linux, mine just happens to be Linux), I'm with a GSP so I cannot grab any mdmp files sadly. However it is being deliberately done as this one player always joins then the server instantaneously crashes. Usually when the server crashes it obviously comes back up as there are scripts set in place to do so, however in this case, it does not come back automatically. I hope I'm making sense to at least a few of you, Kyle. On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma drunkenf...@hotmail.com wrote: Do you mean srcds crashes and you don't have anything to automatically restart it? If so, it could be what I've been experiencing. If you mean srcds is locking up, I've seen that too, but I think it's because of a rarely occurring bug. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 1:01 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma drunkenf...@hotmail.com wrote: Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related
Re: [hlds] ClipRayToVPhysics crash and other related crash
For me, one player joins then the server instantaneously crashes... After I added this kids SteamID to my servers banlist it hasn't crashed for the past 36hours... Which says a lot to me. However this topic has been hijacked so lets try to bring it back to Tony's issue with ClipRayToVPhysics. Just thought I should throw out there that the GSP is running CentOS and I'm running a Counter-Strike Source server. Kyle. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5511062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf574729e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf575546e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #11 0xf5748b29 in Physics_SimulateEntity () ... This one doesn't make it to PositionArrowOnBone: #0 0xf5b55901 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b54c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf54e5062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf57218be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf572380f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf5723b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5723be4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf571b29e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf572946e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf5729da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf571cb29 in Physics_SimulateEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #11 0xf571d0a6 in Physics_RunThinkFunctions () ... ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma drunkenf...@hotmail.comwrote: Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5511062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf574729e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf575546e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #11 0xf5748b29 in Physics_SimulateEntity () ... This one doesn't make it to PositionArrowOnBone: #0 0xf5b55901 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b54c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf54e5062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf57218be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf572380f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf5723b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5723be4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf571b29e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf572946e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf5729da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf571cb29 in Physics_SimulateEntity
Re: [hlds] ClipRayToVPhysics crash and other related crash
Do you mean srcds crashes and you don't have anything to automatically restart it? If so, it could be what I've been experiencing. If you mean srcds is locking up, I've seen that too, but I think it's because of a rarely occurring bug. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 1:01 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma drunkenf...@hotmail.comwrote: Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5511062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf574729e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf575546e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #11 0xf5748b29 in Physics_SimulateEntity () ... This one doesn't make it to PositionArrowOnBone: #0 0xf5b55901 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b54c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf54e5062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf57218be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf572380f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf5723b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home
Re: [hlds] ClipRayToVPhysics crash and other related crash
Someone is deliberately crashing my Linux Installation of SRCDS (I am aware this is the Windows discussion but this is happening to a whole set of servers both running Windows and Linux, mine just happens to be Linux), I'm with a GSP so I cannot grab any mdmp files sadly. However it is being deliberately done as this one player always joins then the server instantaneously crashes. Usually when the server crashes it obviously comes back up as there are scripts set in place to do so, however in this case, it does not come back automatically. I hope I'm making sense to at least a few of you, Kyle. On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma drunkenf...@hotmail.comwrote: Do you mean srcds crashes and you don't have anything to automatically restart it? If so, it could be what I've been experiencing. If you mean srcds is locking up, I've seen that too, but I think it's because of a rarely occurring bug. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 1:01 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma drunkenf...@hotmail.com wrote: Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5511062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf574729e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf575546e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin
Re: [hlds] ClipRayToVPhysics crash and other related crash
Post their name/SteamID for the benefit of the rest of us. On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: Someone is deliberately crashing my Linux Installation of SRCDS (I am aware this is the Windows discussion but this is happening to a whole set of servers both running Windows and Linux, mine just happens to be Linux), I'm with a GSP so I cannot grab any mdmp files sadly. However it is being deliberately done as this one player always joins then the server instantaneously crashes. Usually when the server crashes it obviously comes back up as there are scripts set in place to do so, however in this case, it does not come back automatically. I hope I'm making sense to at least a few of you, Kyle. On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma drunkenf...@hotmail.comwrote: Do you mean srcds crashes and you don't have anything to automatically restart it? If so, it could be what I've been experiencing. If you mean srcds is locking up, I've seen that too, but I think it's because of a rarely occurring bug. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 1:01 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma drunkenf...@hotmail.com wrote: Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5511062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf574729e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so
Re: [hlds] ClipRayToVPhysics crash and other related crash
The player's name is Nowayz and I know he is subscribed to this list as 90% of all exploiters are so Hi to you. When I mean a second after he joins the server crashes I mean a second. It isn't even long enough for him to be ingame or anything, his entry isn't even logged. This is starting to look like that physics_select exploit. Kyle. On Wed, Jul 22, 2009 at 7:08 PM, msleeper mslee...@cyberwurx.com wrote: Post their name/SteamID for the benefit of the rest of us. On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: Someone is deliberately crashing my Linux Installation of SRCDS (I am aware this is the Windows discussion but this is happening to a whole set of servers both running Windows and Linux, mine just happens to be Linux), I'm with a GSP so I cannot grab any mdmp files sadly. However it is being deliberately done as this one player always joins then the server instantaneously crashes. Usually when the server crashes it obviously comes back up as there are scripts set in place to do so, however in this case, it does not come back automatically. I hope I'm making sense to at least a few of you, Kyle. On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma drunkenf...@hotmail.com wrote: Do you mean srcds crashes and you don't have anything to automatically restart it? If so, it could be what I've been experiencing. If you mean srcds is locking up, I've seen that too, but I think it's because of a rarely occurring bug. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 1:01 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma drunkenf...@hotmail.com wrote: Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5511062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server
Re: [hlds] ClipRayToVPhysics crash and other related crash
http://steamcommunity.com/profiles/76561197969629969 STEAM_0:1:4682120 -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 7:23 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash The player's name is Nowayz and I know he is subscribed to this list as 90% of all exploiters are so Hi to you. When I mean a second after he joins the server crashes I mean a second. It isn't even long enough for him to be ingame or anything, his entry isn't even logged. This is starting to look like that physics_select exploit. Kyle. On Wed, Jul 22, 2009 at 7:08 PM, msleeper mslee...@cyberwurx.com wrote: Post their name/SteamID for the benefit of the rest of us. On Wed, 2009-07-22 at 19:00 -0700, Kyle Sanderson wrote: Someone is deliberately crashing my Linux Installation of SRCDS (I am aware this is the Windows discussion but this is happening to a whole set of servers both running Windows and Linux, mine just happens to be Linux), I'm with a GSP so I cannot grab any mdmp files sadly. However it is being deliberately done as this one player always joins then the server instantaneously crashes. Usually when the server crashes it obviously comes back up as there are scripts set in place to do so, however in this case, it does not come back automatically. I hope I'm making sense to at least a few of you, Kyle. On Wed, Jul 22, 2009 at 1:36 PM, Tony Paloma drunkenf...@hotmail.com wrote: Do you mean srcds crashes and you don't have anything to automatically restart it? If so, it could be what I've been experiencing. If you mean srcds is locking up, I've seen that too, but I think it's because of a rarely occurring bug. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, July 22, 2009 1:01 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] ClipRayToVPhysics crash and other related crash My server/s at the moment are just getting attacked/crashed non stop at the moment. They've moved off from the timeleft/nextmap spamming but I'm not sure what is causing it now. These arn't soft crashes either where SRCDS is able to come back up, they are actually shut down and cannot automatically come back. If anyone has any information at all, please contact me. Kyle. On Wed, Jul 22, 2009 at 8:51 AM, Tony Paloma drunkenf...@hotmail.com wrote: Happened three times in five minutes on one of my servers last night. Definitely an exploit. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home
Re: [hlds] ClipRayToVPhysics crash and other related crash
give us all your server info like specs of the server wat version of tf etc all i can tell is that it you are on linux oh do you have the times of when these errors occured and to check the log files On Sun, Jul 19, 2009 at 10:47 PM, Tony Paloma drunkenf...@hotmail.comwrote: And here's another crash trace probably related: #0 0xf5c3785e in VectorTransform () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5c388bf in TransformAABB () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5ba1e1e in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5ba33e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5ba2c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf5533062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf576f8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf577180f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5771b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf5771be4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf576929e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so Maybe somehow some variables (origin, angles, etc.) are getting set to invalid/NaN values which is messing with these functions? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5511062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf574729e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf575546e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #11 0xf5748b29 in Physics_SimulateEntity () ... This one doesn't make it to PositionArrowOnBone: #0 0xf5b55901
[hlds] ClipRayToVPhysics crash and other related crash
Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5511062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf574729e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf575546e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #11 0xf5748b29 in Physics_SimulateEntity () ... This one doesn't make it to PositionArrowOnBone: #0 0xf5b55901 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b54c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf54e5062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf57218be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf572380f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf5723b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5723be4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf571b29e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf572946e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf5729da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf571cb29 in Physics_SimulateEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #11 0xf571d0a6 in Physics_RunThinkFunctions () ... ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] ClipRayToVPhysics crash and other related crash
And here's another crash trace probably related: #0 0xf5c3785e in VectorTransform () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5c388bf in TransformAABB () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5ba1e1e in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5ba33e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5ba2c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf5533062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf576f8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf577180f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5771b7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf5771be4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf576929e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so Maybe somehow some variables (origin, angles, etc.) are getting set to invalid/NaN values which is messing with these functions? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Tony Paloma Sent: Sunday, July 19, 2009 6:33 PM To: 'Half-Life dedicated Win32 server mailing list' Cc: 'Eric Smith' Subject: [hlds] ClipRayToVPhysics crash and other related crash Lately, I've been getting crashes in the ClipRayToVPhysics function and other physics related functions. It's been occurring on more than one server and seems to happen more often recently. The increasing frequency leads me to believe that it could be some kind of exploit. I do not run SourceMod. Here are some sample stack traces. #0 0xf771310c in CEngineTrace::ClipRayToVPhysics () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #1 0xf77148f3 in CEngineTrace::ClipRayToCollideable () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #2 0xf7715005 in CEngineTrace::TraceRay () from /home/srcds/tf2server/orangebox/bin/engine_i486.so #3 0xf5b67c04 in CTFSniperRifle::UpdateSniperDot () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf5b6a8a2 in CTFSniperRifle::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf55735ce in CBasePlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf5af971c in CTFPlayer::ItemPostFrame () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf57aeef8 in CBasePlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf5ae1dba in CTFPlayer::PostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf57c6872 in CPlayerMove::RunPostThink () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf57c83ba in CPlayerMove::RunCommand () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so ... #0 0xf5b7fe06 in CTFProjectile_Arrow::PositionArrowOnBone () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b813e2 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf5b80c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf5511062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #4 0xf574d8be in CBaseEntity::PhysicsStartTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #5 0xf574f80f in CBaseEntity::PhysicsMarkEntityAsTouched () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #6 0xf574fb7a in CBaseEntity::PhysicsMarkEntitiesAsTouching () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #7 0xf574fbe4 in CBaseEntity::PhysicsImpact () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #8 0xf574729e in CBaseEntity::PhysicsPushEntity () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #9 0xf575546e in CBaseEntity::PhysicsToss () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #10 0xf5755da2 in CBaseEntity::PhysicsSimulate () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #11 0xf5748b29 in Physics_SimulateEntity () ... This one doesn't make it to PositionArrowOnBone: #0 0xf5b55901 in CTFProjectile_Arrow::StrikeTarget () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #1 0xf5b54c0b in CTFProjectile_Arrow::ArrowTouch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #2 0xf54e5062 in CBaseEntity::Touch () from /home/srcds/tf2server/orangebox/tf/bin/server_i486.so #3 0xf57218be in CBaseEntity
