Issue Summary:
Modded realm:
Connect as a client with profile_index 7 to a server.
result: Server crashes.
Steps to Reproduce:
- Start Modded realm
- Enable MorePlayers mod
- Switch to profile 7
- Connect to a random server in lobby
- There server crashes
Reproduction Rate (Choose One):
Constant (100%)
Additional Information:
In this case we are talking about modded realm like its a low priority case. But still want to inform you about this that this can be abused if someone has bad intentions.
A fix would be if a client tries to connect with a profile_index then it should check SPProfile[profile_index] exist. If it doesnt exist then the server shouldn’t crash but it should refuse the client.
A fix i can implement is that players with MorePlayers mod can not connect to servers without this mod. Like it will be separeted by network hash.
Update: Someone gave me idea to connect with a friend on steam that is in official game, while me was in modded realm with MorePlayers mod and profile_index 7. And when i connect to this friend it crashed his official game.
[Attach Your Session Console Log]