Dynamic JASS hardcoding: Need Testers.

[Sim]

.exe code can be inserted within warcraft3 maps now.

Brilliant.

 

[black.sheep]

>No qualms with the return bug being fixed here!
Hey imagine, DotA would even need to run its spells on a good system like KT2, and it would stop lagging! :O

Pure lulz at the dota community, an update like that could posibly cause all the dota maps to fail, well after the warden killing all the bots, im not sure wc3 will survive somthing like this from the bnet public.

 

[Chocobo]

I guess you would need to download a "new" map with an exploit like this to be affected since blizzard fixed the "mirror maps" thingy bug.

the way I'm guessing to be affected by this would be a way like this :
- 1. run cmd
- 2. do something dangerous like forcing to download a virus and run it or close av processes, or simply close a neccesary process in order to show up the last min box before the computer shuts down automaticly

but after I wonder if the cmd ran through warcraft 3 will be from the warcraft 3 "tree" (tree proccess closing thingy)

 

[Vestras]

Lemme see if I got this right...
So this actually allows RtC maps to have RtC in it and execute it when the map is run.

And as you linked yourself: http://www.wc3c.net/showpost.php?p=1080706&postcount=7
This basically allows us to have virus .exe files in a Wc3 map (well we could already, but now we're able to actually run it)... Pretend someone making a fake DotA with a virus in it. Auch.

We could also plant a .exe file which was run when the computer start which closes the System process.
This actually makes me feel very powerful

Also, if Bliz is as lame as they are they'll probably just 'fix' the return bug and ruin it for themselves and for us. (Themselves because without mappers they are nothing)
Someone needs to contact Blizz immediately if what I'm imagining is true...

> So it is unsafe to play public games now?

Yeah. pretty much.

Oh and btw: I haven't read much of this, excuse me if I'm repeating something here.

 

[Chocobo]

hmm, I guess it can run viruses imported in the map too.

 

[TheDamien]

Well, that's lame.

 

[uberfoop]

This reminds me of the old Extended Unit Death (EUD) trigger hype back a few years ago in Starcraft triggering, which Blizzard smashed, apparantly for similar concerns. It too allowed crazy stuff to be done; I recall a demo map which changed the weapon a unit was using during the game and allowed for some pretty weird things.

Edit: Or, at least, Blizz tried to smash them by messing with things to throw people off, but people keep picking them back up. The point being, they put in effort to stop it.

 

[Akolyt0r]

any program started by warcraft with this exploit will have the permissions of warcraft itself, and most likely will close when warcraft is closed aswell....

A very easy kind of exploit would be to write a simple script which reads the cd-key of the players and sends them to the host of the map ...

So please dont play any new public maps, and especially no unknown russian maps... since the russian community was aware of this exploit a little bit earlier ...and someone already might have created something like that *evil*

 

[Azlier]

This is bad. This is reaaallly bad. It could be used for good, like maps with amazing functionality, but still bad.

 

[Jesus4Lyf]

Roar.

>since the russian community was aware of this exploit a little bit earlier
lolol... Well done to them.

>So this actually allows RtC maps
Yep, could. Should mention it to Mindy. Maybe for a day WC3 would even work as an FPS before blizzard smashes it good.

Spoiler

Random proof that I'm still banned from WC3C. That points to a post I made in that thread. Note how it skips #29.
Would be great if that could be changed some time. <_<

I suppose all that people are wondering is "will they fix the return bug". Even if they do, it's not that big a deal, but they probably won't, for IceFrog's sake. I imagine DotA sells copies of WC3, so they have a vested interest in only blocking this exploit of the return bug, not the whole thing.

All they have to do is fix the return bug and make a H2I native, anyway. Although I'll sincerely miss my bytecode.

 

[Ghan]

I fired this up in the normal WC3 editor. Loaded fine, test map, done.
Works - printed out some nonsense about adding functions.

Latest WC3 - no JASSHelper required. Though, I'm sure it would be needed if I wanted to change anything.

 

[Jesus4Lyf]

Yo, thanks Ghan. Good to see you 'round. ^_^

So um. In conclusion, bytecode works, ey?
A bit too well. Lol.

 

[Viikuna]

luls, indeed.

Why were you banned from wc3c anyways?

 

[Jesus4Lyf]

Not too sure. Woke up one day and my posts were invisible. But this is pretty far off topic.

 

[Jesus4Lyf]

*Bump*

Guess what.
Apparently, this crap still works.

I bet the itest map can be updated to work on 1.24 also.

Wanna put up an anouncement warning about virus wc3 maps again until we're sure it's safe?

(PS. The exact script this thread is about won't work until I update it. I may try later tonight. We'll see. )

So here's where it all started, and Blizz hasn't solved a damn thing.

Edit: Can someone test the line skipping scripts on CodeVar?

 

[Renendaru]

Blizzard is as moronic as giving a penny to a millionare.

 

[Lyerae]

Does this work in the latest patch?

 

[Jesus4Lyf]

It should when I fix it up, but I can't do that yet. I don't have WC3 on me right now.

Aside from that, try using CodeVar, adding 8 to some function, and then executing it. It should skip the first line of the function or something. *Shrugs*

 

[Lyerae]

Yeah, I don't quite know enough JASS to understand what you said...
I have 1.23(0.6352). I'll test it out on that ASAP.

 

[Jesus4Lyf]

Lol, I think this was written for 1.23. *Shrugs*

But the codevar stuff should work on any vers. With the skipping and everything. But I haven't tried it yet on 1.24. Probably will tonight.

Edit: Just tested it, you can't seem to skip lines with CodeVar any more. So nothing to fear, it seems. Blizz fixed the nasty stuff at least.