Demo Map Hidden Script

[Strilanc]

It just occurred to me that this allows people to inject code into your map without modifying the content hash used to identify it.

That I can change the call to do non-desyncing actions:
- sync values into game cache
- show menus to players
- create lightning/text effects (maybe over enemy units?)
etc...

 

[Jesus4Lyf]

>without modifying the content hash used to identify it
What's that mean?

 

[Strilanc]

It means I could modify the map, send it to you, and you could join a game hosting the original map (with wc3 using my version instead) without any problems or hacks.

 

[kingkingyyk3]

Collided map. =P Some people put some sync attack code and uses Collider to make a collided map. DotA is the famous map and uses gamecache. So, it is the first target to those collided map makers. The amount of damage is then inject into gamecache and use sync attack(Prevent desync), so the spell's damage is able to kill a hero instantly, imba. But, after patch 1.23, the problem is fixed. War3 is able to detect collided maps.

 

[Jesus4Lyf]

So that means a map with any Preloader call at all is vulnerable to collision?

I didn't know how the hash worked...

 

[kingkingyyk3]

Nono, all maps too.
See this : http://iliganshack.blogspot.com/2009/03/warcraft-3-map-collider.html

 

[Jesus4Lyf]

LOL!

That'd be right.

So meh about Preloader being abused to collide...

 

[Strilanc]

Nono, all maps too.
See this : http://iliganshack.blogspot.com/2009/03/warcraft-3-map-collider.html

That vulnerability was fixed in 1.23, not too long after it became public. But the hash only depends on a set of "important" files within the map such as war3map.j.

The reason it only depends on some of the files probably has to do with allowing translations and things of that nature.

 

[Jesus4Lyf]

Sooo. Maps with Preloader are vulnerable.

Although, when you think about it, it's a tiny vulnerability - only things that don't use triggers or timers and are instant can be done, and only at the moment Preloader is called (generally map init).

 

[WaterElement]

I know this is quite an old thread, but not too old...

This could be used for some kind of store-data-in-a-separate file system, correct?

 

[Narks]

but gamecache sucks

 

[Azlier]

Which is why I'd love to study if return nothing worked between Preloader scripts.

 

[Jesus4Lyf]

Which is why I'd love to study if return nothing worked between Preloader scripts.

"Preloader" returns 1 on success or something internally it seems - the point is, when Preloader finishes, it seems to set the last returned value. Hope that answers that question (I tried it ).

>This could be used for some kind of store-data-in-a-separate file system, correct?
Kinda. Depends what you mean by "file". It can be used to populate gamecahe which can be accessed from within the map. :thup:

 

[Azlier]

Well, can you get a returned value in the Preloader script itself?

 

[Jesus4Lyf]

Can't remember if I tried.

Real answer is have a play with it yourself some time.

 

[tooltiperror]

I have a question about this.

Could I store a string in here?

 

[Sickle]

In what? The text file? No.

Well, you can certainly store a string in the imported text file but you cannot change it. Or access it, for that matter.

 

[Narks]

You could access through gamecache?

Kind of pointless, though.

 

[Sickle]

Yes. Game cache works in single player. Online? No idea.

 

[Narks]

Wait, what?

Are we talking about storing a string inside an imported file, which you then recover using game cache?

Or are we talking about saving a string during the game to an external file?