mirror of
https://github.com/Kelsidavis/WoWee.git
synced 2026-03-27 01:00:13 +00:00
e464300346
Improve robustness of monster move spline parsing by capping the pointCount field to prevent excessive iteration from malformed or malicious packets. - WotLK: Cap pointCount to 1000 waypoints (realistic maximum for movement) - Vanilla (Turtle): Reduce existing cap from 16384 to 1000 and add warning logging when cap is applied - Both variants now log warnings when cap is exceeded, including guid context A malicious or corrupted server sending an unrealistic pointCount value (e.g. uint32_max) could previously cause the client to allocate excessive memory or iterate excessively. The 1000-waypoint cap aligns with realistic movement paths while protecting against DoS vectors. Part of ongoing Tier 2 work to improve multi-expansion packet parsing robustness. |
||
|---|---|---|
| .. | ||
| character.cpp | ||
| entity.cpp | ||
| expansion_profile.cpp | ||
| game_handler.cpp | ||
| inventory.cpp | ||
| opcode_table.cpp | ||
| opcodes.cpp | ||
| packet_parsers_classic.cpp | ||
| packet_parsers_tbc.cpp | ||
| player.cpp | ||
| transport_manager.cpp | ||
| update_field_table.cpp | ||
| warden_crypto.cpp | ||
| warden_emulator.cpp | ||
| warden_memory.cpp | ||
| warden_module.cpp | ||
| world.cpp | ||
| world_packets.cpp | ||
| zone_manager.cpp | ||