0.3.8 Security Issue

[Misomir]

It mustn't be RAT,it could be ANYTHING,!!

[SlowARG]

Originally Posted by maksicnm

ITS A REASON CUZ THERE IS NO LINUX VERSION OMFG -_-

0.3.8 will certainly not be for a longer period of time on Linux because it is possible to insert a RAT virus into a file and destroy someone who enters the server, so the current version of Windows is currently running and who can run over it server players can enter that server if they believe in it server, the update is well done, I have been planning to let this be among many others in order to improve the launcher for models, it would be nice if this would be released to the end, along with all the vehicles and other things (antique type and so )

Quoted from Balcan forum.

Aren't you serius, really?

[maksicnm]

Learn programing, thx

[MyU]

Calm it down.
IF then you're only able to drop non-dff files, SA-MP itself doesn't treat it as a executable.

Like I said the only apparent way would be some sort of exploit in the file format itself to execute arbitrary code like we had on the TD system back then.

[cuber]

Scared to death, omg what me gon do

[Y_Less]

That's not how any of this works!

A file downloaded by the game is passed to GTA's DFF file parser. If the file is an executable, it is not just randomly run, instead the game will still try and interpret it as a model, and probably fail. Think of it this way - if you download an EXE, then try and open that file from notepad, it doesn't RUN the file, just shows you the contents. Or an even better example is a BAT file - which you can happily read from inside notepad without ever executing it.

BAT, RAT, EXE, it doesn't matter; they won't be run, because they are never told to run. Instead, they are loaded as models.

HOWEVER, this is NOT the same as the warning Kalcor gave about models themselves with embedded issues. GTA was originally a single-player game with no modding. This meant that all the files it was ever intended to load were the models provided with the game. Therefore certain checks could possibly be skipped, because it was known that all the objects were always valid. Without those checks in place, a well crafted model could MAYBE inject code. However, I say again, THIS IS NOT THE SAME AS JUST RENAMING AN EXE. To the best of my knowledge, there are no known DFF exploits, but I've also not followed the modelling side of things very closely for a few years now.

Originally Posted by Misomir

It will open file and when SAMP realize thats not required file it will crash.But,the file is opened which executes program(in theory)

No, not in any theory at all.

Originally Posted by MyU

Reading the file != parsing & loading a PE.

^ This is correct.

If you are STILL worried then a) you're an idiot (unless you've truly found an exploit in the DFF file parser itself) and b) test it with a non-destructive batch script, maybe one that just touches a file.

[Misomir]

Hmm...maybe ur right...But still i wanna test it

[SlowARG]

Originally Posted by Y_Less

Therefore certain checks could possibly be skipped, because it was known that all the objects were always valid. Without those checks in place, a well crafted model could MAYBE inject code.

I remember a bug in MTA custom models parser.
However, all .txd and .dff files are renamed when downloaded, so isn't a problem at all. Maybe RCE could exists.

Originally Posted by maksicnm

Learn programing, thx

Oh man, really? Stop saying st**ids things please.

[cuber]

Originally Posted by Misomir

Hmm...maybe ur right...But still i wanna test it

What's up with this now, since Y_Less replied.

Originally Posted by maksicnm

Learn programing, thx

[Misomir]

I still believe in MY theory cuz i think SAMP is opening em comlete but maybe it isnt.