Bug 112451 - script permits sending input for all players
Summary: script permits sending input for all players
Status: RESOLVED FIXED
Alias: None
Product: boson
Classification: Applications
Component: general (show other bugs)
Version: unspecified
Platform: Debian testing Linux
: NOR major
Target Milestone: ---
Assignee: The Boson Team
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-09-12 07:23 UTC by Andreas Beckermann
Modified: 2005-09-20 09:33 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Beckermann 2005-09-12 07:23:48 UTC
Version:            (using KDE KDE 3.4.2)
Installed from:    Debian testing/unstable Packages

A script is currently allowed to send player input for every player (not just the one it operates on): all it needs to do is to use a fake player id parameter.

This can "sometimes" be seen when building facilities: the computer player script sometimes places the facility for the local player. I am not yet sure when exactly this happens - I can currently reproduce it on dividedbase when building an air turret. However the same problem does not appear when building a power plant.

Because of this bug a computer player can potentially control the local player completely.

CU
Andi
Comment 1 Andreas Beckermann 2005-09-12 07:38:51 UTC
Update: the script tries to place the powerplant too, but it uses invalid coordinates and consequently is not able to. It does not try to place the building again, so it remains in the factory and the player can place it.
But the problem is 100% reproducible on this map.

CU
Andi
Comment 2 Andreas Beckermann 2005-09-20 09:33:52 UTC
Fixed

CU
Andi