Merge pull request #169 from FoxyYokai/Fix-Duey-Send-Item-Exploit #patch

Fix exploit with Duey Send Items
Add null check to duey packet edit check
2023-04-16 08:30:05 +02:00 · 2023-04-15 14:36:00 -05:00 · 2023-04-14 19:43:51 -05:00
1 changed files with 6 additions and 0 deletions
--- a/src/main/java/client/processor/npc/DueyProcessor.java
+++ b/src/main/java/client/processor/npc/DueyProcessor.java
@@ -285,6 +285,12 @@ public class DueyProcessor {
        if (c.tryacquireClient()) {
            try {
                int fee = Trade.getFee(sendMesos);
+                if (sendMessage != null && sendMessage.length() > 100) {
+                    AutobanFactory.PACKET_EDIT.alert(c.getPlayer(), c.getPlayer().getName() + " tried to packet edit with Quick Delivery on duey.");
+                    log.warn("Chr {} tried to use duey with too long of a text", c.getPlayer().getName());
+                    c.disconnect(true, false);
+                    return;
+                }
                if (!quick) {
                    fee += 5000;
                } else if (!c.getPlayer().haveItem(ItemId.QUICK_DELIVERY_TICKET)) {
Author	SHA1	Message	Date
Ponk	36d0f8a2a0	Merge pull request #169 from FoxyYokai/Fix-Duey-Send-Item-Exploit #patch Fix exploit with Duey Send Items	2023-04-16 08:30:05 +02:00
Sukishyou	301f65ce16	Add null check to duey packet edit check	2023-04-15 14:36:00 -05:00
Sukishyou	f1b95fe45e	Fix exploit with Duey Send Items	2023-04-14 19:43:51 -05:00