Mojira Archive
MC-100211

Byte arrays aren't limited in size in the protocol

Byte arrays in the protocol don't have a size limit. This is important specially during the login stage where the user doesn't need to be authed.

If it helps here is what I did to patch it https://hub.spigotmc.org/stash/projects/SPIGOT/repos/craftbukkit/commits/fc9ee90fc543adbbe1641cc722b0b2d4b800f668

And someone felt the need to go public with this. (Effects bungee more than vanilla but still somewhat of an issue for vanilla) https://www.reddit.com/r/admincraft/comments/4cbeva/psa_serious_exploit_in_all_bungeecord_versions/

Fixed

Thinkofdeath

2016-03-28, 11:48 PM

2016-05-14, 06:13 AM

2016-04-08, 12:45 PM

0

2

Unconfirmed

Minecraft 1.9

Minecraft 1.9.2