[Critical] 1.8 Sign Updates Missing Sufficient Length Checks
As of 1.8, the server no longer checks length sufficiently on the UpdateSign packet. Presumably this was "intended" as max lines is now determined by the character width. Unfortunately by removing the argument to the data reader, the server will by default read up to 32768 length strings from the packet.
Not only does such a large string appear to cause strain on the server, once saved to the sign it will "corrupt" it, causing clients to be disconnected whenever they enter that chunk.
I suggest limiting to 64 chars when being sent via the edit sign packet, as this is well above the old limit and should be impossible to reach without mods.
Long JSON etc still works fine via the commands.
2015-06-05, 08:53 AM
2015-08-04, 05:52 PM
2015-06-05, 12:25 PM
0
3
-