Mojira Archive
REALMS-7444

/gametest Can Be Used To Crash Realms

Update 1.16.210 brought the following feature into fruition:

 

GameTest Framework 
    - Added GameTest framework NOTE: GameTest is not functional on console platforms 
    - GameTest is server-side test automation tool that is based on pairing test code with test structures. You   
      can trigger the tests via the /gametest command once you have enabled the "Enable GameTest Framework" 
      experiment toggle for a world . 

Although it clearly states that it was "not functional on console platforms", it's there and is very much "functional". When entering a world with "Enable GameTest Framework" toggled (which I may add is force toggled in every realm post-update) all players, no matter their permissions, are able to execute the command. 

 

This feature can easily be used maliciously by executing /gametest runall which, when ran in rapid succession, can bring a realm to it's knees and even destroy world files. Furthermore, by using this command, players are able to summon large plots of filled with barriers, command blocks and structure blocks - which are all unobtainable in vanilla Minecraft. Following this discovery - many realms, including my own, have had to make the unfortunate decision to temporarily shut down until this issue is fixed - causing a decline in revenue for realm owners and, in turn, a lot of realm refunds. 

 

In a prior bug report regarding this same issue, a moderator explained that "I [the moderator] can only use /gametest after toggling on cheats. Since it requires the world host/owner to take this step, it doesn't seem like a crucial problem to me." 

Although they are true, considering the fact that most high-caliber realms require the use of cheats in-order to function, it is obscene for someone to say such a thing and, in essence, expect us to just throw this issue under the rug and go on with our day.

 

The comment (and accompanying thread) can be found here: https://bugs.mojang.com/browse/MCPE-120040?focusedCommentId=940624&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-940624

 

I will work to update this thread as more information becomes available. 

Duplicate

Joshua Simmonds-Smtih

2021-03-11, 12:45 AM

2021-03-12, 03:59 PM

2021-03-11, 12:52 AM

0

2

Unconfirmed

1.16.210 (Bedrock)

-