• Listen to a special audio message from Bill Roper to the Hive Workshop community (Bill is a former Vice President of Blizzard Entertainment, Producer, Designer, Musician, Voice Actor) 🔗Click here to hear his message!
  • Read Evilhog's interview with Gregory Alper, the original composer of the music for WarCraft: Orcs & Humans 🔗Click here to read the full interview.

[Import] Is it possible to make a DISBTN that only crashes when viewed?

Status
Not open for further replies.

Dr Super Good

Spell Reviewer
Level 64
Joined
Jan 18, 2005
Messages
27,287
only thing which is crashed by broken blp is MAC
Oh how wrong you are...

Windows WC3's BLP loader is extremely unsafe. It does not bounds check mipmap data chunks and pixel buffers allowing one to not only generate textures from memory garbage, but also potentially cause a virtual memory access exception crash. I find easiest way to do it is 8 bit alpha, indexed colour blp, 512*512 pixels where the full scale mipmap data chunk is 1 sized pointed at just before end of file and the file ends after the heading structures. Depending on memory layout this might not result in a crash, but it has a very high chance of doing so as it is trying to read pixel data from well outside anything reasonable.

I won't use hacks to map make if I can find a workaround for it, though thank you.
He is referring to a current exploit allowing arbitrary code execution. It is not a hack and will work on unmodified clients running 1.27. Due to the severity of this exploit it is almost certain to be patched next update, whenever/ifever that comes.
 
Status
Not open for further replies.
Top