Even the big games suffer from network-related vulnerabilities. One such example is GTA V. Exploits designed to crash people's games are widely used and accessible to pretty much anyone, and I wouldn't be surprised if one such exploit could have lead to a RCE in the past.
In GTA's case it may be even worse, as the p2p nature of the network may make it wormable.
Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
11–18 of 18 posts
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#12Even the big games suffer from network-related vulnerabilities. One such example is GTA V. Exploits designed to crash people's games are widely used and accessible to pretty much anyone, and I wouldn't be surprised if one such exploit could have lead to a RCE in the past.
In GTA's case it may be even worse, as the p2p nature of the network may make it wormable.
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#13Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#14Earlier quoted context omitted.
Reminds me when Morrowind caused file corruption issues.
Reminds me when EVE Online deleted boot.ini and bricked player computers.
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#15The unchecked bounds example was just sad - I mean how hard is it to use common sense? Assume the entire packet is always tainted because it comes from an external source!
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#16Earlier quoted context omitted.
Reminds me when EVE Online deleted boot.ini and bricked player computers.
That's not what bricked means. These PCs could be trivially fixed by anyone who can follow simple instructions. A brick means a device is beyond repair. A literal brick that has no function
That being said I've mostly seen the word used in the context of bad firmware updates or ROM flashes. However that's nothing booting into recovery or a JTAG won't fix.
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#17The unchecked bounds example was just sad - I mean how hard is it to use common sense? Assume the entire packet is always tainted because it comes from an external source!
Any developer will say they do this. But very few, if any, can do this perfectly for every line of code that they write. Humans are terrible at doing things all of the time . Expecting developers to remember to do bounds check is setting yourself up for failure.
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#18Slightly off-topic and throwaway for legal reasons. While reverse engineering the network protocol for Genshin Impact , I found at least a couple ways to cause memory access violations. It's really a pity most PC games aren't well sandboxed.
And then you have people claiming that security/safety in game engine code is not important, therefore Rust has no benefits over C++ for games. Nonsense!