Server-crashing exploit in ServerAffiliates106N

[player]

Any server using Nexgen112(N) with ServerAffiliates106(N) is vulnerable to this clueless crash:

[server log]
Critical: UPackageMap::GetClassNetCache
Critical: Class ServerAffiliates106.SAHTTPClient
Critical: UActorChannel::SetChannelActor
Critical: UpdateRelevant
Critical: ULevel::ServerTickClient
Critical: ULevel::TickNetServer
Critical: UpdateNetServer
Critical: ULevel::Tick
Critical: (NetMode=1)
Critical: TickLevel
Critical: UGameEngine::Tick
Critical: UpdateWorld
Critical: MainLoop
Exit: Executing UObject::StaticShutdownAfterError

[how to crash?]
<i better not post it publicly>

[fix?]
spawn a serveractor to set SAHTTPClient's RemoteRole to ROLE_None at the beginning of each match OR
add RemoteRole=ROLE_None into defaultproperties of SAHTTPClient and recompile

**To whoever affected by my little "penetration" test, well.. let's have a gentleman's agreement. I've disclosed the bug now and you go fix it. No banning me afterwards.

[zombie xXBoObZ Xx]

HEY CAN ANYBODY HELP ME FIND A DOWNLOAD FOR UT99

[Wises]

HEY CAN ANYBODY HELP ME FIND A DOWNLOAD FOR UT99

OT :/

Google 'ut99 download' perhaps?

GF.

[Chamberly]

HEY CAN ANYBODY HELP ME FIND A DOWNLOAD FOR UT99

Hey there, you are off topic on this thread. ^^

Here is a couple of links that you can get to download...
From uK's forum: (You would have various support from here. Also, don't rush yourself or you will be missing some information.)
http://www.unrealkillers.com/downloads.php?do=file&id=1

Or to download it without registering on a website:
https://skydrive.live.com/?cid=fb616dd5 ... 0AC6CC!484
From here, click on Patches folder, download the UTDemo348 and then download the UTPatch436nodelta.
Install UT99 Demo.
After demo has finished installing, Do not run UT.
Use the 436NoDeltaPatch to patch UT.

On topic: I think Spongebob might do some recompile work? I am not sure much about this.

[Sp0ngeb0b]

ServerAffiliates was never supposed to be available to public, since it contains a controversial feature. Therefore, no support from me on this one, if you are running this plugin consider the exploit as a good reason to remove it.

Btw, testing crash exploits on public servers? Not really gentleman like for me, despite revealing it afterwards ...

[player]

Not really gentleman like for me

personally i do not use this mod, and the exploit is found by chance on public servers.

this is the fix(spawn a serveractor) i mentioned, i prefer not recompiling

SAFix.zip

(930 Bytes) Downloaded 163 times