weird bug bugged item table

[filipehdbr]

L2J Revision 4438
L2JDP Revision 7689

Suddenly players started reporting that they had tons of Wind Potion on their bags. Other players just reported all items disappeared. They said it happened after restarting the client.. Happened to 1000+ chars

[JIV]

and what did you do?

[Zumba]

and what did you do?

he reported it here

[badboy29]

and what did you do?

he reported it here

lol You searched the forums before posting here?

[filipehdbr]

I had to restore backup.. Today it just happened again without any apparent reason :/

[_DS_]

And what about item log ?

[filipehdbr]

Im searching for some pattern..

[24 Dec 1:45:09] DELETE:Restore, item 270711264:Wind Potion(0), PrevCount(1), L2PcInstance:null[269343008]
[24 Dec 1:45:09] CHANGE:Restore, item 268630303:Wind Potion(5797), PrevCount(5796), L2PcInstance:null[269343008]
[24 Dec 1:45:09] DELETE:Restore, item 270718923:Wind Potion(0), PrevCount(1), L2PcInstance:null[269343008]
[24 Dec 1:45:09] CHANGE:Restore, item 268630303:Wind Potion(5936), PrevCount(5797), L2PcInstance:null[269343008]
[24 Dec 1:45:09] DELETE:Restore, item 270763838:Wind Potion(0), PrevCount(139), L2PcInstance:null[269343008]
[24 Dec 1:45:09] CHANGE:Restore, item 268630303:Wind Potion(5937), PrevCount(5936), L2PcInstance:null[269343008]
[24 Dec 1:45:09] DELETE:Restore, item 270746228:Wind Potion(0), PrevCount(1), L2PcInstance:null[269343008]
[24 Dec 1:45:09] CHANGE:Restore, item 269402484:Wind Potion(15435819), PrevCount(15433855), L2PcInstance:null[269402476]
[24 Dec 1:45:09] DELETE:Restore, item 268935905:Wind Potion(0), PrevCount(1964), L2PcInstance:null[269402476]
[24 Dec 1:45:09] CHANGE:Restore, item 269402484:Wind Potion(15435847), PrevCount(15435819), L2PcInstance:null[269402476]
[24 Dec 1:45:09] DELETE:Restore, item 269951411:Wind Potion(0), PrevCount(28), L2PcInstance:null[269402476]
[24 Dec 1:45:09] CHANGE:Restore, item 269402484:Wind Potion(15436379), PrevCount(15435847), L2PcInstance:null[269402476]
[24 Dec 1:45:09] DELETE:Restore, item 269973289:Wind Potion(0), PrevCount(532), L2PcInstance:null[269402476]
[24 Dec 1:45:09] CHANGE:Restore, item 269402484:Wind Potion(15436383), PrevCount(15436379), L2PcInstance:null[269402476]
[24 Dec 1:45:09] DELETE:Restore, item 270212172:Wind Potion(0), PrevCount(4), L2PcInstance:null[269402476]

[filipehdbr]

It seems that it started here..

Code: Select all

2010.12.24 01:36:53,042 INFO    40      com.l2jserver.gameserver.instancemanager.GlobalVariablesManager GlobalVariablesManager: Database updated.2010.12.24 01:36:53,043 INFO    40      com.l2jserver.gameserver.taskmanager.tasks.TaskGlobalVariablesSave      GlobalVariablesManager: Data updated successfully.2010.12.24 01:37:40,266 WARNING 15      com.l2jserver.gameserver.network.serverpackets.ExReplyReceivedPost      Message 270787562 has attachments but itemcontainer is empty.2010.12.24 01:40:30,777 WARNING 16      com.l2jserver.gameserver.network.serverpackets.ExReplyReceivedPost      Message 270750933 has attachments but itemcontainer is empty.2010.12.24 01:40:37,434 WARNING 16      com.l2jserver.gameserver.network.serverpackets.ExReplyReceivedPost      Message 270791406 has attachments but itemcontainer is empty.2010.12.24 01:40:42,443 WARNING 13      com.l2jserver.gameserver.network.serverpackets.ExReplyReceivedPost      Message 270800214 has attachments but itemcontainer is empty.2010.12.24 01:40:46,236 WARNING 15      com.l2jserver.gameserver.network.serverpackets.ExReplyReceivedPost      Message 270800522 has attachments but itemcontainer is empty.2010.12.24 01:40:48,720 WARNING 15      com.l2jserver.gameserver.network.serverpackets.ExReplyReceivedPost      Message 270800812 has attachments but itemcontainer is empty.2010.12.24 01:40:51,372 WARNING 16      com.l2jserver.gameserver.network.serverpackets.ExReplyReceivedPost      Message 270801431 has attachments but itemcontainer is empty.2010.12.24 01:40:53,843 WARNING 13      com.l2jserver.gameserver.network.serverpackets.ExReplyReceivedPost      Message 270818189 has attachments but itemcontainer is empty.2010.12.24 01:42:17,788 WARNING 14      com.l2jserver.gameserver.model.actor.L2Character        Player Aramil reverted to base class. Possibly has tried a relogin exploit while subclassing.2010.12.24 01:43:19,864 WARNING 13      com.l2jserver.gameserver.model.actor.L2Character        [L2PcInstance] player [Zafrina] sent invalid bypass 'npc_268457139_Link default/SupportMagic.htm'.2010.12.24 01:43:33,042 INFO    49      com.l2jserver.gameserver.taskmanager.tasks.TaskOlympiadSave     Olympiad System: Data updated.2010.12.24 01:47:06,921 WARNING 14      com.l2jserver.gameserver.network.serverpackets.ExReplyReceivedPost      Message 270753465 has attachments but itemcontainer is empty.2010.12.24 01:47:11,333 WARNING 14      com.l2jserver.gameserver.network.serverpackets.ExReplyReceivedPost      Message 270686396 has attachments but itemcontainer is empty.2010.12.24 01:47:14,970 WARNING 15      com.l2jserver.gameserver.model.itemcontainer.ItemContainer      Unknown body slot 0 for Item ID:10000

[_DS_]

Check for item 270711264 log entries.

[filipehdbr]

item.log:[23 Dec 23:51:18] CREATE:Loot, item 270711264:Mithril Gloves Design(1), L2PcInstance:Joao[269343008], L2MonsterInstance:Zaken's Pikeman(20832)[270710731]
item.log:[23 Dec 23:51:23] SETOWNER:Party, item 270711264:Mithril Gloves Design(1), L2PcInstance:Joao[269343008], L2PcInstance:Joao[269343008]
item.log:[24 Dec 1:45:09] DELETE:Restore, item 270711264:Wind Potion(0), PrevCount(1), L2PcInstance:null[269343008]

[_DS_]

I think this is attempts of sql injection - IDs replaced with 10000.

[filipehdbr]

I saw in other players happening as well with this pattern.. loot from party, setowner and delete turns item into 10000.

When it happens, like 99% of players get tons of 10000 items on their bags and other items disappear.. seems something bugged but im unsure on how to reproduce.. the only clue I make is about this party/loot/setowner/delete pattern

[_DS_]

Never happens with me, and, as you can see, no more reports. Also changing item IDs is not possible without logging of this event, so it looks like external db access.

[UnAfraid]

Also i dont have such problems..
check your website access logs

[filipehdbr]

wasnt any injection.. I saw same pattern in hundreds of players.. when this happens, it takes few moments to screw the whole item table with '10000' item replacing other items