Page 1 of 1

Server Crash Exploit

Posted: Tue Jul 14, 2009 4:33 am
by momo61
L2J Revision Number:3137
L2JDP Revision Number:6211

Today, a guy with the account "testhack" crashed the server somehow probably by using the subclass change option.

2009.07.14 04:45:34,796 WARNING 21 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-194-1' for key 'PRIMARY'
2009.07.14 04:45:34,796 WARNING 21 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-226-1' for key 'PRIMARY'
2009.07.14 04:45:34,812 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-239-1' for key 'PRIMARY'
2009.07.14 04:45:34,859 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-1320-1' for key 'PRIMARY'
2009.07.14 04:45:34,984 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-1322-1' for key 'PRIMARY'
2009.07.14 04:45:34,984 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-4-1' for key 'PRIMARY'
2009.07.14 04:45:35,671 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-27-1' for key 'PRIMARY'
2009.07.14 04:45:36,546 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-96-1' for key 'PRIMARY'
2009.07.14 04:45:36,593 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-99-1' for key 'PRIMARY'
2009.07.14 04:45:36,593 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-101-1' for key 'PRIMARY'
2009.07.14 04:45:36,671 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-111-1' for key 'PRIMARY'
2009.07.14 04:45:36,687 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-113-1' for key 'PRIMARY'
2009.07.14 04:45:36,687 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-137-1' for key 'PRIMARY'
2009.07.14 04:45:36,687 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-148-1' for key 'PRIMARY'
2009.07.14 04:45:36,734 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-168-1' for key 'PRIMARY'
2009.07.14 04:45:36,734 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-169-1' for key 'PRIMARY'
2009.07.14 04:45:36,734 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-171-1' for key 'PRIMARY'
2009.07.14 04:45:36,734 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-173-1' for key 'PRIMARY'
2009.07.14 04:45:36,734 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-193-1' for key 'PRIMARY'
2009.07.14 04:45:36,765 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-195-1' for key 'PRIMARY'
2009.07.14 04:45:36,765 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-198-1' for key 'PRIMARY'
2009.07.14 04:45:36,765 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-208-1' for key 'PRIMARY'
2009.07.14 04:45:37,437 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-209-1' for key 'PRIMARY'
2009.07.14 04:45:37,734 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-225-1' for key 'PRIMARY'
2009.07.14 04:45:37,734 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-233-1' for key 'PRIMARY'
2009.07.14 04:45:38,140 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-256-1' for key 'PRIMARY'
2009.07.14 04:45:38,140 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-312-1' for key 'PRIMARY'
2009.07.14 04:45:38,359 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-30-1' for key 'PRIMARY'
2009.07.14 04:45:38,468 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-60-1' for key 'PRIMARY'
2009.07.14 04:45:38,734 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-221-1' for key 'PRIMARY'
2009.07.14 04:45:38,859 WARNING 35 net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '269739208-263-1' for key 'PRIMARY'
FloodProtectorSubclassInterval = 20
FloodProtectorSubclassLogFlooding = True
FloodProtectorSubclassPunishmentLimit = 1
FloodProtectorSubclassPunishmentType = jail
FloodProtectorSubclassPunishmentTime = 0
what did I do wrong ?

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 8:26 am
by _DS_
You should look on the beginning of the log.

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 8:59 am
by _DS_
Also: net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills

L2J L2character does not contain such message, so you using highly modded core. Sorry, can't help, ask people who develop your server...

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 9:02 am
by janiii
_DS_ wrote:Also: net.sf.l2j.gameserver.model.actor.L2Character Error could not store char skills

L2J L2character does not contain such message, so you using highly modded core. Sorry, can't help, ask people who develop your server...
L2PcInstance line 7735

L2PcInstance doesn't have own logger, it has the logger from parent L2Character class. so this is why is shows L2Character and not L2PcInstance..

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 9:18 am
by _DS_
Also, jailing player for flood in useless - he can continue to spam packets. So use ban or kick.

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 10:52 am
by momo61
i will use kick then :)

but my core is not modded at all, i can guarantee you that. I dont even know how to. And im the only one who "devs" my server.

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 11:09 am
by _DS_

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 11:21 am
by janiii
this is more about a problem when changing subclass that he shouldn't be able to change it again before the first change isn't done completly.

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 11:39 am
by _DS_
janiii wrote:this is more about a problem when changing subclass that he shouldn't be able to change it again before the first change isn't done completly.
Check log, server attempts to save character 3-10 times per second. This is not subclass change (or, at leastm not only).

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 11:47 am
by janiii
_DS_ wrote:Check log, server attempts to save character 3-10 times per second. This is not subclass change (or, at leastm not only).
it is not storing of character, but storing of character skills. TH lvl40 skills.. what could this be? subclass..

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 11:54 am
by _DS_
janiii wrote:it is not storing of character, but storing of character skills. TH lvl40 skills.. what could this be? subclass..
And what ? :) Read linked topic. Skills stored not only on subclass change, but on logout too.

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 11:55 am
by janiii
_DS_ wrote:And what ? :) Read linked topic. Skills stored not only on subclass change, but on logout too.
the method from which the error "Error could not store char skills" is storeSkills. that method is called from addSkill and from addSubClass which is called from modifySubClass or directly from onBypass when adding subclass.

in the log you can see the skills were skills of a TH lvl 40, and all were added in an intervall of 6 seconds which is the normal intervall of changing/adding subclass.


and it is not problem of floodprotector. it is problem that you should not be able to change subclass when you are currently in the process of changing subclass.
you could set subclass floodprotector to 6 seconds, because that is the daley when adding/chaning subclass, but that would be somehow too much. too many players would get kicked or banned. normal player, not cheating players. so this is not problem of floodprotector, but of the changing..

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 12:49 pm
by _DS_
This method called not only from here :D

Re: Server Crash Exploit

Posted: Tue Jul 14, 2009 10:00 pm
by momo61
:/ I set the "kick" option ...

But in my opinion, there should be a safer way for an L2J server to handle subclass changes etc.