Luigi Auriemma :: View topic - haloloop... again

Which version of halo u patched, shankedup?

I tested this patch with haloceded 1.0 and 1.07 on WinXP SP2 and effects are not promising. When i joined my server i got some problems with moving and turning, something like connection issues. And this freaky socket kept showing in corner of my screen. :-(

I had these problems only after applying patches, on orginal exes everithing was OK.

While the server was not vurnelable to first haloloop2 attack, it got crashed after like 10 probes - i got a "nice" exception message.

It appears that loop cannot be ignored, it must be executed 2 or 3 times, if it's not - rest of UDP packet or even whole packet is not processed correctly and clients experience connection issues, I guess.

Thanks for your effort, Luigi.

The patch seems to cause some sort of leak. The pings of all players just continuously increase, until playing is unbearable. Im on 21mbps/12mbps fiber optics connection and my ping went to 1600 on my own server with this patch. Without the patch its 33.

in reality there is an update but it's useless, I have fixed the new bug I have found

exactly after a week from the releasing of the new hotfix (http://www.bungie.net/Forums/posts.aspx?postID=24200699 which has been deeply tested by me before and after its public release and again some minutes ago) I have released the new advisory:

http://aluigi.org/adv/halonsoloop3-adv.txt

shankedup: uhmmm I don't know if I have fully understood your post, anyway take a look here: http://aluigi.freeforums.org/haloloop-f ... .html#3411

Author:	shankedup [ 03 Jul 2008 18:40 ]
Post subject:
it works perfectly, thanks for all the help luigi =] is this supposed to be our 4th of July Present?

Author:	Termy [ 03 Jul 2008 19:23 ]
Post subject:
Which version of halo u patched, shankedup? I tested this patch with haloceded 1.0 and 1.07 on WinXP SP2 and effects are not promising. When i joined my server i got some problems with moving and turning, something like connection issues. And this freaky socket kept showing in corner of my screen. :-( I had these problems only after applying patches, on orginal exes everithing was OK. While the server was not vurnelable to first haloloop2 attack, it got crashed after like 10 probes - i got a "nice" exception message. It appears that loop cannot be ignored, it must be executed 2 or 3 times, if it's not - rest of UDP packet or even whole packet is not processed correctly and clients experience connection issues, I guess. Thanks for your effort, Luigi.

Author:	shankedup [ 03 Jul 2008 19:49 ]
Post subject:
Termy wrote: Which version of halo u patched, shankedup? I tested this patch with haloceded 1.0 and 1.07 on WinXP SP2 and effects are not promising. When i joined my server i got some problems with moving and turning, something like connection issues. And this freaky socket kept showing in corner of my screen. :-( I had these problems only after applying patches, on orginal exes everithing was OK. While the server was not vurnelable to first haloloop2 attack, it got crashed after like 10 probes - i got a "nice" exception message. It appears that loop cannot be ignored, it must be executed 2 or 3 times, if it's not - rest of UDP packet or even whole packet is not processed correctly and clients experience connection issues, I guess. Thanks for your effort, Luigi. http://forums.majestyroyale.com/viewtop ... 225&p=2121 I've tested and uploaded the versions I got working perfectly (I didnt upload any 1.07, since we know they worked before)

Author:	shankedup [ 03 Jul 2008 20:11 ]
Post subject:
blade wrote: The patch seems to cause some sort of leak. The pings of all players just continuously increase, until playing is unbearable. Im on 21mbps/12mbps fiber optics connection and my ping went to 1600 on my own server with this patch. Without the patch its 33. although its not as extreme as he states it, this is a true happening... all pings, on a paid server mind you, are completely haywire.... it shoots from 200 to 67 and so on randomly... before the loop2, the pings were always constant.. Is there some sort of leak in the script? :(

Author:	blade [ 03 Jul 2008 20:29 ]
Post subject:
The patch seems to cause some sort of leak. The pings of all players just continuously increase, until playing is unbearable. Im on 21mbps/12mbps fiber optics connection and my ping went to 1600 on my own server with this patch. Without the patch its 33. I tested this on my own computer and on a paid server, using one after the other (first the normal haloded, then the patched one). One causes the pings to go up almost endlessly, the other one works flawlessly. The pings also go up for other players, its not just me.

Luigi Auriemma http://aluigi.freeforums.org/

haloloop... again http://aluigi.freeforums.org/haloloop-again-t404-30.html	Page 2 of 2

Author:	aluigi [ 03 Jul 2008 20:52 ]
Post subject:
Ok, I have removed the work-around. Thanx for having tested it, if I will have other updates I will post them here

Author:	omegga [ 03 Jul 2008 22:59 ]
Post subject:
Update from "Roge, Bungie's old Halo PC guy". http://www.bungie.net/Forums/posts.aspx?postID=22895922 Damn, and my new patch seemed to be working properly.

Author:	aluigi [ 03 Jul 2008 23:27 ]
Post subject:
great news Omega, that guy (Roger) is just the contact I had in the 2005 and about I referred in my previous posts 8-) Oh, nice new website too :)

Author:	shankedup [ 17 Jul 2008 20:36 ]
Post subject:
any updates recently?

Author:	aluigi [ 17 Jul 2008 22:23 ]
Post subject:
for the updates from Roger you must wait august

Author:	aluigi [ 18 Jul 2008 22:06 ]
Post subject:
in reality there is an update but it's useless, I have fixed the new bug I have found

Author:	shankedup [ 19 Jul 2008 19:18 ]
Post subject:
aluigi wrote: in reality there is an update but it's useless, I have fixed the new bug I have found any chance you'll release it? (or are there more problems to be solved)

Author:	aluigi [ 20 Jul 2008 08:41 ]
Post subject:
no, I will not release it for the moment since I want to wait Roger first

Author:	senchi [ 27 Jul 2008 03:24 ]
Post subject:
hey everyone, and especially luigi ! first i would to thank you for all your efforts . I have seen something strange today, an invulnerable server against haloloop2 - i don't want to post his name - got crashed with haloloop's symptoms and i know what i'm saying it's INVULNERABLE ! Is there any Modified version of the latest haloloop ? Sorry for my bad english and thanks in advance !

Author:	aluigi [ 07 Aug 2008 14:13 ]
Post subject:
1.08 released: http://www.bungie.net/Forums/posts.aspx?postID=24577876

Page 2 of 2	All times are UTC [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/

Author:	aluigi [ 27 Jul 2008 12:21 ]
Post subject:
the details and the proof-of-concept about the new so called haloloop3 are known only by two people: me and Roger (which should contact me just the next week). So I can exclude the hypothesis of a new modification of the old haloloop2 proof-of-concept (is required a certain knowledge of the Halo protocol). what effects happened to this server? cpu at 100% and nobody able to connect or query it? was you a player or the server's admin?

Author:	senchi [ 27 Jul 2008 14:53 ]
Post subject:
Thank you for your answer Luigi, i was a player and because of haloloop can't work while the server is full i suspected another player because just after this guy quits the server got crashed and the network connection lost ! thanks Luigi again, i suspected a new haloloop poc and my doubts were confirmed ! thanks again

Author:	aluigi [ 27 Jul 2008 15:45 ]
Post subject:
you should contact the admin of that server and asking him if the server is crashed or freezed. If the problem was a crash, it's not a haloloop* vulnerability but something else.

Author:	shankedup [ 31 Jul 2008 07:27 ]
Post subject:
Luigi, i hope the fixes that will be implemented in 1.08 will be patched for the previous versions :)

Author:	aluigi [ 06 Aug 2008 15:16 ]
Post subject:
exactly after a week from the releasing of the new hotfix (http://www.bungie.net/Forums/posts.aspx?postID=24200699 which has been deeply tested by me before and after its public release and again some minutes ago) I have released the new advisory: http://aluigi.org/adv/halonsoloop3-adv.txt shankedup: uhmmm I don't know if I have fully understood your post, anyway take a look here: http://aluigi.freeforums.org/haloloop-f ... .html#3411

Author:	shankedup [ 07 Aug 2008 07:19 ]
Post subject:
aluigi wrote: exactly after a week from the releasing of the new hotfix (http://www.bungie.net/Forums/posts.aspx?postID=24200699 which has been deeply tested by me before and after its public release and again some minutes ago) I have released the new advisory: http://aluigi.org/adv/halonsoloop3-adv.txt shankedup: uhmmm I don't know if I have fully understood your post, anyway take a look here: http://aluigi.freeforums.org/haloloop-f ... .html#3411 thx alot for ur help :)