Skip to content

Reject profileless multiplayer peers - #5882

Merged
Alayan-stk-2 merged 1 commit into
supertuxkart:masterfrom
acts-1631:fix-empty-profile-chat
Oct 2, 2026
Merged

Alayan-stk-2 merged 1 commit into
supertuxkart:masterfrom
acts-1631:fix-empty-profile-chat

Conversation

@acts-1631

Copy link
Copy Markdown
Contributor

ServerLobby::handleUnencryptedConnection accepted a connection with a player count of zero and marked the peer as validated without adding a player profile. handleChat later uses getPlayerProfiles()[0] to build the sender prefix, so a modified LAN client could send a valid connection request with no players and then crash the server with a chat message.

This rejects zero-player connection requests before validation and ignores chat from peers that have no profile. Normal clients always include at least one profile, including spectators.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants