Issue Information
-
#004139
-
5 - Critical
-
Fixed
Issue Confirmations
-
Yes (0)No (0)


cash shop missing checks, infinite points exploit
Posted by Hercules Bot on 21 March 2010 - 11:50 AM
Originally posted by theultramage
http://www.eathena.w...er&showbug=4139
(partially copied from http://www.eathena.w...howtopic=242267)
happen on all revision
this spread in Thai's eAthena society for a while
how to do this :
use wpe to send this packet when you open cashshop window
0x0288 <item id>.W <amount>.W <point>.L
why :
eA's npc_cashshop_buy() function has overflow bug , when u send krafapoint value of (-MAX_INT) aka 0x80000
the value will gets overflow and bypass all if check and you will get MAX_INT cashpoint
This post has been edited by theultramage: Apr 17 2010, 03:17 AM
http://www.eathena.w...er&showbug=4139
(partially copied from http://www.eathena.w...howtopic=242267)
happen on all revision
this spread in Thai's eAthena society for a while
how to do this :
use wpe to send this packet when you open cashshop window
0x0288 <item id>.W <amount>.W <point>.L
CODE
8802 472F 0001 00000080
why :
eA's npc_cashshop_buy() function has overflow bug , when u send krafapoint value of (-MAX_INT) aka 0x80000
the value will gets overflow and bypass all if check and you will get MAX_INT cashpoint
This post has been edited by theultramage: Apr 17 2010, 03:17 AM