Welcome!

Join our community of MMO enthusiasts and game developers! By registering, you'll gain access to discussions on the latest developments in MMO server files and collaborate with like-minded individuals. Join us today and unlock the potential of MMO server development!

Join Today!

Crash Auth from client

Ben

Developer - JS
Developer
Joined
Jul 6, 2013
Messages
1,224
Reaction score
506
Hey guys, i'm wondering if anyone knows the fix for this:



Code:
gauthd: 17 Apr 2015 12:12:15,286  INFO GAuthServer:? - UserLogin:userid=6160,sid=44419,aid=1,zoneid=1,remaintime=0,free_time_left=0,free_time_end=0,func=0,funcparm=0,creatime=1428396641,adduppoint=0,soldpoint=0GQueryPasswd:account is xiaoćshu , login ip is 1108567067
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
java.sql.SQLException: Incorrect string value: '\xC2\x87shu' for column 'name1' at row 1
	at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1072)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3563)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3495)
	at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1959)
	at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2113)
	at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2693)
	at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2102)
	at com.mysql.jdbc.PreparedStatement.execute(PreparedStatement.java:1364)
	at com.mysql.jdbc.CallableStatement.execute(CallableStatement.java:877)
	at application.procedure.handler.execute(handler.java:197)
	at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
	at protocol.MatrixPasswd.Server(Unknown Source)
	at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
	at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
	at com.goldhuman.Common.ThreadPool.run(Unknown Source)
	at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiaoćshu
gauthd: 17 Apr 2015 12:13:32,360  INFO GAuthServer:? - GQueryPasswd:can not find user xiaoćshu
Prepare procedure call:{call recordoffline(?,?,?,?,?)}
gauthd: 17 Apr 2015 12:13:33,886  INFO GAuthServer:? - UserLogout::User 29056 logout successfully.
GQueryPasswd:account is xiaoćshu , login ip is 1108567067
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
java.sql.SQLException: Incorrect string value: '\xC2\x87shu' for column 'name1' at row 1
	at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1072)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3563)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3495)
	at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1959)
	at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2113)
	at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2693)
	at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2102)
	at com.mysql.jdbc.PreparedStatement.execute(PreparedStatement.java:1364)
	at com.mysql.jdbc.CallableStatement.execute(CallableStatement.java:877)
	at application.procedure.handler.execute(handler.java:197)
	at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
	at protocol.MatrixPasswd.Server(Unknown Source)
	at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
	at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
	at com.goldhuman.Common.ThreadPool.run(Unknown Source)
	at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiaoćshu
gauthd: 17 Apr 2015 12:13:36,066  INFO GAuthServer:? - GQueryPasswd:can not find user xiaoćshu
GQueryPasswd:account is xiaoćshu , login ip is 1108567067
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
java.sql.SQLException: Incorrect string value: '\xC2\x87shu' for column 'name1' at row 198
	at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1072)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3563)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3495)
	at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1959)
	at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2113)
	at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2693)
	at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2102)
	at com.mysql.jdbc.PreparedStatement.execute(PreparedStatement.java:1364)
	at com.mysql.jdbc.CallableStatement.execute(CallableStatement.java:877)
	at application.procedure.handler.execute(handler.java:197)
	at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
	at protocol.MatrixPasswd.Server(Unknown Source)
	at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
	at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
	at com.goldhuman.Common.ThreadPool.run(Unknown Source)
	at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiaoćshu
gauthd: 17 Apr 2015 12:13:39,527  INFO GAuthServer:? - GQueryPasswd:can not find user xiaoćshu

Some 3rd party is crashing the auth of the server by entering usernames that have characters that are not taken by the Auth.

We've tested it by making an account with chinese letters and then spam log it. Indeed, the auth crashed.

We tried changing auths, updating protocols etc.. but it doesn't seem to work.

Is there anywhere in the client where we can lock certain combinations from being entered in the username field?

Or are we just looking the complete wrong way on this issue?

Thnx
 

Ben

Developer - JS
Developer
Joined
Jul 6, 2013
Messages
1,224
Reaction score
506
delete this account and protect your regex from register to block characters like !? %`™~¥^'" characters like that can crash authd

Its not the regex bola, hulu's panel should be protected against characters like that + the account was deleted from the DB and still, the auth crashed.
So far the encoding change looks good, but will have to see if it stays.
 
Upvote 0
Banned
Banned
Joined
Aug 10, 2011
Messages
201
Reaction score
54
say to him update panel fast, since another people can explore on another's servers, if I'm not wrong authd don't support Russian characters too

The auth crashes even if the account is not in database
 
Upvote 0
Junior Spellweaver
Joined
Oct 16, 2012
Messages
136
Reaction score
46
what is the database collation set to?

utf8mb4 has extended support for chinese characters (AKA, 3 byte chars)
 
Upvote 0

Ben

Developer - JS
Developer
Joined
Jul 6, 2013
Messages
1,224
Reaction score
506
Bumping thread:

Looks like he's back after the weekend.

Code:
GQueryPasswd:account is xiao_shućććććććććććććććććććććććććććććććććććććććććć , login ip is -1491901413
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'name1' at row 1
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3561)
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3495)
    at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1959)
    at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2113)
    at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2693)
    at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2102)
    at com.mysql.jdbc.PreparedStatement.execute(PreparedStatement.java:1364)
    at com.mysql.jdbc.CallableStatement.execute(CallableStatement.java:877)
    at application.procedure.handler.execute(handler.java:197)
    at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
    at protocol.MatrixPasswd.Server(Unknown Source)
    at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
    at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
    at com.goldhuman.Common.ThreadPool.run(Unknown Source)
    at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiao_shućććććććććććććććććććććććććććććććććććććććććć
gauthd: 19 Apr 2015 15:29:02,161  INFO GAuthServer:? - GQueryPasswd:can not find user xiao_shućććććććććććććććććććććććććććććććććććććććććć
GQueryPasswd:account is xiao_shućććććććććććććććććććććććććććććććććććććććććć , login ip is -1491901413
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'name1' at row 1
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3561)
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3495)
    at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1959)
    at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2113)
    at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2693)
    at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2102)
    at com.mysql.jdbc.PreparedStatement.execute(PreparedStatement.java:1364)
    at com.mysql.jdbc.CallableStatement.execute(CallableStatement.java:877)
    at application.procedure.handler.execute(handler.java:197)
    at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
    at protocol.MatrixPasswd.Server(Unknown Source)
    at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
    at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
    at com.goldhuman.Common.ThreadPool.run(Unknown Source)
    at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiao_shućććććććććććććććććććććććććććććććććććććććććć
gauthd: 19 Apr 2015 15:29:05,099  INFO GAuthServer:? - GQueryPasswd:can not find user xiao_shućććććććććććććććććććććććććććććććććććććććććć
GQueryPasswd:account is xiao_shućććććććććććććććććććććććććććććććććććććććććć , login ip is -1491901413
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
com.mysql.jdbc.exceptions.jdbc4.MySQLNonTransientConnectionException: No operations allowed after statement closed.
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
    at java.lang.reflect.Constructor.newInstance(Constructor.java:534)
    at com.mysql.jdbc.Util.handleNewInstance(Util.java:406)
    at com.mysql.jdbc.Util.getInstance(Util.java:381)
    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1012)
    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:986)
    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:981)
    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:926)
    at com.mysql.jdbc.StatementImpl.checkClosed(StatementImpl.java:405)
    at com.mysql.jdbc.StatementImpl.executeQuery(StatementImpl.java:1329)
    at com.mysql.jdbc.DatabaseMetaData.getCallStmtParameterTypes(DatabaseMetaData.java:1599)
    at com.mysql.jdbc.DatabaseMetaData.getProcedureOrFunctionColumns(DatabaseMetaData.java:4138)
    at com.mysql.jdbc.DatabaseMetaData.getProcedureColumns(DatabaseMetaData.java:4056)
    at com.mysql.jdbc.CallableStatement.determineParameterTypes(CallableStatement.java:827)
    at com.mysql.jdbc.CallableStatement.<init>(CallableStatement.java:625)
    at com.mysql.jdbc.JDBC4CallableStatement.<init>(JDBC4CallableStatement.java:46)
    at sun.reflect.GeneratedConstructorAccessor10.newInstance(Unknown Source)
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
    at java.lang.reflect.Constructor.newInstance(Constructor.java:534)
    at com.mysql.jdbc.Util.handleNewInstance(Util.java:406)
    at com.mysql.jdbc.CallableStatement.getInstance(CallableStatement.java:521)
    at com.mysql.jdbc.ConnectionImpl.parseCallableStatement(ConnectionImpl.java:4078)
    at com.mysql.jdbc.ConnectionImpl.prepareCall(ConnectionImpl.java:4162)
    at com.mysql.jdbc.ConnectionImpl.prepareCall(ConnectionImpl.java:4136)
    at application.procedure.handler.execute(handler.java:189)
    at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
    at protocol.MatrixPasswd.Server(Unknown Source)
    at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
    at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
    at com.goldhuman.Common.ThreadPool.run(Unknown Source)
    at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiao_shućććććććććććććććććććććććććććććććććććććććććć
gauthd: 19 Apr 2015 15:29:15,281  INFO GAuthServer:? - GQueryPasswd:can not find user xiao_shućććććććććććććććććććććććććććććććććććććććććć

Done some changes to table field char length/sizes hoping it'll block that part as hes obviously doing it on purpose.
 
Upvote 0

Ben

Developer - JS
Developer
Joined
Jul 6, 2013
Messages
1,224
Reaction score
506
I hope i don't break the rules with bumping it once again but yea w.e this has to be said.

As i received today from the connections i work with.

..Edited...

Okay?
 
Last edited:
Upvote 0

Ben

Developer - JS
Developer
Joined
Jul 6, 2013
Messages
1,224
Reaction score
506
And what would be the point of him logging under his name? LOL
If you're robbing a house, do you leave a note: "it was me" ?

idk, i didn't accouse anyone of doing anything. I just update the logs i get hoping someone knows a complete fix :) As it seems pretty easy making the auth crash like that.

I know Mar for a longer time already so i know mar is an ok guy.

Can be someone else who wants to set them on a bad track :p would like to know who that is so stuff gets solved smoothly.
 
Upvote 0
Banned
Banned
Joined
Aug 10, 2011
Messages
201
Reaction score
54
Auth was fixed

uses Base64 encryption

Download :
 
Upvote 0
Shh, quiet, you might piss somebody off
Developer
Joined
Dec 23, 2011
Messages
1,795
Reaction score
2,140
Auth was fixed

uses Base64 encryption

Download :

a funny fix also, with some strange mysql handlers :lol:
also the lot of shenanigans wont fix authd, it is reading as string, and not a byte buffer :lol:

people who look to fix can contact me, daddy server is fixed already and is fully working now, with something more simple and reliable
my skype is adrianolls, ohh and take care with this authd, looks very strange.

Wpu1nK - Crash Auth from client - RaGEZONE Forums
 

Attachments

You must be registered for see attachments list
Last edited:
Upvote 0
Banned
Banned
Joined
Aug 10, 2011
Messages
201
Reaction score
54
a funny fix also, with some strange mysql handlers :lol:
also the lot of shenanigans wont fix authd, it is reading as string, and not a byte buffer :lol:

people who look to fix can contact me, daddy server is fixed already and is fully working now, with something more simple and reliable
my skype is adrianolls, ohh and take care with this authd, looks very strange.

Wpu1nK - Crash Auth from client - RaGEZONE Forums

I'm sorry Bola, I'm not a Java expert and never will be. That's the best I could do.
 

Attachments

You must be registered for see attachments list
Upvote 0
Junior Spellweaver
Joined
Nov 18, 2012
Messages
133
Reaction score
23
@Calas if you fixed, just use original auth its clean and stable working perfect.

for others : there is nothing to do with auth for this error.
 
Upvote 0
Back
Top