Crash Auth from client

Page 1 of 2 12 LastLast
Results 1 to 15 of 20
  1. 17-04-15 #1
    Ben
    Developer - JS Ben is offline
    MemberRank
    Jul 2013 Join Date
    BelguimLocation
    1,244Posts

    Crash Auth from client

    Hey guys, i'm wondering if anyone knows the fix for this:



    Code:
    gauthd: 17 Apr 2015 12:12:15,286  INFO GAuthServer:? - UserLogin:userid=6160,sid=44419,aid=1,zoneid=1,remaintime=0,free_time_left=0,free_time_end=0,func=0,funcparm=0,creatime=1428396641,adduppoint=0,soldpoint=0GQueryPasswd:account is xiaoćshu , login ip is 1108567067
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
java.sql.SQLException: Incorrect string value: '\xC2\x87shu' for column 'name1' at row 1
	at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1072)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3563)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3495)
	at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1959)
	at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2113)
	at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2693)
	at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2102)
	at com.mysql.jdbc.PreparedStatement.execute(PreparedStatement.java:1364)
	at com.mysql.jdbc.CallableStatement.execute(CallableStatement.java:877)
	at application.procedure.handler.execute(handler.java:197)
	at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
	at protocol.MatrixPasswd.Server(Unknown Source)
	at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
	at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
	at com.goldhuman.Common.ThreadPool.run(Unknown Source)
	at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiaoćshu
gauthd: 17 Apr 2015 12:13:32,360  INFO GAuthServer:? - GQueryPasswd:can not find user xiaoćshu
Prepare procedure call:{call recordoffline(?,?,?,?,?)}
gauthd: 17 Apr 2015 12:13:33,886  INFO GAuthServer:? - UserLogout::User 29056 logout successfully.
GQueryPasswd:account is xiaoćshu , login ip is 1108567067
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
java.sql.SQLException: Incorrect string value: '\xC2\x87shu' for column 'name1' at row 1
	at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1072)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3563)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3495)
	at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1959)
	at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2113)
	at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2693)
	at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2102)
	at com.mysql.jdbc.PreparedStatement.execute(PreparedStatement.java:1364)
	at com.mysql.jdbc.CallableStatement.execute(CallableStatement.java:877)
	at application.procedure.handler.execute(handler.java:197)
	at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
	at protocol.MatrixPasswd.Server(Unknown Source)
	at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
	at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
	at com.goldhuman.Common.ThreadPool.run(Unknown Source)
	at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiaoćshu
gauthd: 17 Apr 2015 12:13:36,066  INFO GAuthServer:? - GQueryPasswd:can not find user xiaoćshu
GQueryPasswd:account is xiaoćshu , login ip is 1108567067
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
java.sql.SQLException: Incorrect string value: '\xC2\x87shu' for column 'name1' at row 198
	at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1072)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3563)
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3495)
	at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1959)
	at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2113)
	at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2693)
	at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2102)
	at com.mysql.jdbc.PreparedStatement.execute(PreparedStatement.java:1364)
	at com.mysql.jdbc.CallableStatement.execute(CallableStatement.java:877)
	at application.procedure.handler.execute(handler.java:197)
	at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
	at protocol.MatrixPasswd.Server(Unknown Source)
	at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
	at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
	at com.goldhuman.Common.ThreadPool.run(Unknown Source)
	at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiaoćshu
gauthd: 17 Apr 2015 12:13:39,527  INFO GAuthServer:? - GQueryPasswd:can not find user xiaoćshu
    Some 3rd party is crashing the auth of the server by entering usernames that have characters that are not taken by the Auth.

    We've tested it by making an account with chinese letters and then spam log it. Indeed, the auth crashed.

    We tried changing auths, updating protocols etc.. but it doesn't seem to work.

    Is there anywhere in the client where we can lock certain combinations from being entered in the username field?

    Or are we just looking the complete wrong way on this issue?

    Thnx
    Reply With Quote Reply With Quote
  2. Check out our sponsor
    Crash Auth from client
  3. 17-04-15 #2
    avalanche3
    Hi. avalanche3 is offline
    MemberRank
    Apr 2011 Join Date
    380Posts

    Re: Crash Auth from client

    change in table.xml file encoding from characterEncoding=utf8 to characterEncoding=ascii
    Reply With Quote Reply With Quote
  4. 17-04-15 #3
    Ben
    Developer - JS Ben is offline
    MemberRank
    Jul 2013 Join Date
    BelguimLocation
    1,244Posts

    Re: Crash Auth from client

    hm think we did that already before, imma change it again and check for results.

    Ty for the reply tho will get back shortly
    Reply With Quote Reply With Quote
  5. 17-04-15 #4
    Bola
    Would You Kindly? Bola is offline
    DeveloperRank
    Dec 2011 Join Date
    BrazilLocation
    1,763Posts

    Re: Crash Auth from client

    delete this account and protect your regex from register to block characters like !? %`™~¥^'" characters like that can crash authd
    Reply With Quote Reply With Quote
  6. 17-04-15 #5
    Ben
    Developer - JS Ben is offline
    MemberRank
    Jul 2013 Join Date
    BelguimLocation
    1,244Posts

    Re: Crash Auth from client

    Quote Originally Posted by Bola View Post
    delete this account and protect your regex from register to block characters like !? %`™~¥^'" characters like that can crash authd
    Its not the regex bola, hulu's panel should be protected against characters like that + the account was deleted from the DB and still, the auth crashed.
    So far the encoding change looks good, but will have to see if it stays.
    Reply With Quote Reply With Quote
  7. 17-04-15 #6
    Bola
    Would You Kindly? Bola is offline
    DeveloperRank
    Dec 2011 Join Date
    BrazilLocation
    1,763Posts

    Re: Crash Auth from client

    say to him update panel fast, since another people can explore on another's servers, if I'm not wrong authd don't support Russian characters too
    Reply With Quote Reply With Quote
  8. 17-04-15 #7
    Calas
    God is Dead Calas is offline
    MemberRank
    Aug 2011 Join Date
    Sousse, TunisiaLocation
    202Posts

    Re: Crash Auth from client

    Quote Originally Posted by Bola View Post
    say to him update panel fast, since another people can explore on another's servers, if I'm not wrong authd don't support Russian characters too
    The auth crashes even if the account is not in database
    Reply With Quote Reply With Quote
  9. 17-04-15 #8
    Bola
    Would You Kindly? Bola is offline
    DeveloperRank
    Dec 2011 Join Date
    BrazilLocation
    1,763Posts

    Re: Crash Auth from client

    Quote Originally Posted by Calas View Post
    The auth crashes even if the account is not in database
    authd crashes on aquire passwd, check by yourself
    Reply With Quote Reply With Quote
  10. 17-04-15 #9
    GiantAxe
    Valued Member GiantAxe is offline
    MemberRank
    Oct 2012 Join Date
    136Posts

    Re: Crash Auth from client

    what is the database collation set to?

    utf8mb4 has extended support for chinese characters (AKA, 3 byte chars)
    Reply With Quote Reply With Quote
  11. 18-04-15 #10
    Ben
    Developer - JS Ben is offline
    MemberRank
    Jul 2013 Join Date
    BelguimLocation
    1,244Posts

    Re: Crash Auth from client

    So far after a day it's still looking good. with the ascii change
    Reply With Quote Reply With Quote
  12. 19-04-15 #11
    Ben
    Developer - JS Ben is offline
    MemberRank
    Jul 2013 Join Date
    BelguimLocation
    1,244Posts

    Re: Crash Auth from client

    Bumping thread:

    Looks like he's back after the weekend.

    Code:
    GQueryPasswd:account is xiao_shućććććććććććććććććććććććććććććććććććććććććć , login ip is -1491901413
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'name1' at row 1
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3561)
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3495)
    at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1959)
    at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2113)
    at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2693)
    at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2102)
    at com.mysql.jdbc.PreparedStatement.execute(PreparedStatement.java:1364)
    at com.mysql.jdbc.CallableStatement.execute(CallableStatement.java:877)
    at application.procedure.handler.execute(handler.java:197)
    at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
    at protocol.MatrixPasswd.Server(Unknown Source)
    at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
    at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
    at com.goldhuman.Common.ThreadPool.run(Unknown Source)
    at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiao_shućććććććććććććććććććććććććććććććććććććććććć
gauthd: 19 Apr 2015 15:29:02,161  INFO GAuthServer:? - GQueryPasswd:can not find user xiao_shućććććććććććććććććććććććććććććććććććććććććć
GQueryPasswd:account is xiao_shućććććććććććććććććććććććććććććććććććććććććć , login ip is -1491901413
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'name1' at row 1
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3561)
    at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3495)
    at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1959)
    at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2113)
    at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2693)
    at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2102)
    at com.mysql.jdbc.PreparedStatement.execute(PreparedStatement.java:1364)
    at com.mysql.jdbc.CallableStatement.execute(CallableStatement.java:877)
    at application.procedure.handler.execute(handler.java:197)
    at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
    at protocol.MatrixPasswd.Server(Unknown Source)
    at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
    at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
    at com.goldhuman.Common.ThreadPool.run(Unknown Source)
    at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiao_shućććććććććććććććććććććććććććććććććććććććććć
gauthd: 19 Apr 2015 15:29:05,099  INFO GAuthServer:? - GQueryPasswd:can not find user xiao_shućććććććććććććććććććććććććććććććććććććććććć
GQueryPasswd:account is xiao_shućććććććććććććććććććććććććććććććććććććććććć , login ip is -1491901413
Sending query to acquire password
Prepare procedure call:{call acquireuserpasswd(?,?,?)}
com.mysql.jdbc.exceptions.jdbc4.MySQLNonTransientConnectionException: No operations allowed after statement closed.
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
    at java.lang.reflect.Constructor.newInstance(Constructor.java:534)
    at com.mysql.jdbc.Util.handleNewInstance(Util.java:406)
    at com.mysql.jdbc.Util.getInstance(Util.java:381)
    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1012)
    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:986)
    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:981)
    at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:926)
    at com.mysql.jdbc.StatementImpl.checkClosed(StatementImpl.java:405)
    at com.mysql.jdbc.StatementImpl.executeQuery(StatementImpl.java:1329)
    at com.mysql.jdbc.DatabaseMetaData.getCallStmtParameterTypes(DatabaseMetaData.java:1599)
    at com.mysql.jdbc.DatabaseMetaData.getProcedureOrFunctionColumns(DatabaseMetaData.java:4138)
    at com.mysql.jdbc.DatabaseMetaData.getProcedureColumns(DatabaseMetaData.java:4056)
    at com.mysql.jdbc.CallableStatement.determineParameterTypes(CallableStatement.java:827)
    at com.mysql.jdbc.CallableStatement.<init>(CallableStatement.java:625)
    at com.mysql.jdbc.JDBC4CallableStatement.<init>(JDBC4CallableStatement.java:46)
    at sun.reflect.GeneratedConstructorAccessor10.newInstance(Unknown Source)
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
    at java.lang.reflect.Constructor.newInstance(Constructor.java:534)
    at com.mysql.jdbc.Util.handleNewInstance(Util.java:406)
    at com.mysql.jdbc.CallableStatement.getInstance(CallableStatement.java:521)
    at com.mysql.jdbc.ConnectionImpl.parseCallableStatement(ConnectionImpl.java:4078)
    at com.mysql.jdbc.ConnectionImpl.prepareCall(ConnectionImpl.java:4162)
    at com.mysql.jdbc.ConnectionImpl.prepareCall(ConnectionImpl.java:4136)
    at application.procedure.handler.execute(handler.java:189)
    at com.goldhuman.account.storage.acquireIdPasswd(storage.java:419)
    at protocol.MatrixPasswd.Server(Unknown Source)
    at com.goldhuman.IO.Protocol.Rpc.Process(Unknown Source)
    at com.goldhuman.IO.Protocol.Task.run(Unknown Source)
    at com.goldhuman.Common.ThreadPool.run(Unknown Source)
    at java.lang.Thread.run(Thread.java:701)
acquireIdPasswd exception:account=xiao_shućććććććććććććććććććććććććććććććććććććććććć
gauthd: 19 Apr 2015 15:29:15,281  INFO GAuthServer:? - GQueryPasswd:can not find user xiao_shućććććććććććććććććććććććććććććććććććććććććć
    Done some changes to table field char length/sizes hoping it'll block that part as hes obviously doing it on purpose.
    Reply With Quote Reply With Quote
  13. 21-04-15 #12
    Ben
    Developer - JS Ben is offline
    MemberRank
    Jul 2013 Join Date
    BelguimLocation
    1,244Posts

    Re: Crash Auth from client

    I hope i don't break the rules with bumping it once again but yea w.e this has to be said.

    As i received today from the connections i work with.

    ..Edited...

    Okay?
    Last edited by Ben; 23-04-15 at 10:20 PM.
    Reply With Quote Reply With Quote
  14. 21-04-15 #13
    jv90
    sarcasm-mode: active jv90 is offline
    MemberRank
    Jun 2013 Join Date
    IDALocation
    467Posts

    Re: Crash Auth from client

    nimdA #2 I see.
    Reply With Quote Reply With Quote
  15. 21-04-15 #14
    avalanche3
    Hi. avalanche3 is offline
    MemberRank
    Apr 2011 Join Date
    380Posts

    Re: Crash Auth from client

    And what would be the point of him logging under his name? LOL
    If you're robbing a house, do you leave a note: "it was me" ?
    Reply With Quote Reply With Quote
  16. 21-04-15 #15
    Ben
    Developer - JS Ben is offline
    MemberRank
    Jul 2013 Join Date
    BelguimLocation
    1,244Posts

    Re: Crash Auth from client

    Quote Originally Posted by avalanche3 View Post
    And what would be the point of him logging under his name? LOL
    If you're robbing a house, do you leave a note: "it was me" ?
    idk, i didn't accouse anyone of doing anything. I just update the logs i get hoping someone knows a complete fix :-) As it seems pretty easy making the auth crash like that.

    I know Mar for a longer time already so i know mar is an ok guy.

    Can be someone else who wants to set them on a bad track :p would like to know who that is so stuff gets solved smoothly.
    Reply With Quote Reply With Quote


Page 1 of 2 12 LastLast
« Previous Thread | Next Thread »

Advertisement