- Joined
- Aug 29, 2011
- Messages
- 52
- Reaction score
- 3
Development of channel collapse
Such as:
WorldSvr > 08491D18: XOR eax, 0EB7E2h
You will be in the packet header byte packets received: E2 B7 0e 000000000000 8C 01010000 such 14 bit byte
Relative: CabalMain.exe > 007FCBA4: PUSH 0E
0B7E2 0E 8C they are connected together. If you put the PUSH 0E into PUSH 0C to send, you received packet wholly intact or 0B7E2 0E bytes, as it has already been fixed cannot overflow extra bytes, cause the server to disconnect, it won't channel collapse!
The collapse of E2 B7 0C channel is: 000000000000 0C 0049
The default is: E2 B7 0A 000000000000 0A
Because of its byte PUSH 0A can change 0C and more than 2 bytes, and the letter of Baotou allows it to do so, we solve it we must let the packet bytes which is not allowed to change, to keep E2 B7 0A received 000000000000 0A. E2 B7 0e 000000000000 8C 01010000 is a good example!
I want to say is we can according to the operation of such, I hope you hurry up together to solve this matter!
Such as:
WorldSvr > 08491D18: XOR eax, 0EB7E2h
You will be in the packet header byte packets received: E2 B7 0e 000000000000 8C 01010000 such 14 bit byte
Relative: CabalMain.exe > 007FCBA4: PUSH 0E
0B7E2 0E 8C they are connected together. If you put the PUSH 0E into PUSH 0C to send, you received packet wholly intact or 0B7E2 0E bytes, as it has already been fixed cannot overflow extra bytes, cause the server to disconnect, it won't channel collapse!
The collapse of E2 B7 0C channel is: 000000000000 0C 0049
The default is: E2 B7 0A 000000000000 0A
Because of its byte PUSH 0A can change 0C and more than 2 bytes, and the letter of Baotou allows it to do so, we solve it we must let the packet bytes which is not allowed to change, to keep E2 B7 0A received 000000000000 0A. E2 B7 0e 000000000000 8C 01010000 is a good example!
I want to say is we can according to the operation of such, I hope you hurry up together to solve this matter!
