haloloop... again

shankedup · **Joined:** 30 Jun 2008 22:14 **Posts:** 17

it works perfectly, thanks for all the help luigi =]

*is this supposed to be our 4th of July Present?*

Termy · **Joined:** 02 Jul 2008 22:01 **Posts:** 3

Which version of halo u patched, shankedup?

I tested this patch with haloceded 1.0 and 1.07 on WinXP SP2 and effects are not promising. When i joined my server i got some problems with moving and turning, something like connection issues. And this freaky socket kept showing in corner of my screen. :-(

I had these problems only after applying patches, on orginal exes everithing was OK.

While the server was not vurnelable to first haloloop2 attack, it got crashed after like 10 probes - i got a "nice" exception message.

It appears that loop cannot be ignored, it must be executed 2 or 3 times, if it's not - rest of UDP packet or even whole packet is not processed correctly and clients experience connection issues, I guess.

Thanks for your effort, Luigi.

shankedup · **Joined:** 30 Jun 2008 22:14 **Posts:** 17

Termy wrote:

Which version of halo u patched, shankedup?

I tested this patch with haloceded 1.0 and 1.07 on WinXP SP2 and effects are not promising. When i joined my server i got some problems with moving and turning, something like connection issues. And this freaky socket kept showing in corner of my screen. :-(

I had these problems only after applying patches, on orginal exes everithing was OK.

While the server was not vurnelable to first haloloop2 attack, it got crashed after like 10 probes - i got a "nice" exception message.

It appears that loop cannot be ignored, it must be executed 2 or 3 times, if it's not - rest of UDP packet or even whole packet is not processed correctly and clients experience connection issues, I guess.

Thanks for your effort, Luigi.

http://forums.majestyroyale.com/viewtop ... 225&p=2121

I've tested and uploaded the versions I got working perfectly (I didnt upload any 1.07, since we know they worked before)

shankedup · **Joined:** 30 Jun 2008 22:14 **Posts:** 17

blade wrote:

The patch seems to cause some sort of leak. The pings of all players just continuously increase, until playing is unbearable. Im on 21mbps/12mbps fiber optics connection and my ping went to 1600 on my own server with this patch. Without the patch its 33.

although its not as extreme as he states it, this is a true happening... all pings, on a paid server mind you, are completely haywire.... it shoots from 200 to 67 and so on randomly... before the loop2, the pings were always constant..

Is there some sort of leak in the script? :(

blade · **Joined:** 02 Jul 2008 17:59 **Posts:** 3

The patch seems to cause some sort of leak. The pings of all players just continuously increase, until playing is unbearable. Im on 21mbps/12mbps fiber optics connection and my ping went to 1600 on my own server with this patch. Without the patch its 33.

I tested this on my own computer and on a paid server, using one after the other (first the normal haloded, then the patched one). One causes the pings to go up almost endlessly, the other one works flawlessly. The pings also go up for other players, its not just me.

aluigi · **Posted:** 03 Jul 2008 20:52

Ok, I have removed the work-around.
Thanx for having tested it, if I will have other updates I will post them here

omegga · **Joined:** 27 Jun 2008 10:22 **Posts:** 8

Update from "Roge, Bungie's old Halo PC guy".

http://www.bungie.net/Forums/posts.aspx?postID=22895922

Damn, and my new patch seemed to be working properly.

aluigi · **Posted:** 03 Jul 2008 23:27

great news Omega, that guy (Roger) is just the contact I had in the 2005 and about I referred in my previous posts 8-)

Oh, nice new website too :)

shankedup · **Joined:** 30 Jun 2008 22:14 **Posts:** 17

any updates recently?

aluigi · **Posted:** 17 Jul 2008 22:23

for the updates from Roger you must wait august

aluigi · **Posted:** 18 Jul 2008 22:06

in reality there is an update but it's useless, I have fixed the new bug I have found

shankedup · **Joined:** 30 Jun 2008 22:14 **Posts:** 17

aluigi wrote:

in reality there is an update but it's useless, I have fixed the new bug I have found

any chance you'll release it? (or are there more problems to be solved)

aluigi · **Posted:** 20 Jul 2008 08:41

no, I will not release it for the moment since I want to wait Roger first

senchi · **Joined:** 27 Jul 2008 03:17 **Posts:** 2

hey everyone, and especially luigi ! first i would to thank you for all your efforts .

I have seen something strange today, an invulnerable server against haloloop2 - i don't want to post his name - got crashed with haloloop's symptoms and i know what i'm saying it's INVULNERABLE !

Is there any Modified version of the latest haloloop ?

Sorry for my bad english and thanks in advance !

aluigi · **Posted:** 27 Jul 2008 12:21

the details and the proof-of-concept about the new so called haloloop3 are known only by two people: me and Roger (which should contact me just the next week).

So I can exclude the hypothesis of a new modification of the old haloloop2 proof-of-concept (is required a certain knowledge of the Halo protocol).

what effects happened to this server?
cpu at 100% and nobody able to connect or query it?
was you a player or the server's admin?

senchi · **Joined:** 27 Jul 2008 03:17 **Posts:** 2

Thank you for your answer Luigi, i was a player and because of haloloop can't work while the server is full i suspected another player because just after this guy quits the server got crashed and the network connection lost !

thanks Luigi again, i suspected a new haloloop poc and my doubts were confirmed ! thanks again

aluigi · **Posted:** 27 Jul 2008 15:45

you should contact the admin of that server and asking him if the server is crashed or freezed.
If the problem was a crash, it's not a haloloop* vulnerability but something else.

shankedup · **Joined:** 30 Jun 2008 22:14 **Posts:** 17

Luigi, i hope the fixes that will be implemented in 1.08 will be patched for the previous versions :)

aluigi · **Posted:** 06 Aug 2008 15:16

exactly after a week from the releasing of the new hotfix (http://www.bungie.net/Forums/posts.aspx?postID=24200699 which has been deeply tested by me before and after its public release and again some minutes ago) I have released the new advisory:

http://aluigi.org/adv/halonsoloop3-adv.txt

shankedup: uhmmm I don't know if I have fully understood your post, anyway take a look here: /haloloop-f ... .html#3411

shankedup · **Joined:** 30 Jun 2008 22:14 **Posts:** 17

aluigi wrote:

exactly after a week from the releasing of the new hotfix (http://www.bungie.net/Forums/posts.aspx?postID=24200699 which has been deeply tested by me before and after its public release and again some minutes ago) I have released the new advisory:

http://aluigi.org/adv/halonsoloop3-adv.txt

shankedup: uhmmm I don't know if I have fully understood your post, anyway take a look here: /haloloop-f ... .html#3411

thx alot for ur help :)

aluigi · **Posted:** 07 Aug 2008 14:13

1.08 released:
http://www.bungie.net/Forums/posts.aspx?postID=24577876

Luigi Auriemma

haloloop... again