[#SVC-2448] llUnSit Attack/Bug - Second Life Issues

2. Second Life Service - SVC

llUnSit Attack/Bug

Created: 31/May/08 02:33 AM Updated: 25/Oct/08 02:35 PM

Component/s:

Physics

Affects Version/s:

1.22.1 Server, 1.22.4 Server

Fix Version/s:

1.23.0

Time Tracking:

Not Specified

Environment:

« Hide

Second Life 1.20.6 (0) May 27 2008 03:01:36 (Second Life Release) (SLShadow)

You are at 244866.6, 293972.4, 143.6 in Vox located at sim7154.agni.lindenlab.com (8.10.144.156:13002)
Second Life Server 1.22.1.88473

CPU: AMD (Unknown model) (3013 MHz)
Memory: 4095 MB
OS Version: Microsoft Windows XP x64 Edition Service Pack 1 (Build 3790)
Graphics Card Vendor: NVIDIA Corporation
Graphics Card: GeForce 8800 Ultra/PCI/SSE2
OpenGL Version: 2.1.2
LLMozLib Version: [LLMediaImplLLMozLib] - 2.01.15539 (Mozilla GRE version 1.8.1.13_0000000000)
Packets Lost: 232/646760 (0.0%)

Linden Lab Issue ID:	DEV-16195
Linden Lab Internal Branch:	havok4-6

Description

« Hide

A simple loop of unsitting an avatar, disrupts all forms of movement, does not appear on bumps, pushes, and hits, when the avatar sits, or flys they are shot upwards at a very fast rate.

//example code start
default
{
touch_start(integer total_number)

{ while(1)llUnSit(llDetectedKey(0)); }

}
//example code end

Normally I would report this as normal, or low, but since it makes flying impossible, disrupts moving, and is undetectable, and can be used to attack people, it was suggested that I make it critical.

(I think for some reason this was posted by a mistake under SEC, i didn't mean for it do post under that)

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Gellan Glenelg added a comment - 31/May/08 01:27 PM

This repros:

Drop the above script into a prim
Touch the prim
Press [Home] key to start flying
Observe: Avatar flies up and doesn't stop
llUnsit appears to be applying upward force to an avatar which never sat on the prim. The loop repeats this forever.
Expected: llUnsit should not be able to apply force to an avatar unless the avatar is sitting on the the object.

[ Permlink | « Hide ]

Strife Onizuka added a comment - 31/May/08 04:44 PM - edited

I moved it into SEC because it describes a new method of harassing users and violating the Community Standards. You shouldn't have reposted it, but have waited for LL to decide if it should have been moved back out of SEC.

[ Permlink | « Hide ]

Moy Loon added a comment - 31/May/08 05:19 PM

Well since you can only do it on land that you own, (as far as i know), it shouldn't be that wide-spread, also i don't think it's a security issue, since it doesn't do anything EXTREMELY bad, like, steal scripts source, or dupe no copy junk.

[ Permlink | « Hide ]

Fake Fitzgerald added a comment - 30/Jun/08 06:40 AM

This issue was repro in the land that is owned by other people.
I tested with my alt at "Sandbox Island Extension" that is owned by Linden.
My script moved my alt up anywhere in the same SIM, and vice versa.

[ Permlink | « Hide ]

Mason Madfess added a comment - 07/Jul/08 04:54 PM

This is about as critical of a thing as the classic no-push orbiters were back in Havok1. What makes this less powerful then the no-push orbiters is the person being pushed by it has the option of not flying to fall towards the ground. Some landowners set their parcels no-fly for reason that they wish for people not to fly there. This has its uses as being a penalty for if the user chooses to fly anyway. This is simply a crack in how SL works and is nothing to really worry about. Most land that does not want people pushing each other on has no build set also. This also works on only 1 avatar per script so it would be difficult to do a sim full of people with it also.

[ Permlink | « Hide ]

Fake Fitzgerald added a comment - 25/Oct/08 02:35 PM

This issue must have been fixed in 1.23 server.
http://wiki.secondlife.com/wiki/Release_Notes/Second_Life_Server/1.23