==================================================================================== # # this file has been created for the Lame patcher program available for both *nix # and Windows platforms. # You need this program for continuing the patching of your files: # # http://aluigi.org/mytoolz.htm#lpatch # # Quick step-by-step # - launch lpatch.exe # - select this igi2fsfix.lpatch file # - read the message windows and click yes # - select the file (usually executables or dlls) to patch # - read the message windows to know if everything has been patched correctly # - test your game TITLE IGI 2: Covert Strike dedicated server 1.3 format string fix 0.1 (Windows) by Luigi Auriemma e-mail: aluigi@autistici.org web: aluigi.org INTRO This unofficial patch is referred to the bug described here: . . http://aluigi.org/adv/igi2fs-adv.txt . http://aluigi.org/adv/igi2bugs-adv.txt (bug 1) . If you are unsure if your server is vulnerable please use the proof-of-concept provided there. . This patch fully fixes the problem adding a %s before the logging string passed to the File_printf function of IGI2. Note that this patch works only with version 1.3 of the dedicated server for Windows, older versions will be NOT supported by me so don't ask. FILE igi2-1.3-dedicated.exe RVA 00400000 OFFSET 0041dfad cc 68 ; push 0061d0dc + cc |0061d0dc + cc e8 ; call 0040d270 + cc ^0040d270 + cc 83 ; add esp,04 + cc c4 + cc 04 + cc e9 ; jmp 0041e059 + cc ^0041e059 0041e054 e8 e9 ; jmp 0041dfad + ?? ^0041dfad ====================================================================================