M1 | M2 | 055 | 001
|Summary:||Servers aren't checking client wads|
|Product:||Odamex||Reporter:||Ralph Vickers <Ralphis>|
|Component:||Server & Client||Assignee:||Odamex Bug Reporter <odamex-bug-reporter>|
Description Ralph Vickers 2008-06-01 05:47:34 UTC
Servers should make sure that clients are using the exact same wad files as the server. As of revision 870, this is not the case. I began modifying my odamex.wad to test out new flag sprites. I soon found out that even with a modified odamex.wad I could connect to any server. Correct behavior is for server to check client's wad and make sure it matches exactly. If the wad doesn't match, player is booted from the server.
Comment 1 Ralph Vickers 2008-08-03 07:31:39 UTC
[10:00] <@Ralphis> what if it was optional server side [10:00] <@Ralphis> so servers like odasvn can not check it which is useful for development [10:01] <@Ralphis> but it makes it more difficult for players (not impossible) to cheat on servers used for competitive play [10:02] <denis> mainly, what i have against moving the check serverside, is that it makes servers impossible to debug [10:02] <denis> someone comes into #odamex and says they can't connect to server xyz [10:02] <denis> because their wad doesn't match [10:03] <denis> and we won't be able to do anything, because we don't know what md5 the server wants [10:04] <@Ralphis> have the server print the MD5 to client [10:04] <denis> that's what it currently does :) [10:05] <denis> or we could do one MD5 forward and one MD5 of the reverse of the file [10:05] <denis> so the forward MD5 is known to the client and server, but the reverse MD5 is known only to server [10:06] <denis> (and client, assuming they actually have the correct wad)
Comment 2 Ralph Vickers 2011-08-15 17:16:59 UTC
Servers are definitely checking these wads now and have been for a long time.
Comment 3 Ralph Vickers 2011-08-16 21:39:40 UTC
Apparently I was WRONG. Reopening
Comment 4 Mike Lightner 2011-09-17 13:12:35 UTC
Is it more accurate to say it's not checking odamex.wad? There's definitely some checking happening on the iwad and pwads.