Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add MDL, VVD, VTX and PHY to file.write whitelist #1774

Open
Spalishe opened this issue Jun 12, 2024 · 11 comments
Open

Add MDL, VVD, VTX and PHY to file.write whitelist #1774

Spalishe opened this issue Jun 12, 2024 · 11 comments

Comments

@Spalishe
Copy link

Adding the extensions .mdl, .vvd, .vtx, and .phy to the file library whitelist sounds like a good idea, especially considering that .vtf and .vmt files are included in this list.

@thegrb93
Copy link
Owner

No those formats are very good at crashing clients. I don't think you can even load models from the data directory

@Spalishe
Copy link
Author

Spalishe commented Jun 12, 2024

Models can be loaded even from sf_filedata by adding two dots to path

models/../data/sf_filedata/testModel/chise.mdl

@ax255
Copy link
Contributor

ax255 commented Jun 12, 2024

.obj could be good to be added to the list

@wrefgtzweve
Copy link
Contributor

wrefgtzweve commented Jun 12, 2024

Gmod has a whitelist by itself keep that in mind, see https://wiki.facepunch.com/gmod/file.Write
image

@Spalishe
Copy link
Author

Seems page isn't updated yet Facepunch/garrysmod-requests#2188

@wrefgtzweve
Copy link
Contributor

👍 you're right, it's updated now

@thegrb93
Copy link
Owner

thegrb93 commented Jun 13, 2024

If someone wants to write a checker to sanitize the model data, then I think we can have this. pac3 and outfitter would also benefit from a model sanitizer. Right now they just write a data file if the model crashes the player.

@wrefgtzweve
Copy link
Contributor

wrefgtzweve commented Jun 13, 2024

Outfitter stores the loading model, if it crashes during the loading it'll automatically blacklist the model
Kinda neat but not perfect obviously

@thegrb93
Copy link
Owner

thegrb93 commented Jun 13, 2024

I marked help wanted because I'm not really interested in dissecting the model format again and making a validator anytime soon, although it is a really simple format.

@wrefgtzweve
Copy link
Contributor

Do note, even if the model is valid it can cause crashes sadly. Weird ragdolls especially can crash clients on death.

@Pr0st1m
Copy link

Pr0st1m commented Jun 15, 2024

DA :3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants