New CraftBukkit build now available; provides CRITICAL exploit fix.

Discussion in 'Bukkit News' started by EvilSeph, Apr 8, 2011.

Thread Status:
Not open for further replies.
  1. Offline

    br0ad456

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    670 caused my server to get quite abit of lag :( can i fix this
  2. Offline

    jolt76

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Code:
    java.lang.UnsatisfiedLinkError: C:\Users\xxx\AppData\Local\Temp\jline_git-Bukki
    t-0_0_0-646-gb61ef8c-b670jnks.dll: Can't load IA 32-bit .dll on a AMD 64-bit pla
    tform
    i get an error msg about not be able to load a 32 bit dll on a 64 bit system with this build,so i had to switch my server start back to point to 32bit java.
  3. Offline

    Nathan C

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Yeh, I can't hold more than 10 people on my dedicated e8400 box now.

    Makes me sad. :'(
  4. Offline

    Paul_VB

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    wait, so with this new update, bukkit will be much laggier forever??
  5. Offline

    EliteASH_11

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    So can someone explain what the exploit was, because i got banned from a server because it went down while i was there, i hadnt done anything, but this might be the answer to why i got banned.
  6. Offline

    Vyktar

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    did this fix something to do with ZombeMod?
  7. Offline

    Takato

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    I just realized that the new build is 7mb, 617 = 1mb...

    lolwtf happened all of a sudden to make it so big D:
  8. Offline

    exorblob

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    I’m getting the same error. I have no idea as to what’s gone wrong between yesterday and now. I put the new build up as a test and now neither of my servers will start. Any help is greatly appreciated

    EDIT: never mind i figured it out. i forgot to try the restart first. my bad
  9. Offline

    byzantinian

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    cuz hax r srs bsns gaiz
    Smallie07 likes this.
  10. Offline

    killgoblen

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Just out of curiosity, what does the 646 when you type 'version' mean? It's confused me for so long, and I just now realized it wasn't the version number! :p
  11. Offline

    Mr. Cheezit

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Permissions won't work now D: . I updated to 2.6 but I get the error message
    Code:
    00:20:10 [SEVERE] Could not load 'plugins/Permissions.jar' in folder 'plugins':
    java.lang.reflect.InvocationTargetException
        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
        at org.bukkit.plugin.java.JavaPluginLoader.loadPlugin(JavaPluginLoader.java:136)
        at org.bukkit.plugin.SimplePluginManager.loadPlugin(SimplePluginManager.java:158)
        at org.bukkit.plugin.SimplePluginManager.loadPlugins(SimplePluginManager.java:106)
        at org.bukkit.craftbukkit.CraftServer.loadPlugins(CraftServer.java:84)
        at net.minecraft.server.MinecraftServer.e(MinecraftServer.java:215)
        at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:202)
        at net.minecraft.server.MinecraftServer.d(MinecraftServer.java:142)
        at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:257)
        at net.minecraft.server.ThreadServerApplication.run(SourceFile:375)
    Caused by: expected '<document start>', but found BlockMappingStart
     in "<reader>", line 15, column 1:
        plugin:
        ^
    
        at org.yaml.snakeyaml.parser.ParserImpl$ParseDocumentStart.produce(ParserImpl.java:233)
        at org.yaml.snakeyaml.parser.ParserImpl.peekEvent(ParserImpl.java:163)
        at org.yaml.snakeyaml.parser.ParserImpl.checkEvent(ParserImpl.java:148)
        at org.yaml.snakeyaml.composer.Composer.getSingleNode(Composer.java:108)
        at org.yaml.snakeyaml.constructor.BaseConstructor.getSingleData(BaseConstructor.java:124)
        at org.yaml.snakeyaml.Yaml.load(Yaml.java:264)
        at org.bukkit.util.config.Configuration.load(Configuration.java:73)
        at com.nijikokun.bukkit.Permissions.Permissions.<init>(Permissions.java:131)
        ... 13 more
    
    Please help! My server is screwed without Permissions D:
  12. Offline

    EvilSeph

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    You're better off posting in the topic for that specific plugin. This isn't a support topic.
  13. Offline

    Alkoforumm

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Hi
    can make someone a package and upload this in ci.bukkit.... so
  14. Offline

    Tofus

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Can someone please explain how plugging an exploitable hole causes the .jar file to explode in size by 400%? Apparently that 'hole' was big enough to waste code the size of 4 entire craftbukkit implementations. You guys sure you didn't get it the other way around and put a trojan back in it instead? :eek:

    I'm asking since 6+Mb of 'exploit-fix' code on a 1.5Mb app kinda makes my neck-hairs rise, while I'm sure there is also a reasonable explanation, right?

    EDIT: I know this question has been asked at least 2 times before in this thread; I'm not trying to hammer; I just expected to see a satisfactory answer already, but sadly a proper explanation has not yet been given. I think it's a very reasonable question deserving of an answer, especially given the security-concern with which this patch was presented.
  15. Offline

    EliteASH_11

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    I wonder why people think 14mb is so big?
  16. Offline

    lapzoo

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Code:
    2011-04-09 13:22:10 [SEVERE] Could not load 'plugins/craftbukkit-0.0.1-SNAPSHOT.jar' in folder 'plugins':
    java.io.FileNotFoundException: Jar does not contain plugin.yml
        at org.bukkit.plugin.java.JavaPluginLoader.loadPlugin(JavaPluginLoader.java:57)
        at org.bukkit.plugin.SimplePluginManager.loadPlugin(SimplePluginManager.java:158)
        at org.bukkit.plugin.SimplePluginManager.loadPlugins(SimplePluginManager.java:106)
        at org.bukkit.craftbukkit.CraftServer.loadPlugins(CraftServer.java:84)
        at net.minecraft.server.MinecraftServer.e(MinecraftServer.java:215)
        at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:202)
        at net.minecraft.server.MinecraftServer.d(MinecraftServer.java:142)
        at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:257)
        at net.minecraft.server.ThreadServerApplication.run(SourceFile:375)
    What means this? :eek:
  17. Offline

    Snow Leopard

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    The CraftBukkit Snapshot file should replace your current server file (the one your run to start your server) and should not be in the plugins directory.
  18. Offline

    Phealoon

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
  19. Offline

    lapzoo

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Lol I don't have it in my plugins folder! :)
  20. Offline

    Snow Leopard

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Hmm, that's weird then, in the error it says
    [SEVERE] Could not load 'plugins/craftbukkit-0.0.1-SNAPSHOT.jar' in folder 'plugins'
  21. Offline

    lapzoo

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    I can send you a screenshot it's NOT: in the plugin folder ;)
  22. Offline

    Evenprime

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    You could always just look into the jar file and check what is in it to find out.

    The new bukkit jar e.g. includes sql-lite (which has at least ~3 MB packed size) and other libraries that weren't in the previous versions. These will be needed later for Permissions and Persistence.
  23. Offline

    EvilSeph

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    You do. Remove it from your "plugins" folder. It's up to you to find the right one, on the right server though.
  24. Offline

    Smallie07

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    coming this next week., haha D:
  25. Offline

    Tofus

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Ok, thanks for the explanation.
  26. Offline

    Ancetras

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    How can I do to make the plugin I already had, working on the new craftbukkit?
  27. Offline

    SpaceManiac

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    git-Bukkit-0.0.0-646-gb61ef8c-b670jnks
    Looking at the wrong place.
  28. Offline

    SuperAlekZ

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Too many changes.. too many changes...
  29. Offline

    Netto Hikari

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    Ever since 602, CraftBukkit actually spams my console with "Can't keep up!" messages which I NEVER had before on my very powerful quad-core serever with 16 GB RAM and stuff like that.

    Even though it shows a lot of these messages, I still can hold a lot of players on my server. 30-50 players and no lag.
    But I really want these messages to go away soon.
  30. Offline

    heroanth2345

    dev.bukkit.org profile:
    CFUSERNAME
    My Plugins (CFCOUNT)
    Minecraft account:
    MCUSERNAME
    thx alot. You just made it clear for me thx
Thread Status:
Not open for further replies.

Share This Page