What is SVC-997?
|
|
Winter Ventura
Eclectic Randomness
Join date: 18 Jul 2006
Posts: 2,579
|
02-01-2008 03:49
in: http://blog.secondlife.com/2008/02/01/fix-may-cause-problems-for-scripts-relying-on-long-object-names-and-descriptions/Matthew Linden says that the Rolling Restarts are deploying a fix for it.. And that the "Fix™" *MAY* be damaging some inworld content... But the "Public Issue Tracker" says this, when I try and look up SVC-997: From: someone PERMISSION VIOLATION
ERROR
It seems that you have tried to perform an operation which you are not permitted to perform.
If you think this message is wrong, please consult your administrators about getting the necessary permissions. And yes, I'm logged in. Can anyone shed some light on whatever it was that needed fixing so bad that breaking other stuff qualified as a "Fix™?"
_____________________
 ● Inworld Store: http://slurl.eclectic-randomness.com ● Website: http://www.eclectic-randomness.com ● Twitter: @WinterVentura
|
|
Viktoria Dovgal
…
Join date: 29 Jul 2007
Posts: 3,593
|
02-01-2008 04:18
It is probably hidden because of security issues. For a copy of the bug report see https://lists.secondlife.com/pipermail/jira-notify/2007-November/000039.html |
|
Destiny Niles
Registered User
Join date: 23 Aug 2006
Posts: 949
|
02-01-2008 09:41
Seems like they 'fixed' something that really didn't need to be fix, but it does make for a more stable sl environment since mouse overing an item can cause unexpected results if the scripter did take that into consideration and also discourages bad scripts that just waste cpu looking at the length of the name or description to see if anyone mouse overed a prim.
|
|
Winter Ventura
Eclectic Randomness
Join date: 18 Jul 2006
Posts: 2,579
|
02-01-2008 09:47
Well, reading that description, I can think of one particularly nasty weapon that uses this exploit to overload the memory of many collission detection scripts. If this has been patched, that's going to make certain less-than-reputable weapon developers scramble for a new gimmick.
It's definitely worth a few broken doors, if this patches the exploit in the way it sounds like it does. (definitely worth le loss of this mouseover hack too.
_____________________
● Inworld Store: http://slurl.eclectic-randomness.com ● Website: http://www.eclectic-randomness.com ● Twitter: @WinterVentura
|
|
Alyx Sands
Mental Mentor Linguist
Join date: 17 Feb 2007
Posts: 2,432
|
02-01-2008 10:48
Actually I think it was hidden *because* people should not get an example script for that exploit...so I don't think it's a good idea to post that reference here, you never know how many daft script kiddies might want to misuse it! 
_____________________
~~I'm a linguist. RL sucks, but right now it's decided to be a little less nasty to me - you can still be nice to me if you want! ~~
->Potestatem obscuri lateris nescitis.<-
|
|
Void Singer
Int vSelf = Sing(void);
Join date: 24 Sep 2005
Posts: 6,973
|
02-01-2008 11:47
that does explain some of the specific breaks being seen, by scripts that use a variation of that for long term storagte of info.
_____________________
| | . "Cat-Like Typing Detected" | . This post may contain errors in logic, spelling, and | . grammar known to the SL populace to cause confusion | | - Please Use PHP tags when posting scripts/code, Thanks. | - Can't See PHP or URL Tags Correctly? Check Out This Link... | - 
|
|
Winter Ventura
Eclectic Randomness
Join date: 18 Jul 2006
Posts: 2,579
|
02-01-2008 12:23
As the post says.. there were good uses for this exploit, but the good was outweighed by the nastiness of the bad.
It does expose a real flaw in LSL... the lack of the ability to "store" data in an efficient manner. I know a lot of people have resorted to some interesting tricks to solve this.. some use "memory" scripts that basically live in the prim with a main script, whose entire function is just to remember and give back various pieces of data on demand. I've also seen a number of people using php, storing the data pieces in outworld webservers and SQL databases.
Unfortunately, yes, this fix is breaking stuff. But in a rare departure for me... I see this as prefferable to a bullet that can crash the scripts in every attachment you're wearing. (in some cases forcing you to re-buy some of the items)
_____________________
● Inworld Store: http://slurl.eclectic-randomness.com ● Website: http://www.eclectic-randomness.com ● Twitter: @WinterVentura
|
|
Darien Caldwell
Registered User
Join date: 12 Oct 2006
Posts: 3,127
|
02-01-2008 14:36
Yes, people were using super long object names to screw up sensor scripts and the like. Pretty lame stuff. This was discussed in length in the scripting forums, so it's no secret. Good it's fixed, bad it breaks some things in the process. But such is life.
|
|
Nika Talaj
now you see her ...
Join date: 2 Jan 2007
Posts: 5,449
|
02-01-2008 14:49
Vote for new feature https://jira.secondlife.com/browse/SVC-1406 for an alternative form of persistent data storage outside of the script. .
_____________________
.  To contact forum folks, join the inworld group "The Forum Cartel". New residents with questions about SL more than welcome! We has parties! To contact forum scripters, join the inworld group "Scriptoratti" (thanks Void!). New scripter questions welcome!
|
|
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
|
02-01-2008 15:54
In connection with bugs one sometimes reads something along the lines of "string buffer overruns allowing execution of arbitrary code".
This sounds like it might have involved some string buffer overruns. Somewhere.
_____________________
-
So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.
I can be found on the web by searching for "SuezanneC Baskerville", or go to
http://www.google.com/profiles/suezanne
-
http://lindenlab.tribe.net/ created on 11/19/03.
Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard,
Robin, and Ryan
-
|
|
Alyx Sands
Mental Mentor Linguist
Join date: 17 Feb 2007
Posts: 2,432
|
02-01-2008 16:05
QTD! Can't hurt to quote you to make people really vote!
_____________________
~~I'm a linguist. RL sucks, but right now it's decided to be a little less nasty to me - you can still be nice to me if you want! ~~
->Potestatem obscuri lateris nescitis.<-
|