Dylan
- DevDylan
- devdylan
- Europe/Stockholm
- Yes
- No
MC-79152
WEB-55![[Mojang] Nathan Adams](../../../data/assets/gravatar/dinnerbone.png){kind=small}
MCPE-16023
Serious Security vulnerablitiesregarding skullsSerious Security vulnerablities involving skulls
Hello, my name is Dylan Katz.I'm a sixteen year old developer, and I've discovered a critical security bug in the Minecraft client that can be exploited in multiple ways. The key to exploiting this vulnerability is the failure to validate custom textures on player skulls. Please note that this is an awesome feature and by all means should continue to exist, but validation should be applied to the image size. The lack of this validation allows two situations. First, it allows a server to force clients to send massive traffic to any given website, essentially turning the Minecraft client into a botnet member. There appears to be some caching of skull URLs, but this can be bypassed simply by adding a get parameter with a random value ending in ".jpg", For instance, "?test=" + Math.random() + ".jpg". This allows for hundreds or even thousands of requests to be sent by the client by spawning in hundreds or thousands of skull blocks.This brings us to the second method of potential exploitation of this bug. If enough skulls are sent with a large image, a client-side Blue Screen of Death can be reproduced reliably with the message "DRIVER_IRQL_NOT_LESS_OR_EQUAL (e22w7x64.sys)", though I've only tested this on windows 8 and windows 8.1. This bug is extremely dangerous to both the client and online services that may be targeted.
Windows 10 Pro, JRE build 1.8.0_51-b16
Client cannot connect to internal or external server
This may be a dupe, but I looked for a while and had trouble finding anything. Essentially, loading singleplayer worlds in the latest snapshot fails for me every time with the following error:
java.lang.IllegalStateException: failed to create a child event loop at io.netty.util.concurrent.MultithreadEventExecutorGroup.<init>(MultithreadEventExecutorGroup.java:68) at io.netty.channel.MultithreadEventLoopGroup.<init>(MultithreadEventLoopGroup.java:49) at io.netty.channel.nio.NioEventLoopGroup.<init>(NioEventLoopGroup.java:61) at io.netty.channel.nio.NioEventLoopGroup.<init>(NioEventLoopGroup.java:52) at ln$1.a(SourceFile:44) at ln$1.b(SourceFile:41) at nq.c(SourceFile:10) at ln.a(SourceFile:121) at axd.a(SourceFile:1925) at azw.i(SourceFile:172) at azw$a.a(SourceFile:224) at ayj.p(SourceFile:315) at azw.k(SourceFile:82) at azv.p(SourceFile:380) at axd.s(SourceFile:1476) at axd.at(SourceFile:874) at axd.a(SourceFile:323) at net.minecraft.client.main.Main.main(SourceFile:125) Caused by: io.netty.channel.ChannelException: failed to open a new selector at io.netty.channel.nio.NioEventLoop.openSelector(NioEventLoop.java:128) at io.netty.channel.nio.NioEventLoop.<init>(NioEventLoop.java:120) at io.netty.channel.nio.NioEventLoopGroup.newChild(NioEventLoopGroup.java:87) at io.netty.util.concurrent.MultithreadEventExecutorGroup.<init>(MultithreadEventExecutorGroup.java:64) ... 17 more Caused by: java.io.IOException: Unable to establish loopback connection at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:101) at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:68) at java.security.AccessController.doPrivileged(Native Method) at sun.nio.ch.PipeImpl.<init>(PipeImpl.java:170) at sun.nio.ch.SelectorProviderImpl.openPipe(SelectorProviderImpl.java:50) at java.nio.channels.Pipe.open(Pipe.java:155) at sun.nio.ch.WindowsSelectorImpl.<init>(WindowsSelectorImpl.java:127) at sun.nio.ch.WindowsSelectorProvider.openSelector(WindowsSelectorProvider.java:44) at io.netty.channel.nio.NioEventLoop.openSelector(NioEventLoop.java:126) ... 20 more Caused by: java.net.ConnectException: Connection refused: connect at sun.nio.ch.Net.connect0(Native Method) at sun.nio.ch.Net.connect(Net.java:457) at sun.nio.ch.Net.connect(Net.java:449) at sun.nio.ch.SocketChannelImpl.connect(SocketChannelImpl.java:647) at java.nio.channels.SocketChannel.open(SocketChannel.java:189) at sun.nio.ch.PipeImpl$Initializer$LoopbackConnector.run(PipeImpl.java:130) at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:83) ... 28 moreThis error occurs when attempting to join an external server:
java.lang.NullPointerException: group at io.netty.bootstrap.AbstractBootstrap.group(AbstractBootstrap.java:80) ~[netty-all-4.0.23.Final.jar:4.0.23.Final] at ek.a(SourceFile:264) ~[15w31c.jar:?] at aza$1.run(SourceFile:59) [15w31c.jar:?]I'm pretty sure this means that the client failed to create a child thread for netty, and therefore the internal server failed to start. Anyways, sorry if this is a duplicate, but I thought I'd report it as I didn't see any other reports related to this.
This may be a dupe, but I looked for a while and had trouble finding anything. Essentially, loading singleplayer worlds in the latest snapshot fails for me every time with the following error:
java.lang.IllegalStateException: failed to create a child event loop at io.netty.util.concurrent.MultithreadEventExecutorGroup.<init>(MultithreadEventExecutorGroup.java:68) at io.netty.channel.MultithreadEventLoopGroup.<init>(MultithreadEventLoopGroup.java:49) at io.netty.channel.nio.NioEventLoopGroup.<init>(NioEventLoopGroup.java:61) at io.netty.channel.nio.NioEventLoopGroup.<init>(NioEventLoopGroup.java:52) at ln$1.a(SourceFile:44) at ln$1.b(SourceFile:41) at nq.c(SourceFile:10) at ln.a(SourceFile:121) at axd.a(SourceFile:1925) at azw.i(SourceFile:172) at azw$a.a(SourceFile:224) at ayj.p(SourceFile:315) at azw.k(SourceFile:82) at azv.p(SourceFile:380) at axd.s(SourceFile:1476) at axd.at(SourceFile:874) at axd.a(SourceFile:323) at net.minecraft.client.main.Main.main(SourceFile:125) Caused by: io.netty.channel.ChannelException: failed to open a new selector at io.netty.channel.nio.NioEventLoop.openSelector(NioEventLoop.java:128) at io.netty.channel.nio.NioEventLoop.<init>(NioEventLoop.java:120) at io.netty.channel.nio.NioEventLoopGroup.newChild(NioEventLoopGroup.java:87) at io.netty.util.concurrent.MultithreadEventExecutorGroup.<init>(MultithreadEventExecutorGroup.java:64) ... 17 more Caused by: java.io.IOException: Unable to establish loopback connection at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:101) at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:68) at java.security.AccessController.doPrivileged(Native Method) at sun.nio.ch.PipeImpl.<init>(PipeImpl.java:170) at sun.nio.ch.SelectorProviderImpl.openPipe(SelectorProviderImpl.java:50) at java.nio.channels.Pipe.open(Pipe.java:155) at sun.nio.ch.WindowsSelectorImpl.<init>(WindowsSelectorImpl.java:127) at sun.nio.ch.WindowsSelectorProvider.openSelector(WindowsSelectorProvider.java:44) at io.netty.channel.nio.NioEventLoop.openSelector(NioEventLoop.java:126) ... 20 more Caused by: java.net.ConnectException: Connection refused: connect at sun.nio.ch.Net.connect0(Native Method) at sun.nio.ch.Net.connect(Net.java:457) at sun.nio.ch.Net.connect(Net.java:449) at sun.nio.ch.SocketChannelImpl.connect(SocketChannelImpl.java:647) at java.nio.channels.SocketChannel.open(SocketChannel.java:189) at sun.nio.ch.PipeImpl$Initializer$LoopbackConnector.run(PipeImpl.java:130) at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:83) ... 28 moreThis error occurs when attempting to join an external server:
java.lang.NullPointerException: group at io.netty.bootstrap.AbstractBootstrap.group(AbstractBootstrap.java:80) ~[netty-all-4.0.23.Final.jar:4.0.23.Final] at ek.a(SourceFile:264) ~[15w31c.jar:?] at aza$1.run(SourceFile:59) [15w31c.jar:?]I'm pretty sure this means that the client failed to create a child thread for netty, and therefore the internal server failed to start. Anyways, sorry if this is a duplicate, but I thought I'd report it as I didn't see any other reports related to this.
This may be a dupe, but I looked for a while and had trouble finding anything. Essentially, loading singleplayer worlds in the latest snapshot fails for me every time with the following error:
java.lang.IllegalStateException: failed to create a child event loop at io.netty.util.concurrent.MultithreadEventExecutorGroup.<init>(MultithreadEventExecutorGroup.java:68) at io.netty.channel.MultithreadEventLoopGroup.<init>(MultithreadEventLoopGroup.java:49) at io.netty.channel.nio.NioEventLoopGroup.<init>(NioEventLoopGroup.java:61) at io.netty.channel.nio.NioEventLoopGroup.<init>(NioEventLoopGroup.java:52) at ln$1.a(SourceFile:44) at ln$1.b(SourceFile:41) at nq.c(SourceFile:10) at ln.a(SourceFile:121) at axd.a(SourceFile:1925) at azw.i(SourceFile:172) at azw$a.a(SourceFile:224) at ayj.p(SourceFile:315) at azw.k(SourceFile:82) at azv.p(SourceFile:380) at axd.s(SourceFile:1476) at axd.at(SourceFile:874) at axd.a(SourceFile:323) at net.minecraft.client.main.Main.main(SourceFile:125) Caused by: io.netty.channel.ChannelException: failed to open a new selector at io.netty.channel.nio.NioEventLoop.openSelector(NioEventLoop.java:128) at io.netty.channel.nio.NioEventLoop.<init>(NioEventLoop.java:120) at io.netty.channel.nio.NioEventLoopGroup.newChild(NioEventLoopGroup.java:87) at io.netty.util.concurrent.MultithreadEventExecutorGroup.<init>(MultithreadEventExecutorGroup.java:64) ... 17 more Caused by: java.io.IOException: Unable to establish loopback connection at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:101) at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:68) at java.security.AccessController.doPrivileged(Native Method) at sun.nio.ch.PipeImpl.<init>(PipeImpl.java:170) at sun.nio.ch.SelectorProviderImpl.openPipe(SelectorProviderImpl.java:50) at java.nio.channels.Pipe.open(Pipe.java:155) at sun.nio.ch.WindowsSelectorImpl.<init>(WindowsSelectorImpl.java:127) at sun.nio.ch.WindowsSelectorProvider.openSelector(WindowsSelectorProvider.java:44) at io.netty.channel.nio.NioEventLoop.openSelector(NioEventLoop.java:126) ... 20 more Caused by: java.net.ConnectException: Connection refused: connect at sun.nio.ch.Net.connect0(Native Method) at sun.nio.ch.Net.connect(Net.java:457) at sun.nio.ch.Net.connect(Net.java:449) at sun.nio.ch.SocketChannelImpl.connect(SocketChannelImpl.java:647) at java.nio.channels.SocketChannel.open(SocketChannel.java:189) at sun.nio.ch.PipeImpl$Initializer$LoopbackConnector.run(PipeImpl.java:130) at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:83) ... 28 moreI'm pretty sure this means that the client failed to create a child thread for netty, and therefore the internal server failed to start. Anyways, sorry if this is a duplicate, but I thought I'd report it as I didn't see any other reports related to this. Also, this error occurs when attempting to join an external server:
java.lang.NullPointerException: group at io.netty.bootstrap.AbstractBootstrap.group(AbstractBootstrap.java:80) ~[netty-all-4.0.23.Final.jar:4.0.23.Final] at ek.a(SourceFile:264) ~[15w31c.jar:?] at aza$1.run(SourceFile:59) [15w31c.jar:?]
This may be a dupe, but I looked for a while and had trouble finding anything. Essentially, loading singleplayer worlds in the latest snapshot fails for me every time with the following error:
java.lang.IllegalStateException: failed to create a child event loop at io.netty.util.concurrent.MultithreadEventExecutorGroup.<init>(MultithreadEventExecutorGroup.java:68) at io.netty.channel.MultithreadEventLoopGroup.<init>(MultithreadEventLoopGroup.java:49) at io.netty.channel.nio.NioEventLoopGroup.<init>(NioEventLoopGroup.java:61) at io.netty.channel.nio.NioEventLoopGroup.<init>(NioEventLoopGroup.java:52) at ln$1.a(SourceFile:44) at ln$1.b(SourceFile:41) at nq.c(SourceFile:10) at ln.a(SourceFile:121) at axd.a(SourceFile:1925) at azw.i(SourceFile:172) at azw$a.a(SourceFile:224) at ayj.p(SourceFile:315) at azw.k(SourceFile:82) at azv.p(SourceFile:380) at axd.s(SourceFile:1476) at axd.at(SourceFile:874) at axd.a(SourceFile:323) at net.minecraft.client.main.Main.main(SourceFile:125) Caused by: io.netty.channel.ChannelException: failed to open a new selector at io.netty.channel.nio.NioEventLoop.openSelector(NioEventLoop.java:128) at io.netty.channel.nio.NioEventLoop.<init>(NioEventLoop.java:120) at io.netty.channel.nio.NioEventLoopGroup.newChild(NioEventLoopGroup.java:87) at io.netty.util.concurrent.MultithreadEventExecutorGroup.<init>(MultithreadEventExecutorGroup.java:64) ... 17 more Caused by: java.io.IOException: Unable to establish loopback connection at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:101) at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:68) at java.security.AccessController.doPrivileged(Native Method) at sun.nio.ch.PipeImpl.<init>(PipeImpl.java:170) at sun.nio.ch.SelectorProviderImpl.openPipe(SelectorProviderImpl.java:50) at java.nio.channels.Pipe.open(Pipe.java:155) at sun.nio.ch.WindowsSelectorImpl.<init>(WindowsSelectorImpl.java:127) at sun.nio.ch.WindowsSelectorProvider.openSelector(WindowsSelectorProvider.java:44) at io.netty.channel.nio.NioEventLoop.openSelector(NioEventLoop.java:126) ... 20 more Caused by: java.net.ConnectException: Connection refused: connect at sun.nio.ch.Net.connect0(Native Method) at sun.nio.ch.Net.connect(Net.java:457) at sun.nio.ch.Net.connect(Net.java:449) at sun.nio.ch.SocketChannelImpl.connect(SocketChannelImpl.java:647) at java.nio.channels.SocketChannel.open(SocketChannel.java:189) at sun.nio.ch.PipeImpl$Initializer$LoopbackConnector.run(PipeImpl.java:130) at sun.nio.ch.PipeImpl$Initializer.run(PipeImpl.java:83) ... 28 moreI'm pretty sure this means that the client failed to create a child thread for netty
, and therefore the internal server failed to start. Anyways, sorry if this is a duplicate, but I thought I'd report it as I didn't see any other reports related to this. Also, this error occurs when attempting to join an external server:java.lang.NullPointerException: group at io.netty.bootstrap.AbstractBootstrap.group(AbstractBootstrap.java:80) ~[netty-all-4.0.23.Final.jar:4.0.23.Final] at ek.a(SourceFile:264) ~[15w31c.jar:?] at aza$1.run(SourceFile:59) [15w31c.jar:?]
Pretty straightforward, the unicode character \u218e can be entered in chat, but is not rendered by the client as a box character, like \u202e is. This can likely be reproduced with other unicode characters. My steps to reproduce this:
1. Copy character to clipboard. My method was using Google Chrome's console with the command "copy('\u218e')".
2. Paste in chat
Unicode (\u+218e) can be entered but does not render in chat.
Please upload your screenshots to an image sharing site such as imgur or attach them to this report. URIs with the file:/// extension are only visible to you and only exist on your machine.
I would imagine this is intentional, as fire and other forms of knockback do push you upwards. Though it can be exploited to jump higher, the entire functionality of knockback is to knock you back... I think this is just a side effect of an intended feature.
This would be more compatible with worlds containing existing skulls if textures were fetched server side and sent as base64. There are so many servers and worlds that already use this technique. I think this is going to break a lot of things.
Confirmed for 1.8.4, appears to be effective whenever the player is riding any entity, including armor stands and all mobs that weren't mentioned here. It also appears to invert the yaw aspect of the head as well as the pitch.
Confirmed for 1.8.4.
Confirmed for 1.8.6.
Has it been uploaded?
Actually this is a launcher bug, sorry.
Appears to have been fixed as of right now.
Dinnerbone, It works now, but it appeared as:
Incomplete, please fill out as much information as you can.
Can you please attach a crash log?
Related to/potential dupe of
MC-81266Confirmed for 1.8.7. The player's hand also appears to have a similar problem if spectating is invoked via a camera packet versus actual spectate mode.
Difficult for me to understand exactly what you're saying, but it sounds like a technical support issue.
can't reproduce
Being kicked by an operator is simply a side effect of the kick mechanism. There is no "operator" per say, but the server shutting down kicks all players as to ensure their client disconnects gracefully. Otherwise you'd see a nice java error message. I suppose a better kick message could be made... Did you save the world before booting down the server?
What exactly were you trying to do with the pickaxe? Whatever's in the other slot is obscured by the item description.
I believe this signifies that you don't have enough XP levels to repair this item.
Brandon Boyd, that would be an enhancement, not a bug.
If you'd like more information on the anvil work penalty system, you can see some documentation here: http://minecraft.gamepedia.com/Anvil_mechanics#Prior_Work_penalty
duplicate of
MC-23952So... invalid?
This is due to the fact that spiders have a transparent layer, the eyes, and their entire model glows red on being hit. This can also be seen in endermen, as when you punch them their mouth/head glows in transparent regions. Honestly, those aspects of the spider are not meant to be invisible, but I believe this bug is due to the external layer being rendered when hit, versus the interior layer. I doubt this could be easily fixed without changing a lot of code. Regardless, confirmed for 1.8.7.
Brandon Boyd this is an enhancement, not a bug. Regardless of what it "should" look like, this is what it is intended to look like.
Minecraft User This is a public bug tracker. You can view the Mojang support center here, or email their support here if you wish to speak directly to a Mojang representative.
Clearly you don't understand the concept of a bug tracker. It is not a "community help chat". All I am attempting to do is assist mojang in getting to the root of the problem before they view the bug. This is for maximum efficiency as tens of thousands of bugs have been reported and need to be dealt with. Your claims that I have no idea what I'm talking about stem from the "save-all" command, which will force save a world for a typical minecraft server, to my knowledge this applies to realms equally. You can access it in-game by typing
"/save-all". I must say it's quite impressive that you've managed to insult me, this community, and Mojang, all in just a few sentences. I'm doing my best to help you, but I'll let the mods/mojang take it from here, as you clearly don't want your problem solved as quickly as possible.
I wish you luck!
This is intended. There's nothing they can do about performance intensive tasks. It's not really a bug.
Confirmed in 1.8.7.
Likely caused by
MC-1207Not a web issue?
Quiver was removed and shield was specified as not available in this update.
Confirmed.
Confirmed.
Appears to be inverted faces. Possibly a z-axis error?
Confirmed.
Dupe of MC-82263
Please file new bugs in new reports. However, user-f2760 is correct, shields were not meant to be in this snapshot, and the spectral error bug has been reported.
Can't reproduce.
Hostile mobs attack when force spawned in peaceful. However, shulkers probably shouldn't spawn in peaceful.
I think this is intentional, as the dragon can be given the effect via command and the arrows do damage. Boss mobs often have exceptions like this.
Dupe of
MC-83009?Not a web based issue.
I believe dragon eggs were removed in this snapshot.
user-f2760 Ah, sorry mods, totally missed that.
Dupe of
MC-83000I can reproduce this.
Likely intentional.
Intentional
I can reproduce this.
I can't seem to reproduce this, it sounds normal to me.
I can't reproduce this. Squids take 3-4 shots with spectral arrows and 1-2 shots with damage arrows.
Please report these as seperate bugs for the purpose of clarity.
[~Xander] bugs with more info or higher quality are chosen, not bugs reported first.
This bug has already been reported.
likely because shulkers are entities and the onground check fails.
Appears to be a debug message, not really a bug.
Dupe of
MC-84592, also not a web bug.You duplicated your own bug,
MC-84597Please provide a screenshot or some more details as to what the expected behavior is and what's going wrong.
Also note that I have disabled my antiviruses and this issue still occurs.
Reboot appeared to have fixed this. I should've tried that before reporting it. Sorry for that!
Confirmed.
Also occurs on the client's internal server.
This is an enhancement, not a bug.
There's also users with names such as "G".
I'd imagine that's not a huge concern for the snapshots.
Kumasasa Updated, not sure how that makes this invalid...
deleted I was simply pointing out that old usernames, such as "G", were not removed or filtered after creation. "G" has too few characters to be a valid username with the modern system.
[Mod] CubeTheThird I'm unaware of any insane security issues, but Authlib is definitely made specifically by Mojang, as it contains quite a bit of code specific to Minecraft and scrolls.
Also throws errors for missing resources:
https://d3bgui9r1m2641.cloudfront.net/wp-content/themes/twentyeleven/style.css.gzip
https://d3bgui9r1m2641.cloudfront.net/wp-content/uploads/2012/12/cropped-Pi-Edition-header1.jpg
and
https://d3bgui9r1m2641.cloudfront.net/wp-content/themes/twentyeleven/style.css.gzip
Did not mean to create this, sorry.
From http://wiki.vg/Mojang_API
I believe you are exceeding that limit, and thus this is intended behavior.
Still an issue. Should be really quick and easy to fix.
Looks resolved to me, try clearing your browser's cache.