open.mp icon indicating copy to clipboard operation
open.mp copied to clipboard

Non-streamed trailer can be spoofed

Open NexiusTailer opened this issue 1 year ago • 0 comments

https://github.com/openmultiplayer/open.mp/blob/14c7971d5a53927acfea4eab060b32a4c126f858/Server/Components/Vehicles/vehicle.cpp#L232-L237

This is from driver sync where the player can send valid, but non-streamed trailerid for him and it will be passed without checks. The solution is probably to check if trailer is streamed for this player at the moment.

NexiusTailer avatar Sep 18 '24 09:09 NexiusTailer