Builder win32-1.9 Build #33

Results:

Build successful

SourceStamp:

BuildSlave:

Reason:

The Scheduler scheduler named 'sched-1.9-dev' triggered this build

Steps and Logfiles:

1. git update ( 4 secs )
   1. stdio
2. bootstrap bootstrapped ( 5 secs )
   1. stdio
3. build compiled ( 29 secs )
   1. stdio
4. upload uploaded ( 2 secs )
   1. stdio
5. symstore symstore ( 0 secs )
   1. stdio

Build Properties:

Forced Build Properties:

Responsible Users:

1. Juice

   etojuiceohnoyoudont@yandex.ru

Timing:

All Changes:

:

1. Change #1740

   Category	None
   Changed by	Juice <etojuiceohnoyoudont@yandex.ru>
   Changed at	Wed 03 Jun 2020 15:18:22
   Repository	https://github.com/alliedmodders/amxmodx
   Project	alliedmodders/amxmodx
   Branch	1.9-dev
   Revision	bdeb2a133f61e29970409bddce9d925bbefb5a45

   Comments

   admincmd.sma exploits fix (#822)
   
   * [admincmd.sma] Fix typo in isCommandArgSafe
   
   '
   
   * [admincmd.sma] Update amx_cvar command handler
   
   - Fix exploiting of "mapchangecfgfile" cvar to execute potentially dangerous console commands
   - Add newline delimiter check and restrict for ****cfgfile cvars values
   
   * Restrict having ".." character sequence in amx_map command argument
   
   Fixes exploit on Windows servers that allows executing potentially dangerous console commands
   
   * Do not allow admins to change cvars with FCVAR_SPONLY flag when not in singleplayer via amx_cvar
   
   1. Make amx_cvar command obey FCVAR_SPONLY flag.
   2. Fix exploiting of amx_nextmap cvar value which is used in nextmap plugin.

   Changed files

   • plugins/admincmd.sma