Jump to content

Question

Posted
If you buy any item in any multisell shop, and the amount of required adena is higher than the adena limit of interlude, you get the items, and it cost you... not 0 adena, but -1444684684 adena, you get the items, and you gain adena.

 

Example:

 

You sell 1 potion for 500kk adena, and you have 1 adena in your inventory.

Try buy 1 or 2 or 3 or 4 potions, and you get the message "you don't have enough adena".

Now try buy 5...

You get 5 potions, and maybe 2kkk adena (from 1 adena).

 

There is any chance of support from someone to fix this?

 

PD: Tested and work on aCis 360

Recommended Posts

  • 0
Posted

Tested on 3 RU servers, don't work on any of them

They are gods, they know how to catch integer overflow! :D

  • 0
Posted

Da fak. How it come that you create English topic in GR section? Ffs.

 

Imma tell you one thing, it's current on all l2j packs. Also, gz for the topic. Now everyone will know about that issue, but from another side, shitty servers will go down :D

 

I posted it here because i sent a PM to Tryskell two weeks ago and he never answer me, then i sent you another PM and you just told me "a very nasty bug", but as you enjoy trolling noobs like me, i don't know if you was saying it seriously or just kidding.

  • 0
Posted

I posted it here because i sent a PM to Tryskell two weeks ago and he never answer me, then i sent you another PM and you just told me "a very nasty bug", but as you enjoy trolling noobs like me, i don't know if you was saying it seriously or just kidding.

He is just kidding always

  • 0
Posted

Meeee, nooo wai. I'm always serious  :you serious?:

 

 

:happyforever:  :you serious?:  :happyforever:  :you serious?:  :dat:  :happyforever:

  • 0
Posted

 

If you buy any item in any multisell shop, and the amount of required adena is higher than the adena limit of interlude, you get the items, and it cost you... not 0 adena, but -1444684684 adena, you get the items, and you gain adena.
 
Example:
 
You sell 1 potion for 500kk adena, and you have 1 adena in your inventory.
Try buy 1 or 2 or 3 or 4 potions, and you get the message "you don't have enough adena".
Now try buy 5...
You get 5 potions, and maybe 2kkk adena (from 1 adena).
 
There is any chance of support from someone to fix this?
 
PD: Tested and work on aCis 360

 

 

The fix is straight forward, cast the multiplication of count and price into an long and compare it with Integer.MAX_VALUE, I personally prefer masking it with 0xFF

  • 0
Posted

this one is even better

It's exactly what you suggest

/**
 * Returns the product of the arguments,
 * throwing an exception if the result overflows an {@code int}.
 *
 * @param x the first value
 * @param y the second value
 * @return the result
 * @throws ArithmeticException if the result overflows an int
 * @since 1.8
 */
public static int multiplyExact(int x, int y) {
    long r = (long)x * (long)y;
    if ((int)r != r) {
        throw new ArithmeticException("integer overflow");
    }
    return (int)r;
}
  • 0
Posted

 

It's exactly what you suggest

/**
 * Returns the product of the arguments,
 * throwing an exception if the result overflows an {@code int}.
 *
 * @param x the first value
 * @param y the second value
 * @return the result
 * @throws ArithmeticException if the result overflows an int
 * @since 1.8
 */
public static int multiplyExact(int x, int y) {
    long r = (long)x * (long)y;
    if ((int)r != r) {
        throw new ArithmeticException("integer overflow");
    }
    return (int)r;
}

 

ofc it is, I am veteran in OOP 

  • 0
Posted

Is this bug because of the overflow only, or there is something more? Because the overflow is easy to catch...

  • 0
Posted (edited)

Fix is simple... just throw InvalidArgumentException when reducing inventory item with negative count, after that just look from where all the errors come xD Problem isnt only multisell, also bug works everywhere, except russian packs, they have this

private static long mulAndCheck(long a, long b, String msg, boolean limit) {
		long ret;
		if (a > b)
			// use symmetry to reduce boundary cases
			ret = mulAndCheck(b, a, msg, limit);
		else if (a < 0) {
			if (b < 0) {
				// check for positive overflow with negative a, negative b
				if (a >= Long.MAX_VALUE / b)
					ret = a * b;
				else if(limit)
					ret = Long.MAX_VALUE;
				else
					throw new ArithmeticException(msg);
			} else if (b > 0) {
				// check for negative overflow with negative a, positive b
				if (Long.MIN_VALUE / b <= a)
					ret = a * b;
				else if(limit)
					ret = Long.MIN_VALUE;
				else
					throw new ArithmeticException(msg);
			}
			else
				ret = 0;
		} else if (a > 0) {
			// check for positive overflow with positive a, positive b
			if (a <= Long.MAX_VALUE / b)
				ret = a * b;
			else if(limit)
				ret = Long.MAX_VALUE;
			else
				throw new ArithmeticException(msg);
		}
		else
			ret = 0;
		return ret;
	}
:D:D:D:D:D:D:D:D

Its pure govnokod though. http://govnokod.ru/java

Edited by Nik
Guest
This topic is now closed to further replies.



  • Posts

    • GoldRush launches tomorrow! July 18 16:00 GMT+3 Europe / International Register your account in the website, connect wallet and be ready to dominate!
    • 🏰 L2EXALTA LEGACY — Interlude x45 📅 Grand Opening: 31/07/2026 — 21:30 (GMT+3) 🌐 Website: https://l2exalta.org/ 💬 Discord: https://discord.gg/zNTCZD4AcT 📌 Wiki: https://l2exalta.org/en/wiki.html#progression   ⚙️ MAIN INFO Chronicle : Interlude Rates : x45 Adena : x50 Spoil : x1 Drop : x5 Safe Enchant : +3 Files : L2OFF   💰 ECONOMY EX Coin : dynamic market currency, mined from monsters, Raid Bosses and Grand Bosses value fluctuates over time Exalta Vouchers : premium currency used for store, donations and EX Coin exchange Exchange : convert EX Coin into Exalta Vouchers Investment options : choose safer or riskier market strategies with EX Coin   ⚔️ PROGRESSION & GEAR Exalta Armors : signature top-tier gear line Forge System : upgrade weapons, armor and jewels with risk/reward mechanics Raid Boss progression tied to materials and prestige   🤖 AUTOFARM Access : Auto Hunting button, bottom-right UI Duration : controlled via tickets or in-game currency Route Mode : record custom farm routes Support Mode : healer/support builds auto-follow, heal and assist party Smart targeting logic with class-specific behavior (mage/archer/melee/support) Captcha designed not to interrupt legitimate AutoFarm sessions   🧪 BUFFER Exalta Buffer NPC/interface Scheme Buffer : save multiple buff loadouts Class presets for mage, fighter, support, PvP   🛠️ SMART GADGETS / QOL Autoloot filter Drop value tracker Boss timer tools Farm stats tracker Auto-consume system In-game server assistant   🗺️ DUNGEON FINDER / PVE Party matching with roles (Tank / Healer / DPS) Ready-check before teleport Monastery of Silence custom PvE zone Party-based reward structure   🎟️ DAILY PROGRESS / EXALTA PASS Daily and weekly tasks (farm, PvP, boss, check-in) Premium Pass track with extra rewards Monastery Daily Quest Reward boards for claiming progress   🏠 HOUSING & EXPEDITIONS Player residences with service NPCs Exalta Spirit Expeditions to themed territories Rewards vary by territory Owner-only access   🏆 PVP / TOURNAMENT Scheduled Tournament system Ranking points from wins/participation Spectator Mode for watching live matches PvP Statues for top-ranked players Anti-feed protections   🛡️ CLAN CONTENT Clan Civil War battlefield event Clan Dungeon Raid content DPS Meter for contribution tracking Support Credit system Classic siege/clan politics preserved   🏪 AUCTION / SHOPS Auction House with seller fee Black Market Dealer (limited-time special offers) Custom shops and multisells Confirmation prompts on purchases/sales   💳 DONATIONS / VIP Donation rewards linked to Exalta Vouchers VIP tiers with comfort/cosmetic bonuses Premium store Gift/promo codes for events   🎥 STREAMER / COMMUNITY Streamer Panel with visible stream links Viewer rewards system Streamer Points for cosmetics/vouchers In-game voice chat (global/party/clan/alliance/command)   🔒 FAIR PLAY Strong Anti-Bot protection Reward protection tied to valid client state Captcha on suspicious activity Staff investigation tools No bots, packet tools or modified clients allowed   👑 GRANDBOSS SPAWNS Orfen : 1 day + 1h random Core : 1 day + 1h random Queen Ant : 1 day 6h + 1h random Zaken : 2 days 12h + 1h random Baium : 5 days + 1h random Antharas : 8 days + 1h random Valakas : 11 days + 1h random   🏅 OLYMPIAD Runs Thursday, Friday, Saturday Heroes change monthly Balanced and fair matchmaking
    • yup basically another one just in case https://drive.google.com/file/d/1UtccbD9e50x3WEnQBab2PTZnBHwpcGYM/view?usp=sharing LineageWarrior.FMagic (CollideActors = True; > False) LineageWarrior.FOrc (CollideActors = True; > False) LineageWarrior.FShaman (CollideActors = True; > False) LineageWarrior.MDarkElf (CollideActors = True; > False) LineageWarrior.MDwarf (CollideActors = True; > False) LineageWarrior.MElf (CollideActors = True; > False) LineageWarrior.MFighter (CollideActors = True; > False) LineageWarrior.MMagic (CollideActors = True; > False) LineageWarrior.MOrc (CollideActors = True; > False) LineageWarrior.MShaman (CollideActors = True; > False) LineageWarrior.FDwarf (CollideActors = True; > False) LineageWarrior.FElf (CollideActors = True; > False) LineageWarrior.FFighter (CollideActors = True; > False)
    • @l2naylondev Requiring a player to log in just for the sake of logging  seems exploitable. Someone could log in only to claim the reward and immediately leave, or repeatedly change their ip. So i guess  are there are additional protections in place ? such as locking the reward by account, character , and ip. It would also be useful to add a playtime requirement. For example, after logging in, the player would need to remain active for at least x playtime  before getting the reward or other parameters configurable by the xml.  I suggest improving the system before selling it. 
  • Topics

×
×
  • Create New...

Important Information

This community uses essential cookies to function properly. Non-essential cookies and third-party services are used only with your consent. Read our Privacy Policy and We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue..