Skip to content

Fix push sync vehicle syncer hijack#4887

Open
Zephkek wants to merge 1 commit intomultitheftauto:masterfrom
Zephkek:fix-pushsync-syncer-hijack
Open

Fix push sync vehicle syncer hijack#4887
Zephkek wants to merge 1 commit intomultitheftauto:masterfrom
Zephkek:fix-pushsync-syncer-hijack

Conversation

@Zephkek
Copy link
Copy Markdown
Contributor

@Zephkek Zephkek commented May 4, 2026

Summary

Prevent vehicle push sync from replacing an existing unoccupied vehicle syncer.

Motivation

Pushsync accepted a nearby client's vehicle ID and could call OverrideSyncer even when another player already owned sync. This let forged pushsync packets hijack vehicle sync authority.

Test plan

  • Review the pushsync path to confirm it now only fills missing syncers.

Checklist

  • Your code should follow the coding guidelines.
  • Smaller pull requests are easier to review. If your pull request is beefy, your pull request should be reviewable commit-by-commit.

@Zephkek Zephkek force-pushed the fix-pushsync-syncer-hijack branch from 7b1c34a to 45d6c5e Compare May 4, 2026 11:46
Copy link
Copy Markdown
Member

@Lpsd Lpsd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Very nice, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants