Bug 74: (zippyzee) Critical Item Issue

[BugTracker]

Bug ID       : 74 - Critical Item Issue 
Bug Date     : 2015/01/04 07:34:59
Assigned To  : zippyzee
Priority     : Immediate

Category     : VGClient
Sub-Category : Other
Severity     : Severe (e.g. Exploitable)
Reproducible : Only seen once

Details:
[~9:25PM EST 1/4/15] Equipped added item / stuck swimming

I added item # 799123 (Flawless Cavalier's Belt of Renewal) to my inventory and equipped it by right clicking on the item in my bags. I then right clicked the belt on my character sheet to take it off (to see the difference in appearance - if there was one). I was then instantly ported under the ground, in the water in Khal, swimming. I no longer can control my character. I can .rift to any zone and it will put me under the world in the water, swimming in a forward motion. Closing the game and reopening it, does not fix this issue. I still have no control over my chracter (still moving in forward swimming motion). Also, my character no longer has his correct name above his head (should be "Cyrcle"). It is now just a square box.

Notes from 2nd bug reported when Cyrcle could not get in-game any longer:
[quote="Cyrcle"]~9:25PM EST on 01/14/15 I am adding this via Bug Tracker manually, because I do not see my /bug report from in-game and would like to remember all the details. I added item # 799123 (Flawless Cavalier's Belt of Renewal) to my inventory via .add item command. I right clicked on it to equip. Once equipped, I decided to un-equip it by right clicking it on my character sheet (to see if there was an armor appearance difference). Upon doing so, I was teleported under the world (in Khal) into the water where I was put in a forward swimming motion. I no longer had control of my character. I tried a .rift 1. It worked. However, I was teleported to a different area of Isle of Dawn, and again in the water with no control of my character (still swimming in a forward motion). I closed my game and logged back in. Same issue. I have no control of my character and still when rifting and teleported under the world in a forward swimming motion. I also noticed my character name above my head was no longer my own (should have been Cyrcle). It was now just a single square character. 30 minutes later, it is still an issue with said character. Creating a new character does not replicate this issue. [/quote]

Originated From World: New Telon (1)
Chunk                : Khal (85)
Location             : 70723 6 1386

[Cyrcle]

It seems the issue is actually item #800730 (Flawless Cavalier's Jagged Boots [Qalian Style]). Equipping these teleports you to (approx) -2, -2, -2 in Khal and your character becomes unresponsive. Images are below. Notice my name disappears above my head as well. You must unequip the item and .rift to a new or current zone to fix this.

I am also noticing that equipping items are now teleporting me to -2, -2, -2 in Khal.

[Cyrcle]

Having any items equipped did this upon log in, even though I logged out elsewhere.

It is fixed by deleting all equipment.

Items I was using:
800202
801786
803366
802819
801231
799123
800730

1401175
1434446
1428374

Edit: Seems to be an issue with any "crafted" items? If I equip items 1401175, 1434446, 1428374 I am fine. Once I equip one of the crafted items (non-bolded), I glitch up with varying issues.

[John Adams]

Here's that item from our DB, in case it's a data thing:

Code: Select all

INSERT INTO `item` (`id`, `item_id`, `category`, `unknown1`, `name`, `description`, `made_by`, `unknown2`, `num_in_stack`, `current_equip_slot`, `default_slot`, `required_race`, `unknown4`, `class_bitmask`, `icon_id`, `num_slots`, `bag_id`, `current_slot`, `modifier_count`, `unknown7`, `unknown8`, `slot_bitmask`, `slot_bitmask2`, `required_flags`, `required_flags2`, `required_flags3`, `required_flags4`, `where_found_text`, `type_text`, `size_text`, `bag_restriction`, `type2_text`, `type3_text`, `harvest_type_text`, `current_stack`, `max_stack`, `num_effects`, `effect_name`, `effect_1`, `effect_2`, `percent_chance`, `effect_name2`, `effect2_1`, `effect2_2`, `percent_chance2`, `effect_name3`, `effect3_1`, `effect3_2`, `percent_chance3`, `unknown28`, `num_ability`, `activated_ability`, `activated_ability_text`, `activated_ability_text2`, `unknown33`, `unknown34`, `unknown35`, `unknown36`, `unknown37`, `unknown38`, `num_equipped_effects`, `equipped_effect_name`, `equipped_effect_desc`, `equipped_effect_desc2`, `equipped_effect_name2`, `equipped_effect2_desc`, `equipped_effect2_desc2`, `equipped_effect_name3`, `equipped_effect3_desc`, `equipped_effect3_desc2`, `bonus_text`, `unknown41`, `unique_id`, `unknown43`, `unknown44`, `item_type`, `item_level`, `required_level`, `min_damage`, `damage_variable`, `max_damage`, `harvesting_multiplier`, `dps`, `weapon_speed`, `weapon_ac`, `statistic_id`, `armor_class`, `unknown54`, `armor_type`, `ranged_type`, `min_range`, `max_range`, `quality`, `unknown57`, `unknown58`, `icon_usable`, `req_skill`, `req_skill_value`, `unknown63`, `unknown64`, `rarity`, `graft_type`, `unknown67`, `item_flag`, `unbindable`, `unknown70`, `durability`, `unknown71`, `attachment_index`, `type`, `attachment_slot_count`, `unknown74`, `unknown74a`, `unknown74b`, `sell_price`, `unknown76`, `unlocked`, `account_bound`, `statements_unlocked`, `statements_unlocked2`, `statements_unlocked3`, `gold_membership`) VALUES('5438','800730','Server','0','Flawless Cavalier\'s Jagged Boots','Qalian Style\nCrafting: Journeyman Outfitter','','','1','93','26','7862268','0','410550324','20013','0','4294967295','93','4','0','0','67108864','0','','','','','','','Small item of average shape.','','','','','0','0','0','','','','4294967295','','','','4294967295','','','','4294967295','4294967295','0','','','','','','','','','','1','Idara\'s Presence','','+10 Incoming Heals\r\n+1% Heal Effectiveness\r\n+20 Arcane Spell Damage\r\n+20 Spiritual Spell Damage\r\n+40 Energy\r\n+20 Arcane Absorption\r\n+20 Spiritual Absorption\r\nIncrease Arcane Damage Shield by 5\r\nThis effect stacks.','','','','','','','','','316','3751','4294967295','4','53','48','0','0','0','0','32.26','0','4294967295','4294967295','151','151','0','255','0','0','5','1','0','1','4294967295','0','1','0','2','255','0','8','128','4294967295','100','4294967295','225007','12','0','0','0','0','5390','1','1','0','','','','2');

[Lokked]

Sounds like overflow somewhere. If you add the exact same items that you had before, minus the belt, then remove 1 and THEN add the belt, does it still fail?
Or, does even a single crafted item cause this?

[Cyrcle]

I will have to tinker with it more tomorrow. I was having an issue whenever I equipped any of the crafted items, that they would teleport me to -2, -2, -2 in Khal. If I logged out, I would get the 2nd posts results. However, when I equip the boots, the character becomes uncontrollable.

[zippyzee]

This behavior occurs for objects that have no visual, but are equipped and a visual is attempted to be placed on the item already. Or, on an item that had no visual but the unequip attempted to remove the visual. This particular item must have something unusual with its visual type setting, or I'm missing some additional check I need to make on the unequip routine.

There is a similar thread from last month with the exact same issue, that I patched the same day. This is as far as I know the first instance of that happening since, so it will require a little legwork.

I am just days away from being freed up to look at the item code more closely.

Edit: Trying to figure this out. One interesting thing is all of those items causing the problem have the same attachment index, which is 225007. The item->type fields seem to be correct, corresponding to chest, boots, etc. I am having some issues getting my own server to run properly with all the recent changes (I hadn't updated for a while) so I can't quickly check on other crafted items to see if they do the same.

[Glaxono]

I have the same issue happen to me when I try to equip a specific ring. I get teleported to a location under ground in Khal.
I will /bug the results later on so you can have more info on this.

[Xinux]

Ok i was using the following two items

799123 Flawless Cavalier's Belt of Renewal
800730 Flawless Cavalier's Jagged Boots

I equipped the belt then removed the belt and all was good i then equipped the boots and i got ported.

Here is the packet for all three actions.

Equipped Belt

Code: Select all

=============== START 0x01 PACKET ===============
-- Server Spawn & Movement -- | 1/8/2015 11:34:10 | 10.15.155.64 -> 10.15.155.65
RAW HEX:
0000:	00 09 00 FD 01 00 15 00 00 00 38 00 0E 40 00 72 ..........8..@.r
0010	03 6A C5 04 00 00 C0 FF FF FF BF 02 00 00 20    .j............ 
BITSTREAM DATA:
********* NEW BITSTREAM SECTION *********
SECTION TYPE: BUNCH | Total Bistream Length: 165 | PacketID: 56 | isControl: False | isOpen: False | isClose: False | isReliable: True
Channel Index: 3 | Channel Sequence: 4 | Channel Type: 2 | Data Length: 110 | Header Pos: 55
ACTOR CHANNEL | ACTOR TYPE: SGOPCPawn
ATTACHMENT_GROUP[21] = pIndex: 19, aIndex: -1, invSlot: 10
=============== END 0x01 PACKET ===============

Removed Belt

Code: Select all

=============== START 0x01 PACKET ===============
-- Server Spawn & Movement -- | 1/8/2015 11:34:13 | 10.15.155.64 -> 10.15.155.65
RAW HEX:
0000:	00 09 01 07 01 00 15 00 00 00 39 00 0E 50 00 72 ..........9..P.r
0010	03 6A 05 00 00 00 C0 FF FF FF BF 02 00 00 20    .j............ 
BITSTREAM DATA:
********* NEW BITSTREAM SECTION *********
SECTION TYPE: BUNCH | Total Bistream Length: 165 | PacketID: 56 | isControl: False | isOpen: False | isClose: False | isReliable: True
Channel Index: 3 | Channel Sequence: 5 | Channel Type: 2 | Data Length: 110 | Header Pos: 55
ACTOR CHANNEL | ACTOR TYPE: SGOPCPawn
ATTACHMENT_GROUP[21] = pIndex: 0, aIndex: -1, invSlot: 10
=============== END 0x01 PACKET ===============

Equipped Boots

Code: Select all

=============== START 0x01 PACKET ===============
-- Server Spawn & Movement -- | 1/8/2015 11:34:17 | 10.15.155.64 -> 10.15.155.65
RAW HEX:
0000:	00 09 01 15 01 00 23 00 00 00 3A 00 0E 60 00 EA ......#...:..`..
0010:	06 6A 05 00 00 00 C0 FF FF FF BF 02 00 00 80 AA .j..............
0020	C1 00 00 00 B0 7E 05 00 A0 01 00 00 10          .....~.......
BITSTREAM DATA:
********* NEW BITSTREAM SECTION *********
SECTION TYPE: BUNCH | Total Bistream Length: 276 | PacketID: 57 | isControl: False | isOpen: False | isClose: False | isReliable: True
Channel Index: 3 | Channel Sequence: 6 | Channel Type: 2 | Data Length: 221 | Header Pos: 55
ACTOR CHANNEL | ACTOR TYPE: SGOPCPawn
ATTACHMENT_GROUP[21] = pIndex: 0, aIndex: -1, invSlot: 10
UNLIT = True
UNK DT: 6
=============== END 0x01 PACKET ===============

[zippyzee]

aIndex should not be -1 for these items. It is listed as 125007 for the belt in the database, and is stored in a uint32. That helps, though. I'll keep looking.