Does anyone know how EUD's actually work?
None.
Players after 12 are known as extended players, and their deaths are beyond the range marked for death counts, so you get EUDs, extended unit deaths, so by using conditions to look at their deaths, you can see sections of memory in the game not normally accessable, since the conditions still ATTEMPT to look at their deaths, but actually end up looking at something else.
None.
This (note that the article talks about
writing to the overflow, the situations it describes are why EUD Actions were patched.) It can be done with players or units. Adding one to a unit ID reads 48 bytes ahead, add one to a player reads one byte ahead. Max unit ID is 65535, max player ID is 255 (0-based.) You can read 3146700 bytes, starting with Player 1 Marine.
The data format is like this, but then EUDs extend past the bounds (read the article I linked to):
Collapsable Box
+0x00 - Player 1 Marine
+0x04 - Player 2 Marine
+0x08 - Player 3 Marine
+0x0C - Player 4 Marine
+0x10 - Player 5 Marine
+0x14 - Player 6 Marine
+0x18 - Player 7 Marine
+0x1C - Player 8 Marine
+0x20 - Player 9 Marine
+0x24 - Player 10 Marine
+0x28 - Player 11 Marine
+0x2C - Player 12 Marine
+0x30 - Player 1 Ghost
+0x34 - Player 2 Ghost
+0x38 - Player 3 Ghost
+0x3C - Player 4 Ghost
+0x40 - Player 5 Ghost
+0x44 - Player 6 Ghost
+0x48 - Player 7 Ghost
+0x4C - Player 8 Ghost
+0x50 - Player 9 Ghost
+0x54 - Player 10 Ghost
+0x58 - Player 11 Ghost
+0x5C - Player 12 Ghost
etc.…
TinyMap2 - Latest in map compression! ( 7/09/14 - New build! )
EUD Action Enabler - Lightweight EUD/EPD support! (ChaosLauncher/MPQDraft support!)
EUDDB -
topic - Help out by adding your EUDs! Or Submit reference files in the References tab!
MapSketch - New image->map generator!
EUDTrig -
topic - Quickly and easily convert offsets to EUDs! (extended players supported)
SC2 Map Texture Mask Importer/Exporter - Edit texture placement in an image editor!
This page has been viewed [img]http://farty1billion.dyndns.org/Clicky.php?img.gif[/img] times!
PyMS and ProTRG developer
add one to a player reads one byte ahead
You mean 4 bytes ahead?
Sleeping wolves wake hungry.
Ahh, now I get it.
Thanks a bunch =)
So that's how they work. Is there any
other way to cause a buffer overflow in starcraft?
Post has been edited 1 time(s), last time on Jul 10 2008, 2:20 am by Zombiechao.
None.
Place units for extended players
None.
Use units and sprite-units with IDs over 227.
Disabling some units will also cause them.
?????
Disabling just gives them stupid iscripts, as far as I know. >.>
TinyMap2 - Latest in map compression! ( 7/09/14 - New build! )
EUD Action Enabler - Lightweight EUD/EPD support! (ChaosLauncher/MPQDraft support!)
EUDDB -
topic - Help out by adding your EUDs! Or Submit reference files in the References tab!
MapSketch - New image->map generator!
EUDTrig -
topic - Quickly and easily convert offsets to EUDs! (extended players supported)
SC2 Map Texture Mask Importer/Exporter - Edit texture placement in an image editor!
This page has been viewed [img]http://farty1billion.dyndns.org/Clicky.php?img.gif[/img] times!
Disabling just gives them stupid iscripts, as far as I know. >.>
Which play wrong frames, which overflow the GRP. Among other effects...
?????
Eh. Playing an invalid frame results in a crash. It doesn't play "wrong" frames, it just uses stupid scripts.. like the idtoattack animation over and over. The cloaking I believe to be a result of things normally becoming invisible. Protoss buildings can disable nicely because they are meant to (but not in the same method.)
Actually it is an
iscript overflow, now that I am thinking about it. If you mod iscript.bin, they do different things.
TinyMap2 - Latest in map compression! ( 7/09/14 - New build! )
EUD Action Enabler - Lightweight EUD/EPD support! (ChaosLauncher/MPQDraft support!)
EUDDB -
topic - Help out by adding your EUDs! Or Submit reference files in the References tab!
MapSketch - New image->map generator!
EUDTrig -
topic - Quickly and easily convert offsets to EUDs! (extended players supported)
SC2 Map Texture Mask Importer/Exporter - Edit texture placement in an image editor!
This page has been viewed [img]http://farty1billion.dyndns.org/Clicky.php?img.gif[/img] times!
Eh. Playing an invalid frame results in a crash. It doesn't play "wrong" frames, it just uses stupid scripts.. like the idtoattack animation over and over. The cloaking I believe to be a result of things normally becoming invisible. Protoss buildings can disable nicely because they are meant to (but not in the same method.)
Actually it is an iscript overflow, now that I am thinking about it. If you mod iscript.bin, they do different things.
Of course, but if the game crashes is because it also overflows somewhere else. As a result of playing a wrong script....
?????
wait... so in theory, you can read how much HP a unit has, with SOME EUD?
None.
Seeing as how there are only a limited number of EUD's and there are thousands of data value's and variables and crap, maybe.
None.
wait... so in theory, you can read how much HP a unit has, with SOME EUD?
Why only in theory? It's been done.The data structure has been rearranged a little from when I started doing this, so you can't read supply values anymore with EUDs... but you can with extended othertriggers.
(I still need to play with those...)
TinyMap2 - Latest in map compression! ( 7/09/14 - New build! )
EUD Action Enabler - Lightweight EUD/EPD support! (ChaosLauncher/MPQDraft support!)
EUDDB -
topic - Help out by adding your EUDs! Or Submit reference files in the References tab!
MapSketch - New image->map generator!
EUDTrig -
topic - Quickly and easily convert offsets to EUDs! (extended players supported)
SC2 Map Texture Mask Importer/Exporter - Edit texture placement in an image editor!
This page has been viewed [img]http://farty1billion.dyndns.org/Clicky.php?img.gif[/img] times!
I'm wondering, is it possible that EUD actions may still work? I mean, let's say you preplaced the units you needed to get deaths of for the proper players, and then use other units to manually kill them to add the death, instead of modifying it directly using actions?
None.
Problem is that most extended units crash. Feel free to try it.
TinyMap2 - Latest in map compression! ( 7/09/14 - New build! )
EUD Action Enabler - Lightweight EUD/EPD support! (ChaosLauncher/MPQDraft support!)
EUDDB -
topic - Help out by adding your EUDs! Or Submit reference files in the References tab!
MapSketch - New image->map generator!
EUDTrig -
topic - Quickly and easily convert offsets to EUDs! (extended players supported)
SC2 Map Texture Mask Importer/Exporter - Edit texture placement in an image editor!
This page has been viewed [img]http://farty1billion.dyndns.org/Clicky.php?img.gif[/img] times!