FIXES: Windows 0.78.1.4

[Acidd_UK]

Lurker has very kindly posted a second third spring.exe with more fixes. Windows uses may use this to replace the spring.exe file in their Spring install directory.

http://64.86.28.46/spring%200.78.1.unofficial-4.zip

Massive thanks to Lurker in this thread:
http://spring.clan-sy.com/phpbb/viewtop ... 67#p326867

Please post messages of thanks in the other thread, I would like this one stickied if possible as a lot of ppl seem to be unaware of this fix.

[lurker]

This exe has most of the fixes in git that aren't synced, so it's still 0.78.1
I wonder if I should have been more vocal about my fixed 77b5 too... anyway it's shameless self-promotion sticky time!

On linux, assuming you already have a checkout of spring:

Code: Select all

git remote add lurker git://github.com/Dylan16807/spring.git
git fetch lurker
git checkout lurker/0.78+fixes

Then, optional step, open rts/Game/GameVersion.cpp and change Patchset from "1" to "unofficial-4" and Additional to "gbf82b69" (I didn't commit this because it would change the hash )

Note: This branch is half broken for making a full install; use it only for the spring binary.

Now everyone go join #playtest and be ready to test for the next version.

[The_Uber_Noob]

Lurker, thanks for the patch! I'd like to point out however that last night at 3 am (European time) a lot of us were wary of this "unofficial" patch for the following reasons:

1. no-one seemed able to say who had made it and what it fixed
2. it was hosted on a server with no domain name (just ip)
3. the spring.clan-sy.com was down and it was thus impossible to check whether this was a real patch or some kind of virus
4. many games worked perfectly fine without it

Technically this is a security hole as anyone could have walked into the lobby claiming a new patch should be downloaded and convincing (as they did) a lot of players to replace their spring.exe with this one.

Kudos to Lurker for providing the patch. However, I believe we do need some kind of formal identification for such upgrades to avoid any possible misshap.

[lurker]

Well, the link that had been in the #main topic was actually at jobjol, uploaded by JJ. I'll get a domain name later.

and on the subject of security, widgets can dump programs right into the spring directory

[Pxtl]

Securing widgets would be a nightmare. Even if you removed the obvious risks, it'd be damned hard to prevent them from creating executable binary code _anywhere_.

[lurker]

Windows needs more -x.
And after I write that I remember that there is an executable bit in NTFS that could be set at least for the current user.

[The_Uber_Noob]

Not your fault, Lurker, but the only link I saw was the one being passed around in main lobby which was:

http://64.86.28.46/spring%200.78.1.unofficial-4.zip

I wouldn't have thought twice about downloading from jobjol. As far as I'm concerned, having it up on a known website would be security enough.