It's possible to go through a flagged AUTO/HIDDEN exit while stunned, fighting, incapitated, resting, or sitting. This is possible as positions are checked in the direction commands, but not in the actual function move_char(). This bug exists in both smaugfuss and swrfuss.

act_move.cpp, move_char():
Somewhere with these ifchecks:

   }   

   if( IS_SET( pexit->exit_info, EX_NOMOB ) && IS_NPC( ch ) )
   {                
      act( AT_PLAIN, "Mobs can't enter there.", ch, NULL, NULL, TO_CHAR );      
      return rNONE;
   }

   if( IS_SET( to_room->room_flags, ROOM_NO_MOB ) && IS_NPC( ch ) )
   {                  
      act( AT_PLAIN, "Mobs can't enter there.", ch, NULL, NULL, TO_CHAR );
      return rNONE;
   } 

Add:

  if( ch->position ==  POS_INCAP || ch->position == POS_STUNNED )
  {
     send_to_char( "&RNo way, you're too stunned for that!\r\n", ch );
     return rNONE;
  }
  if( ch->position == POS_SLEEPING )
  {
      send_to_char( "In your dreams, or what?\r\n", ch );
      return rNONE;
  }
  if( ch->position == POS_SITTING || ch->position == POS_RESTING )
  {
     send_to_char( "You can't do that sitting down.\r\n", ch );
     return rNONE;
  }
  if( ch->position == POS_FIGHTING )
  {
     send_to_char( "&RNo wait, you're still fighting!\r\n", ch );
     return rNONE;
  }     

.........................
Lead Developer,
Star Wars: Galactic Insights
http://www.swgi.org


sudo apt-get sandwich

Looks like a good catch. Almost makes me want to break the various things that can stop movement into a can_go() function and have move_char() call that, so that can_go() can be fixed/tweaked as needed without disturbing the rest. Also looks cleaner, but hardly necessary for fixing the actual problem. .........................
PDNS-Admin | Sandbox | Arthmoor MUD Hosting Services | The Truth About Medievia: A Saga of Code Theft.

"The past was erased, the erasure was forgotten, the lie became truth." -- George Orwell, 1984

Yeah, it's kind of funny being able to go through those exits while in the middle of a fight or sleeping. Indeed, move_char() could do with a bit of cleanup and house cleaning. I don't particularly like those large stock functions that could be broken down, like nanny(), for instance. .........................
Lead Developer,
Star Wars: Galactic Insights
http://www.swgi.org


sudo apt-get sandwich

Stupid question but here it goes since I don't have access to any of the source at the moment, I can't look this up myself. Will this updated code with the POS_INCAP prevent someone from dragging someone if they are knocked out?

ayuri
.........................
"There is a lesson here for ambitious system architects: the most dangerous enemy of a better solution is an existing codebase that is just good enough."
-- Eric S. Raymond: The Art of Unix Programming

It shouldn't. The position is changed to POS_DRAG while they are moved and then switched back to stunned/incapacitated afterwards.

EDIT: This would affect fleeing, however, a position could be added and modified with flee the same way drag does it. .........................
Lead Developer,
Star Wars: Galactic Insights
http://www.swgi.org


sudo apt-get sandwich

Ahh, didn't think about fleeing. Good catch on that one.

ayuri .........................
"There is a lesson here for ambitious system architects: the most dangerous enemy of a better solution is an existing codebase that is just good enough."
-- Eric S. Raymond: The Art of Unix Programming

Just started a new job, so I'm a little behind, I'll poke at this when I have time. Which should be this weekend. Hopefully. .........................
Owner/Coder -- Malevolent Whispers -- Development Phase - Not accepting players
Coder -- Star Wars: The Sith Wars -- Open Alpha - Players Welcome - Full System Re-writes Imminent.

I3 Contact: Kayle@SithWars

You know, that was my first thought when I saw this thread initially too, but I didn't say anything because Samson had essentially endorsed the proposed fix so I thought I must've been mistaken. Guess it just goes to show that you really shouldn't go second guessing yourself. .........................
-=Conner=-

Administrator/Coder Primary SysOp
Land of Legends The Castle's Dungeon BBS

telnet://tcdbbs.zapto.org:4000 telnet://tcdbbs.zapto.org:23

Or assume that just because I said it was a good fix meant I had taken everything into consideration. Fleeing wasn't even on my mind when I first looked at it. .........................
PDNS-Admin | Sandbox | Arthmoor MUD Hosting Services | The Truth About Medievia: A Saga of Code Theft.

"The past was erased, the erasure was forgotten, the lie became truth." -- George Orwell, 1984

I suppose there is that aspect to consider too. I think this was a case of my believing "better coders than I have already approved it so who am I to question it". .........................
-=Conner=-

Administrator/Coder Primary SysOp
Land of Legends The Castle's Dungeon BBS

telnet://tcdbbs.zapto.org:4000 telnet://tcdbbs.zapto.org:23

You know the game 'Simon Says'? How about we play 'Samson Says' instead. .........................
David Haley
Head Coder, Legends of the Darkstone
BabbleMUD Project
http://david.the-haleys.org

Due to my forgetting about the baby shower this weekend, I didn't have time to look into this yet. However, I should have time tomorrow after work to look into this. .........................
Owner/Coder -- Malevolent Whispers -- Development Phase - Not accepting players
Coder -- Star Wars: The Sith Wars -- Open Alpha - Players Welcome - Full System Re-writes Imminent.

I3 Contact: Kayle@SithWars

Had a chance to look this over, and wouldn't adding a call to check_pos() in the interpreter section for auto exits fix this without disrupting flee?

Something like:

   /*
    * Look for command in skill and socials table.
    */
   if( !found )
   {
      if( !check_skill( ch, command, argument ) && !check_ability( ch, command, argument )   // Racial Abilities Support - Kayle 7-8-07
          && !rprog_command_trigger( ch, origarg )
          && !mprog_command_trigger( ch, origarg )
          && !oprog_command_trigger( ch, origarg )
          && !check_social( ch, command, argument ) && !news_cmd_hook( ch, command, argument )
#ifdef IMC
          && !imc_command_hook( ch, command, argument )
#endif
          )
      {
         EXIT_DATA *pexit;

         /*
          * check for an auto-matic exit command 
          */
         if( ( pexit = find_door( ch, command, TRUE ) ) != NULL && IS_SET( pexit->exit_info, EX_xAUTO ) && check_pos( ch, POS_STANDING )
         {
            if( IS_SET( pexit->exit_info, EX_CLOSED )
                && ( !IS_AFFECTED( ch, AFF_PASS_DOOR ) || IS_SET( pexit->exit_info, EX_NOPASSDOOR ) ) )
            {
               if( !IS_SET( pexit->exit_info, EX_SECRET ) )
                  act( AT_PLAIN, "The $d is closed.", ch, NULL, pexit->keyword, TO_CHAR );
               else
                  send_to_char( "You cannot do that here.\r\n", ch );
               return;
            }
            move_char( ch, pexit, 0 );
            return;
         }
         send_to_char( "Huh?\r\n", ch );
      }
      return;
   }

[Edit:] Someone try this for me while I'm working and let me know if it works. (working 40 hours a week really takes a lot out of your day...) .........................
Owner/Coder -- Malevolent Whispers -- Development Phase - Not accepting players
Coder -- Star Wars: The Sith Wars -- Open Alpha - Players Welcome - Full System Re-writes Imminent.

I3 Contact: Kayle@SithWars

Tell me about it .........................
David Haley
Head Coder, Legends of the Darkstone
BabbleMUD Project
http://david.the-haleys.org

You can at least get on MUDs from work. .........................
Owner/Coder -- Malevolent Whispers -- Development Phase - Not accepting players
Coder -- Star Wars: The Sith Wars -- Open Alpha - Players Welcome - Full System Re-writes Imminent.

I3 Contact: Kayle@SithWars

Ha, be thankful for work. I lost my job so I've got nothing to do BUT MUD.

I'd like to go back to the days where I could just do nothing but MUD. But I do like the influx of cash. So.. Maybe I'll just deal with this whole working thing.

Anyway, has anyone tested my solution, or have an easy way for me to test the solution on my own? .........................
Owner/Coder -- Malevolent Whispers -- Development Phase - Not accepting players
Coder -- Star Wars: The Sith Wars -- Open Alpha - Players Welcome - Full System Re-writes Imminent.

I3 Contact: Kayle@SithWars

I'd like to get this taken care of, but I don't have an easy way to test if this works if no one volunteers any information on a way to test it by my lonesome. .........................
Owner/Coder -- Malevolent Whispers -- Development Phase - Not accepting players
Coder -- Star Wars: The Sith Wars -- Open Alpha - Players Welcome - Full System Re-writes Imminent.

I3 Contact: Kayle@SithWars

Sorry, Kayle, I'm pretty much in the same boat over here. If I put it in, I've still got to try to test it somehow by my lonesome too. My mud's not exactly been crowded to capacity since my move to the country that mandated switching to this damn laggy satellite feed. .........................
-=Conner=-

Administrator/Coder Primary SysOp
Land of Legends The Castle's Dungeon BBS

telnet://tcdbbs.zapto.org:4000 telnet://tcdbbs.zapto.org:23

Looking at my code from just before I changed how positions work, I see that I fixed this by putting
some checks in the auto-exit handling section of the interpret() function in interp.cpp (probably .c in
most SMAUGs though):

            if((pexit = find_door(ch, command, TRUE)) != NULL && IS_SET(pexit->exit_info, EX_xAUTO)){
                if(IS_SET(pexit->exit_info, EX_CLOSED) && (!IS_AFFECTED(ch, AFF_PASS_DOOR) || IS_SET(pexit->exit_info, EX_NOPASSDOOR))){
                    if(!IS_SET(pexit->exit_info, EX_SECRET) && IS_AWAKE(ch))
                        act(AT_PLAIN, "The $d is closed.", ch, NULL, NULL, TO_CHAR, pexit->keyword);
                    else
                        send_to_char("Huh?\r\n", ch);//WAS "You cannot do that here." but did not want to give a hint to secret
                    return;
                }
                if(check_pos(ch, POS_STANDING))
                    move_char(ch, pexit, 0);
                return;
            }
            send_to_char("Huh?\r\n", ch);

I put the position check right before the actual move as that is what is actually affected
by the position. I also added a check to see if you are awake in the closed door section.
The idea there was if the character was awake, they could see the door was closed even
if in a position that they could not move to it (note that since this code, I have added extra
support for blindness and dark rooms in this visibility check). As a note if someone tries
to use this code: I had fully hardened the act() function for any format string and function
input. I moved the string based inputs to two defaulted arguments at the end of the input
list, so to use in a more stock system, the last argument should be moved to where the
2nd NULL is now.

It would seem if you put the position check in the if that is checking for the auto-exit, you
would get the bad position message from check_pos() and then get the huh? from the fall
through. This though is still much better then putting the checks in move_char(), which
is conceptually wrong.