Kamron Batman d337cf4a1e fix(network): reject repeats of the do-once handshake packets ... Seeding and picking a server each happen once per connection. Neither had a guard, so a client pipelining into the recv buffer could re-run the handshake before the queued disconnect drained and reach both handlers again. A second play-server is the one that mattered: this connection may already have spent its auth id on a game login, and the id it would be handed back is the spent one, which nothing will redeem. Rejecting the packet is the honest answer -- the client is out of protocol order, not unlucky. Account login and game login already guarded on SentFirstPacket. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>		2026-08-08 01:04:08 -07:00
..
Accounting	Merge branch 'main' into perf/login-auth-id-preauth	2026-08-08 00:25:14 -07:00
Assistants	chore: Use var everywhere (#2294)	2025-12-27 16:47:28 -08:00
Commands	feat(network): allowlist false-positive IPs, escalate on behavior (#2556)	2026-07-30 23:12:17 -07:00
Compression	feat: Implements new robust/pluggable backup/archive system. (#2388)	2026-03-22 19:51:20 -07:00
Configuration	fix: Streamlines insurance. Insurance only executes when enabled. (#2550)	2026-07-26 09:47:49 -07:00
Console	feat: Adds console commands (#1714)	2024-03-30 09:40:43 -07:00
Context Menus	fix: Moves ContextMenu out of core, streamlines code, fixes bugs (#1873)	2024-07-20 21:33:23 -07:00
Engines	fix(opl): refuse property list invalidation raised from inside GetProperties (#2555)	2026-07-28 21:29:03 -07:00
Gumps	feat(network): allowlist false-positive IPs, escalate on behavior (#2556)	2026-07-30 23:12:17 -07:00
Holiday Stuff	perf: Migrate Veteran Reward gumps to DynamicGump/StaticGump (#2415)	2026-04-25 20:09:27 -07:00
Items	fix: Streamlines insurance. Insurance only executes when enabled. (#2550)	2026-07-26 09:47:49 -07:00
Migrations	feat(throwing): add remaining SA throwing artifacts (add-only) (#2516)	2026-07-03 08:50:16 -07:00
Misc	feat(network): allowlist false-positive IPs, escalate on behavior (#2556)	2026-07-30 23:12:17 -07:00
Mobiles	fix: Streamlines insurance. Insurance only executes when enabled. (#2550)	2026-07-26 09:47:49 -07:00
Multis	fix(housing): register doors, and stop crashing on client component sheets (#2557)	2026-08-04 20:05:28 -07:00
Network	fix(network): reject repeats of the do-once handshake packets	2026-08-08 01:04:08 -07:00
Regions	fix: Fixes criminals having guards called on them (#2348)	2026-03-13 17:35:47 -07:00
Skills	feat: Pre-Publish 14 Crafting (supersedes #2181, #2381) (#2476)	2026-06-07 20:27:22 -07:00
Special Systems	feat: Add zero-alloc interpolation handler to ValueStringBuilder, replace all StringBuilder usage (#2387)	2026-03-22 14:23:44 -07:00
Spells	fix(necromancy): correct Blood Oath duration, reflection, and expiry timing (#1690) (#2480)	2026-06-08 23:42:28 -07:00
Systems/JailSystem	fix: Bumps deps. Updates copyrights (#2353)	2026-03-05 19:36:54 -08:00
Targets	chore: Use var everywhere (#2294)	2025-12-27 16:47:28 -08:00
Text	fix: Bumps deps. Updates copyrights (#2353)	2026-03-05 19:36:54 -08:00
Utilities	fix: Harden Advanced Search: crash-safety, autosave, correct results & worker fixes (#2543)	2026-07-21 07:51:06 -07:00
World Saves	perf(messages): mechanical interpolation cleanups (#2436)	2026-05-03 18:26:49 -07:00
Module.cs	fix: Fixes sending packets and sidesteps a major issue with stackalloc and PGO in .NET 8 (#1607)	2023-11-21 12:18:20 -08:00
UOContent.csproj	fix: Fixes Argon2 verify correctness and the password upgrade lockout (#2562)	2026-08-08 00:24:59 -07:00