mojira.dev
MC-303111

Player text objects can leak raw atlas data in some cases

In some cases, a “player” text object with texture overrides can display sections of dynamic texture atlases.

Example commands (for signs, white dye or glow ink sacs may be needed to make details visible):

/tellraw @s {"player":{"name":"",texture:"atlas/blocks"}}

/title @s title {"player":{"name":"",texture:"atlas/gui"}}

/give @s dark_oak_sign[block_entity_data={id:sign,front_text:{messages:["","",[{"player":{"name":"",texture:"atlas/paintings"}}],""]}}]

The fix would be to move atlases up by one level, as is described in MC-303066, such that these cannot be accessed in unintended ways.

Attachments

Comments 0

No comments.

muzikbike

(Unassigned)

Unconfirmed

(Unassigned)

25w41a

Retrieved