Ticket #2676: NetServer.cpp.patch

NetServer.cpp

@@ -837 +837 @@
     {
         CSimulationMessage* simMessage = static_cast<CSimulationMessage*> (message);
 
+        // Ignore messages sent by one player on behalf of another player
+        PlayerAssignmentMap::iterator it = server.m_PlayerAssignments.find(session->GetGUID());
+        if (it == server.m_PlayerAssignments.end() || it->second.m_PlayerID != simMessage->m_Player)
+            return true;
+
         // Send it back to all clients immediately
         server.Broadcast(simMessage);
 
@@ -845 +850 @@
             server.m_SavedCommands.resize(simMessage->m_Turn + 1);
         server.m_SavedCommands[simMessage->m_Turn].push_back(*simMessage);
 
-        // TODO: we should do some validation of ownership (clients can't send commands on behalf of opposing players)
-
         // TODO: we shouldn't send the message back to the client that first sent it
     }
     else if (message->GetType() == (uint)NMT_SYNC_CHECK)