Skip to content

Fix instant kill exploit for Potions/Splash Potions/Lingering Potions - #14411

Closed
Mickey42302 wants to merge 2 commits into
PaperMC:mainfrom
Mickey42302:instant-kill-fix
Closed

Mickey42302 wants to merge 2 commits into
PaperMC:mainfrom
Mickey42302:instant-kill-fix

Conversation

@Mickey42302

Copy link
Copy Markdown
Contributor

I would like to suggest adding these patches to Paper. At present, there is an integer overflow exploit with potions. This is often used by trolls to create "Instant Kill" potions. These potions can kill any player, even in Creative mode.

This patch corrects the integer overflow, which makes it so that the "Instant Kill" potions no longer work.

@github-project-automation github-project-automation Bot moved this to Awaiting review in Paper PR Queue Oct 18, 2026
@Mickey42302
Mickey42302 requested a review from a team as a code owner October 18, 2026 14:39
@lynxplay

Copy link
Copy Markdown
Contributor

Thank you for the PR but I don't see much need in patching this.
There are much worse things creative mode players can do to a server than killing a creative mode player.

If we wanted to patch this, the place would be in the computation of the amplifier by making it overflow save instead of limiting this.
But yea, I don't think this is a useful change. Creative mode is creative mode. Whatever plugin creative mode servers use to limit items should probably try to limit this if they care for it.

@lynxplay lynxplay closed this Oct 18, 2026
@github-project-automation github-project-automation Bot moved this from Awaiting review to Closed in Paper PR Queue Oct 18, 2026
@Mickey42302
Mickey42302 deleted the instant-kill-fix branch October 22, 2026 20:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Closed

Development

Successfully merging this pull request may close these issues.

2 participants