added protection against game-query-packet spam attack

CHANGELOG.md

@@ -1,4 +1,4 @@
-### 1.7.37 (build 22082, api 9, 2024-11-07)
+### 1.7.37 (build 22086, api 9, 2024-11-08)
 - Bumping api version to 9. As you'll see below, there's some UI changes that
   will require a bit of work for any UI mods to adapt to. If your mods don't
   touch UI stuff at all you can simply bump your api version and call it a day.
@@ -145,6 +145,8 @@
 - (build 22072) Added a 'Use insecure connections' option in settings ->
   advanced. This may make it possible to play from places such as Iran where ssl
   connections are being blocked. Do not enable this if you don't need to.
+- (build 22085) Added protection against an attack consisting of spamming
+  invalid game-query packets.
 
 ### 1.7.36 (build 21944, api 8, 2024-07-26)
 - Wired up Tokens, BombSquad's new purchasable currency. The first thing these

src/assets/ba_data/python/baenv.py

@@ -53,7 +53,7 @@
 
 # Build number and version of the ballistica binary we expect to be
 # using.
-TARGET_BALLISTICA_BUILD = 22082
+TARGET_BALLISTICA_BUILD = 22086
 TARGET_BALLISTICA_VERSION = '1.7.37'
 
 

src/ballistica/classic/support/classic_app_mode.cc

@@ -1506,7 +1506,8 @@ void ClassicAppMode::HandleGameQuery(const char* buffer, size_t size,
     g_base->network_writer->PushSendToCall(msg_buffer, SockAddr(*from));
 
   } else {
-    g_core->Log(LogName::kBaNetworking, LogLevel::kError,
+    // Log invalid packets only once to avoid weaponized log spam.
+    BA_LOG_ONCE(LogName::kBaNetworking, LogLevel::kError,
                 "Got invalid game-query packet of len " + std::to_string(size)
                     + "; expected 5.");
   }

src/ballistica/shared/ballistica.cc

@@ -39,7 +39,7 @@ auto main(int argc, char** argv) -> int {
 namespace ballistica {
 
 // These are set automatically via script; don't modify them here.
-const int kEngineBuildNumber = 22082;
+const int kEngineBuildNumber = 22086;
 const char* kEngineVersion = "1.7.37";
 const int kEngineApiVersion = 9;