How secure is MCServer?

[worktycho]

Most of our vulnerabilities aren't even at that stage yet. There mostly of the form, we're blindly trusting the user here and have no idea what a malicious user could do.

[tigerw]

They would make the server go pick strawberries.

https://github.com/mc-server/MCServer/issues/851 - first comment by xoft.

[worktycho]

That is a perfectly valid thing for the server to do on an invalid pointer dereference. And we've got enough of those.