Edited beatmaps submit scores in playlist rooms

[Hydria]

Type

Game behaviour

Bug description

When playing maps in a playlist, if you go into the map, edit it to just have a single note, and go back to the playlist, you have to re-download the map. However, this does not replace the difficulty selected and so you will get points based on the edited map.

Potentially a big issue for spotlight seasons as people can now essentially just get to the top with single note edited beatmaps.

Might have loose connections to #16176

As you'll see in the video below in the song select screen, I have two copies of another playlist map, one ranked and one local which is where I tested the issue originally. This might help in terms of debugging.

Screenshots or videos

playlistissue.mp4

Version

2023.419.0-lazer

Logs

database.log
input.log
legacy-ipc.log
network.log
performance.log
runtime.log
updater.log

[frenzibyte]

I cannot reproduce this, you probably have a missing step before the video.

[Hydria]

@frenzibyte here it is from client launch (in form of a youtube video because 10MB for 70 seconds doesn't cut it):
https://www.youtube.com/watch?v=FgjOK_E6z4Y
Unfortunately there are no additional steps here. These steps have also been confirmed by the original bug finder, respective.

[peppy]

Keep in mind that using these kinds of exploits will result in account restriction (yes, even on lazer) so please refrain from doing so. If you need to test, use the development server.

[bdach]

The immediate issue is fixed by the pull linked above. There is further work to improve the surrounding systems' resiliency to such bugs, but it is mostly tangential, so it will be PRed/tracked separately.

[longnguyen2004]

I've seen people submitting SS scores on The Solace of Oblivion, probably with this method (SS with 1x combo). Are we going to clear the exploited scores eventually?
https://lazer.ppy.sh/beatmapsets/594751#osu/1257904

[bdach]

A score reset will happen sooner or later. Report such scores via available means for now.