Before I go report a bug on VRChat Feedback, I am curious if anyone knows the steps to reproduce this avatar bug where the avatar details are reporting max particles as negative (-2,147,4863,648), “excellent”, and it’s treated as if there was no cap on max particles (actual behavior is like Very Poor). I have no clue, and I’ve hit a wall.
A public avatar (avtr_267a****-****-****-****-********6a6e, SHA256 of unredacted avatar ID: 627d2cb8493de8922a9472eb5734edfdc23ae10478b89b3c03ab50ee502c7ff2) uploaded someone else with one of these was seemingly voluntarily taken down by its author today, but this bug’s been a thing for longer than a year from what I know and have previously seen.
In my past security research, I’ve tried various things such as setting max particles to 2,147,483,647 + adding a point light to overflow the number by +2, but this gets capped at positive 2,147,483,647 max particles. Unity Editor doesn’t allow setting a number higher than 2,147,483,647 max or to a negative number of particles, and my friend has also tried some editor scripts to set it to overflow or negative values - none without any success.
These avatars should probably fail security checks, but currently they do not.