Garry's Mod — May 2025 Patch

May 2025 Patch

Changed 2
  • Throw a non halting Lua error when hitting Lua file limit, to let players know that they have hit the limit
  • Remove unnecessary return value in WorldPickerMouseDisable hook so GM:VGUIMousePressAllowed hook works more reliably for addons
Fixed 7
  • Fixed a regression crash on Linux when almost finished loading a map
  • Prevent crashes with steamworks library when used too early on dedicated servers
  • Fixed console spam about invalid sprite orientation when the sprite material is simply missing
  • Fixed HLTV clients being kicked due to mismatching SteamID
  • Fixed a crash to do with env_projected_texture's texture
  • Fixed Lua error with creator tool when trying to spawn NPCs that do not exist on the server
  • Fixed monitor and potentially other materials in Hammer acting strangely when using Fit option in texture application tool
Security 5
  • Fixed some security issues reported on HackerOne
  • Blocked .vdf and specific .cfg files from being accessible by the Lua file library
  • Added one more known Lua backdoor URL to HTTP blacklist
  • Increased default value of mem_max_heapsize to 512, and block it from being changed by Lua API
  • Block datacachesize convar from being changed by Lua API, to prevent crashes when set to invalid values

Hello everyone,

A new patch has been released. This one contains mostly stability and security fixes.

Servers and clients are recommended to update as soon as possible. The change list is as follows:

  • Throw a non halting Lua error when hitting Lua file limit, to let players know that they have hit the limit

  • Fixed a regression crash on Linux when almost finished loading a map

  • Prevent crashes with steamworks library when used too early on dedicated servers

  • Fixed console spam about invalid sprite orientation when the sprite material is simply missing

  • Fixed HLTV clients being kicked due to mismatching SteamID

  • Fixed a crash to do with env_projected_texture's texture

  • Fixed some security issues reported on HackerOne

  • Remove unnecessary return value in WorldPickerMouseDisable hook so GM:VGUIMousePressAllowed hook works more reliably for addons (Community Contribution)

  • Fixed Lua error with creator tool when trying to spawn NPCs that do not exist on the server (Community Contribution)

  • Blocked .vdf and specific .cfg files from being accessible by the Lua file library

  • Added one more known Lua backdoor URL to HTTP blacklist

  • Increased default value of mem_max_heapsize to 512, and block it from being changed by Lua API

  • Block datacachesize convar from being changed by Lua API, to prevent crashes when set to invalid values

  • Fixed monitor (and potentially other) materials in Hammer acting strangely when using "Fit" option in texture application tool.

The entire change list can also be found on our website: https://gmod.facepunch.com/news/may-2025-patch

Edit: For people still experiencing crashes when pressing "Start Game" - delete your bin/ and garrysmod/bin/ folders and verify game cache integrity through Steam. Some 3rd party files/programs that may have been put into the game's folder by the player are causing issues, such as graphics modifications. Updating those files might also work.

View original

Upgraded? How did it go?

Discussion