Bug fixes

Endstone quietly fixes a number of bugs in vanilla Bedrock Dedicated Server - memory leaks, item loss, and network-level vulnerabilities that Mojang hasn't addressed. You don't need to do anything to get these; they're applied automatically.

This is a list of the notable, observable fixes, not an exhaustive changelog. Behavior can differ from a stock BDS install in these specific ways.

Stability and security

Map tracker memory leak

On a stock server, MapItemSavedData keeps tracking a player for map updates even after they disconnect, and never cleans up. Each stale tracker pins a 256x256 chunk area in memory, so as players come and go a long-running server's memory use only climbs.

Endstone removes players from map trackers when they leave, so the memory is reclaimed.

Oversized-read in the RakNet ping handler

Mojang's handler for custom RakNet packet 0x86 reads a network address out of the packet without first checking the packet is large enough to contain one. A crafted undersized packet reaches the vulnerable code path. This was reported to Mojang as MCPE-228407 and closed as "Won't Fix".

Endstone drops undersized 0x86 packets before they reach that code, closing the crash vector.

Disconnects that clients can ignore

When BDS disconnects a client, it politely asks the client to leave and waits for an acknowledgment. A malicious client can simply ignore the request and keep sending packets indefinitely.

Endstone force-closes the connection instead of waiting, so a client can't refuse to leave.

Gameplay

Cancelled item drops no longer delete the item

When a player drops an item, vanilla BDS ignores whether the drop actually succeeded and always marks the transaction complete. If the drop is cancelled - for example by a plugin handling PlayerDropItemEvent - the item still vanishes from the player's inventory.

Endstone only commits the drop when it genuinely succeeds; if it's cancelled, the transaction is reverted and the item stays in the player's inventory.