As of GZDoom 3.5.0, the builtin function CallACS (and, presumably, the other ACS_* builtins) can be used from outside the play scope. This is obviously unsafe.
The attached pk3 demonstrates that unsafety, by spawning an imp from ui scope. To use:
- Load it into GZDoom, along with a Doom-compatible IWAD.
- Start a game.
- Walk into an area where there's a decent amount of room above you.
- Press the Use key.
That'll spawn an imp on top of you—from StaticEventHandler.UiTick!
You do not have the required permissions to view the files attached to this post.