Commit graph

4388 commits

Author SHA1 Message Date
Yamagi
a315b15494
Merge pull request #1116 from devnexen/prev_fix_sec_optim
micro optimisations for previous security mitigations.
2024-06-30 20:54:08 +02:00
David Carlier
d0dc3e9926
micro optimisations for previous security mitigations.
also strtok_r uses its own provided buffer instead of the static one
even in a somewhat monothread context, it s still better.
2024-06-30 17:08:45 +01:00
Denis Pauk
ec36e98712 renders: replace paletted color with rgb 2024-06-25 00:00:23 +03:00
Denis Pauk
66515d9cde use gnumake on macos for release builds 2024-06-24 17:41:24 +03:00
Denis Pauk
e07cec2e13 renders: skip unused colormap allocation 2024-06-24 16:17:19 +03:00
Yamagi
1a1b32961b Refactor the download filter.
The first try didn't take into account that an evil server could
override the filter list by sending a stuff command. Fix this by
hardcoding the filters for .dll, .dylib and .so. Make sure that the
filters are always applied, either when the download is requested
through the `download` command or because game data is missing.

This is just a poor mans fix, trying to rule out an obvious way to
inject code into the client.
2024-06-24 11:56:11 +02:00
Denis Pauk
623b003f6f client: use rgb color in cparticle_t 2024-06-24 00:55:42 +03:00
Denis Pauk
3121849500 client: use rgb color in particle_t 2024-06-24 00:46:12 +03:00
Denis Pauk
bcda8cccaf vid: cache colormap 2024-06-23 19:16:35 +03:00
Denis Pauk
4268fedce0 filesystem: fix maps autocomplete for Anachronox 2024-06-23 19:15:34 +03:00
Denis Pauk
6a3859cd9e renders: sync readfile_t type with FS_LoadFile
Usage of FS_LoadFile as readfile_t is unsupported for now as requires
usage FS_FreeFile instead just copy of file content.

Fixes memory leak for sin models load.
2024-06-23 13:19:09 +03:00
Denis Pauk
d15bb81e58 Merge remote-tracking branch 'yquake2/master' 2024-06-22 23:57:29 +03:00
Yamagi
852cec05e7 Filter .., :, / and \\ from al_driver and cl_libcurl.
This is a poor mans safeguard against malicious server trying to
download and inject libraries.
2024-06-22 17:22:22 +02:00
Yamagi
5e6a73dc3f Include downloads into the security considerations. 2024-06-22 16:57:30 +02:00
Yamagi
468f90ad48 Implement a simple download filter.
`cl_nodownload_list` is a whitespace seperated list of strings, files
containing one of these strings in their name are never downloaded. Set
to `.dll .dylib .so` by default to prevent downloading libraries which
can be injected into client.

Closes #1114.
2024-06-22 16:56:42 +02:00
Yamagi
d5c7845271 Fix formating of the cvarlist. 2024-06-22 16:50:54 +02:00
Yamagi
93178d0f6b Implement a Q_strcasecmp() library replacement function.
It will be used in a later commit. While at it change Q_strcasecmp() and
Q_strncasecmp() to take the arguments as const, matching the signatures
of the non-replacement versions.
2024-06-22 16:47:19 +02:00
Denis Pauk
330b1352fb Add macos test build on release tag 2024-06-22 17:35:25 +03:00
Denis Pauk
a06c0703a7 renders: share palette load by refimport_t 2024-06-22 14:06:14 +03:00
Denis Pauk
1ce49294e7 renders: reuse VID_ImageDecode 2024-06-22 12:09:35 +03:00
Denis Pauk
9f84e40ab7 cin: move image load to separate file 2024-06-22 12:09:35 +03:00
Denis Pauk
d4eefa247c
Merge pull request #24 from hbokh/feature/apple-silicon-build
Update Makefile to build ref_vk.dylib on Apple Silicon
2024-06-21 20:45:01 +03:00
Henk
8b853dd27a
Update Makefile to build ref_vk.dylib on Apple Silicon
- Some markdownlinting / nitpicking on README.md
2024-06-21 14:02:52 +02:00
Denis Pauk
6dfcbf1429 Merge remote-tracking branch 'yquake2/master' 2024-06-18 00:17:16 +03:00
Yamagi
d5d7ee29ec
Merge pull request #1115 from hbokh/feature/fix-apple-silicon-build
Update Makefile to build on Apple Silicon
2024-06-17 18:54:16 +02:00
Denis Pauk
212ea58f83 models: fix flex model load 2024-06-16 15:20:28 +03:00
Denis Pauk
0273d6ba06 Merge remote-tracking branch 'yquake2/master' 2024-06-16 13:16:35 +03:00
Yamagi
71ff8bcdfc
Merge pull request #1111 from 0lvin/backport
Show weapon in player model preview
2024-06-16 09:53:24 +02:00
Henk
473b2ca078
Update Makefile to build on Apple Silicon 2024-06-14 17:26:24 +02:00
Denis Pauk
97f207e230 maps: cleanup maptype cvar code 2024-06-12 23:52:48 +03:00
Denis Pauk
e7dc4f3b2c menu: Fix default NULL 2024-06-11 23:28:50 +03:00
Denis Pauk
28aeb68826 menu: show weapon in player model preview 2024-06-08 23:36:57 +03:00
Denis Pauk
8fd8c2b546 menu: support long player skin name 2024-06-08 23:21:00 +03:00
Denis Pauk
1775874418 Merge remote-tracking branch 'yquake2/master' 2024-06-08 22:47:14 +03:00
Yamagi
41e9b46358
Merge pull request #1110 from protocultor/gyro_tightening
Gyro tightening
2024-06-08 19:09:53 +02:00
Yamagi
2d2c6787bb
Merge pull request #1109 from starfrost013/master
Fix potential memory corruption issue where cl_numparticles is 0 and CL_ClearParticles is called
2024-06-08 18:32:43 +02:00
Jaime Moreira
c842ab806f Remove fruitless glBindTexture() calls
...when there are no SURF_DRAWTURB surfaces to draw.
2024-06-06 18:23:26 -04:00
Jaime Moreira
5b44620c0e Correct OpenGL boolean flags. 2024-06-05 23:17:52 +03:00
Denis Pauk
d3bf7368c4 models: add models normal fix
If model has only zero notmal, update model with normal recalculate.
2024-06-05 22:59:54 +03:00
Denis Pauk
ec8b792a4b renders: use three bytes for save model normal 2024-06-04 23:47:48 +03:00
Jaime Moreira
c4271848df gl1_multitexture doc update 2024-06-04 16:21:10 -04:00
Jaime Moreira
24b03b61f8 Gyro tightening
A practical way to avoid a noisy gyro signal, or shaky hands.
Unlike a deadzone, inputs below the threshold are "squeezed towards
zero", so they are not completely ignored. Source:
http://gyrowiki.jibbsmart.com/blog:good-gyro-controls-part-1:the-gyro-is-a-mouse#toc9
2024-06-04 15:48:42 -04:00
Jaime Moreira
0e63bad7d9 Sliders and gamepad buttons refactor
Same logic with less code.
2024-06-04 15:18:37 -04:00
Jaime Moreira
d2b0ebd522 Correct OpenGL boolean flags. 2024-06-04 15:10:41 -04:00
Jaime Moreira
6869d7dddd GL1 multitexture combine removed
Applied too many OpenGL calls for an effect that could not be told
apart from normal GL_MODULATE; explains its absence from Q3A code.
Also, removed calls to glPixelStorei when no dynamic lights present.
2024-06-04 14:59:05 -04:00
Jaime Moreira
c68ffec274 GL1 multitexture bugfix
With "hand 2" and no "alias" models in player sight, sometimes only
lightmap was visible. Now forcing disabled multitexture when needed.
Another bugfix: "gl_showbbox 1" no longer produces OpenGL errors.
2024-06-04 14:53:25 -04:00
Denis Pauk
88bb466f1e renders: use dot product of shadevector and normal directly 2024-06-04 20:01:23 +03:00
Denis Pauk
a9219192e0 menu: show player weapon model in preview 2024-06-01 16:18:42 +03:00
Denis Pauk
acea97c16f menu: fix cppcheck warnings 2024-06-01 13:47:58 +03:00
Denis Pauk
36242bd254 menu: extend player model and skin name to MAX_QPATH 2024-06-01 13:00:11 +03:00