Kai Dietrich

meshing should have a --max-faces parameter

4

Renderers are facing practical limitations for the number of triangles they can render per scene. Instead of tuning the --max-error parameter until that limit is met, we should add a...

[WIP] Tangram 3D Hack

7

Hello everyone, I hacked Tangram-ES to render 3D terrain using the terrarium tiles. Enjoy the screenshot from SanFrancisco below:  wireframe view: ![screen shot...

Extruded polygon markers rendering problem (i16 vertex wraparound)

3

**TO REPRODUCE THE ISSUE, FOLLOW THESE STEPS:** - create a small polygon: double size = 0.000005; Tangram::LngLat coordinates[] = { {lng - size, lat}, {lng, lat + size}, {lng +...

Fix zip_file::remove_comment() length checks

1

The zip_file::remove_comment() member function is missing a few important length checks that can lead to crashes with invalid zip file input. As far as I can see, this is a...

Based on old upstream miniz version with security vulnerabilities

3

miniz-cpp is based on an old version of zlib/minizip and contains security vulnerabilities. See this example/failing test here: https://github.com/cleeus/miniz-cpp/commit/d2339317086cb6398987bf34f04895ddaa9ba30a I understand that this project is not in active development but...

Unbounded malloc DoS in PNM loading code

2

The PNM parsing code reads the width and height fields and will allocate an appropriate CImg instance. Since this is done before reading the data and without a size check...

Unbounded recursion in XMLNode::DeepClone results in stack overflow

3

The XMLNode::DeepClone member function does an unbounded recursion. Even though XMLNode::ParseDeep enforces a limit on the recursion using the XMLDocument::DepthTracker: ``` XMLDocument::DepthTracker tracker(_document); if (_document->Error()) return 0; ``` this limit...

ckw-b4.zip flagged as virus

2

Hello David, the [B4 release.zip](https://github.com/davidrg/ckwin/releases/download/10.0beta.08-4/ckw-b4.zip) is consistently flagged as a virus on multiple virus scanners. Virus scanner is complaining about iksdsvc.exe. Could you maybe tag a new build? Btw, here...