(edit solution done)
What exactly are you trying to prevent with this? People crashing their game? Normally shader code doesn’t influence anything that is exploit-prone in a game too much does it?
Given the fact that drivers nowadays are so incredibly buggy I wouldn’t doubt they could run native code on the system just by using some carefully crafted models
Already happend once in GArrysmod, where you could simply add executable code to mdl files. ^^
However I don’t see how a compromised client is a security problem at all, if you do everything right.
A compromised client means a compromised system or somebody who is hacking around with the client anyway Just keep your input / output (e.g. network) safe.
(solution done)
I see, thanks for the explanation, good luck with your project
(solution done)
How about amd5 check for each fiel loaded from unsafe site to a local cache, (from where the assetloader loads) So basically put a launcher before that downloadeds everything from taht site and checks it before starting the real application
(solution done)
Well basically you could read up the shader defnitions then and write a parser that checks if it is in compliance with all official stuff for them, I don’t see any other solution,
(solution done)
(solution done)
(solution done)
Yes I recommend implementing a custom AssetLocator that only allows specific paths to be loaded … However watch out because the hacker could put the same path for his shader as the one you’re using in his jar.
(edit solution done)