CVE-2024-29510: Ghostscript uniprint format-string via PostScript params
CVE-2023-36664 Ghostscript pipe device command injection
CVE-2023-36664: Ghostscript %pipe% device popen() command injection
s&box melee weapon: sphere trace + UseHitboxes, hit/miss cooldowns, bone-parented impact decals, local camera punch
s&box fall damage: OnLand fires on client, Rpc.Broadcast with host guard applies damage, Rpc.Owner for sound
s&box pickup: implement both ITriggerListener + ICollisionListener, IsDestroyed guard, 2D sound for local player
s&box projectile: ICollisionListener (host-only), [redacted:name] TimedExplosive with RunEvent<RadiusDamage>
s&box weapon reload: CancellationTokenSource for cancellable async reload, incremental vs clip modes
s&box shared ammo pool: NetDictionary keyed by resource path, [Sync(FromHost)], optimistic client returns
s&box NPC AnimationLayer: sync move/look state, compute move_direction as atan2, broadcast attack triggers
s&box NPC MoveTo: navigate to bounds.ClosestPoint, re-evaluate path every 0.5s, face movement direction when lateral
s&box NPC: cache schedules by type in Dictionary to avoid per-tick allocation, interrupt via EndCurrentSchedule()
s&box bullet weapon: time-based aim cone recovery, local EyeAngles recoil (no RPC), CameraNoise.Recoil for shake
s&box contraption seat control: sort by occupancy time, HashSet dedup, ClientInput.PushScope, IPlayerControllable
s&box animated door: sync DoorState + TimeSince, AnimationCurve easing, RotateAround pivot, host-authoritative
s&box constraints: create as child GameObjects with ConstraintCleanup, not directly on target objects
s&box: Traverse all connected contraption objects via Rigidbody.Joints + Collider.Joints + ManualLink recursively
s&box UndoSystem: per-player stacks keyed by SteamId, bounded at 128, RemovePlayer on disconnect, Rpc.FilterInclude for notices
s&box weapon architecture: AimRay context resolution, EffectiveAttacker, and host-side TraceAttack RPC