chore: resolve 5 pre-merge issues from code review

Author: shdwmtr

CMakeLists.txt

@@ -140,6 +140,7 @@ endif()
 
 if(UNIX AND NOT APPLE)
     find_package(GLEW REQUIRED)
+    find_package(OpenSSL REQUIRED)
     target_include_directories(${PROJECT_NAME}
         SYSTEM PRIVATE ${minizip_ng_SOURCE_DIR}
     )
@@ -150,6 +151,7 @@ if(UNIX AND NOT APPLE)
         GLEW::GLEW
         CURL::libcurl
         minizip
+        OpenSSL::Crypto
     )
 elseif(APPLE)
     find_library(COCOA_LIBRARY Cocoa REQUIRED)

src/components/titlebar.cc

@@ -229,7 +229,3 @@ bool RenderTitleBarComponent(std::shared_ptr<RouterNav> router)
 
     return IsItemHovered() || (IsItemHovered(ImGuiHoveredFlags_AllowWhenBlockedByActiveItem) && IsMouseDown(ImGuiMouseButton_Left));
 }
-
-void RenderLanguageSelector(float xPos)
-{
-}

src/include/components.h

@@ -173,9 +173,6 @@ const void RenderHome(std::shared_ptr<RouterNav> router, float xPos)
     const int ContainerSpacing = ScaleX(30);
     const int ContainerWidth = (viewport->Size.x - ScaleX(100)) / 2;
 
-    // Language selector is part of the home screen — slides with the panel.
-    RenderLanguageSelector(xPos);
-
     PushStyleColor(ImGuiCol_Border, ImVec4(0.169f, 0.173f, 0.18f, 1.0f));
 
     SetCursorPos({ xPos + (viewport->Size.x - ((ContainerWidth * 2) + ContainerSpacing)) / 2, ((viewport->Size.y - BottomNavBarHeight) / 2.0f) - ContainerHeight / 2.0f });

src/routes/home.cc

@@ -331,7 +331,7 @@ const void RenderInstallPrompt(std::shared_ptr<RouterNav> router, float xPos)
         PushStyleColor(ImGuiCol_Text, ImVec4(0.422f, 0.425f, 0.441f, 1.0f));
 
         std::string currentTag = selectedRelease.contains("tag_name") ? selectedRelease["tag_name"].get<std::string>() : std::string("(none)");
-        Text(Locale::Get("installVersion"), currentTag.c_str());
+        { char buf[512]; snprintf(buf, sizeof(buf), Locale::Get("installVersion"), currentTag.c_str()); Text("%s", buf); }
         SameLine(0, ScaleX(5));
 
         const char* changeText = Locale::Get("installChangeVersion");
@@ -406,10 +406,10 @@ const void RenderInstallPrompt(std::shared_ptr<RouterNav> router, float xPos)
         if (installSizeStr.empty()) {
             Text("%s", Locale::Get("installSizeNA"));
         } else {
-            Text(Locale::Get("installSizeMB"), stof(installSizeStr) / (1024.0f * 1024.0f));
+            { char buf[256]; snprintf(buf, sizeof(buf), Locale::Get("installSizeMB"), stof(installSizeStr) / (1024.0f * 1024.0f)); Text("%s", buf); }
         }
 
-        Text(Locale::Get("installDownloadMB"), osReleaseInfo.contains("size") ? osReleaseInfo["size"].get<float>() / (1024.0f * 1024.0f) : 0.0f);
+        { char buf[256]; snprintf(buf, sizeof(buf), Locale::Get("installDownloadMB"), osReleaseInfo.contains("size") ? osReleaseInfo["size"].get<float>() / (1024.0f * 1024.0f) : 0.0f); Text("%s", buf); }
 
         PopStyleColor();
     }

src/routes/install_prompt.cc

@@ -170,7 +170,41 @@ bool VerifyDownloadSignature(const std::string& file, const std::string& expecte
     return success;
 }
 #else
-static bool VerifyDownloadSignature(const std::string&, const std::string&) { return true; }
+#include <openssl/evp.h>
+#include <cstdio>
+
+static bool VerifyDownloadSignature(const std::string& filePath, const std::string& expectedHex)
+{
+    FILE* f = fopen(filePath.c_str(), "rb");
+    if (!f) return false;
+
+    EVP_MD_CTX* ctx = EVP_MD_CTX_new();
+    if (!ctx) { fclose(f); return false; }
+
+    bool success = false;
+    if (EVP_DigestInit_ex(ctx, EVP_sha256(), nullptr)) {
+        unsigned char buf[65536];
+        size_t n;
+        bool ok = true;
+        while ((n = fread(buf, 1, sizeof(buf), f)) > 0) {
+            if (!EVP_DigestUpdate(ctx, buf, n)) { ok = false; break; }
+        }
+        if (ok && !ferror(f)) {
+            unsigned char hash[EVP_MAX_MD_SIZE];
+            unsigned int hashLen = 0;
+            if (EVP_DigestFinal_ex(ctx, hash, &hashLen)) {
+                char hexStr[65] = {};
+                for (unsigned int i = 0; i < hashLen; i++)
+                    snprintf(hexStr + i * 2, 3, "%02x", hash[i]);
+                success = (expectedHex == hexStr);
+            }
+        }
+    }
+
+    EVP_MD_CTX_free(ctx);
+    fclose(f);
+    return success;
+}
 #endif
 
 TaskScheduler::TaskResult DownloadReleaseAssets(std::unique_ptr<double>& progress, const nlohmann::json& releaseInfo, const nlohmann::json& osReleaseInfo)

src/routes/installer.cc

@@ -112,6 +112,13 @@ void SetupImGuiScaling(GLFWwindow* window)
     ImFontConfig mem_cfg;
     mem_cfg.FontDataOwnedByAtlas = false;
 
+#ifdef _WIN32
+    constexpr static const auto fontPath = "C:/Windows/Fonts/seguiemj.ttf";
+    static ImFontConfig cfg;
+    cfg.MergeMode = true;
+    cfg.FontLoaderFlags |= ImGuiFreeTypeLoaderFlags_LoadColor;
+#endif
+
     // ── CJK embedded name-only fonts ─────────────────────────────────────────
     // Always merged: tiny subsets (~21 KB total) covering only the characters
     // used in language-selector display names (简体中文 繁體中文 日本語 한국어).
@@ -377,6 +384,7 @@ void SetupImGuiScaling(GLFWwindow* window)
 
     /** Explicitly set FreeType as the font loader to ensure color emoji support */
     io.Fonts->SetFontLoader(ImGuiFreeType::GetFontLoader());
+    io.Fonts->Build();
 
     io.DisplayFramebufferScale = ImVec2(scaleFactor, scaleFactor);