Function search_scratch_file

src/mcp/mcp.c:9746–9769

Create / -XXXXXX exclusively and return a stream on the * descriptor. On failure `path_out` is emptied so cleanup skips it. */

/* Create <scratch>/<basename>-XXXXXX exclusively and return a stream on the
 * descriptor. On failure `path_out` is emptied so cleanup skips it. */
static FILE *search_scratch_file(const char *dir, const char *basename, char *path_out,
                                 size_t path_sz) {
    path_out[0] = '\0';
    int written = snprintf(path_out, path_sz, "%s/%s-XXXXXX", dir, basename);
    if (written <= 0 || (size_t)written >= path_sz) {
        path_out[0] = '\0';
        return NULL;
    }
    int descriptor = cbm_mkstemp(path_out);
    if (descriptor < 0) {
        path_out[0] = '\0';
        return NULL;
    }
    /* Binary mode: the file list uses an explicit per-platform record separator
     * (NUL for xargs -0, newline for PowerShell) that CRLF translation would
     * corrupt — the same reason the previous code opened it "wb". */
    FILE *stream = mcp_fdopen(descriptor, "wb");
    if (!stream) {
        (void)mcp_close(descriptor);
        (void)cbm_unlink(path_out);
        path_out[0] = '\0';
    }
    return stream;
}

/* Anchored cleanup: removes both scratch files and the private directory. Safe
 * to call more than once and on any partially-initialised scratch, so every