Function activation_source_open

src/cli/activation_transaction.c:1474–1560

}

static bool activation_source_open(const char *path, activation_native_file_t *file_out) {
    *file_out = ACTIVATION_INVALID_FILE;
    char *directory = NULL;
    char *name = NULL;
    if (!activation_target_parts(path, &directory, &name)) {
        return false;
    }
#ifdef _WIN32
    activation_file_identity_t directory_identity;
    activation_file_identity_t expected;
    bool exists = false;
    bool src_dir_ok = activation_source_directory_secure(directory, &directory_identity);
    /* The source (a downloaded release bundle) follows the machine's
     * default-owner policy; its bytes are pinned by identity recheck plus the
     * staged copy's build-fingerprint validation, so a trusted owner
     * (user/Administrators/SYSTEM) is sufficient here. Targets keep the
     * exact-current-owner rule. */
    bool snapshot_ok =
        src_dir_ok && activation_external_snapshot_with_owner(path, false, &exists, &expected);
    if (!src_dir_ok || !snapshot_ok || !exists) {
        free(directory);
        free(name);
        return false;
    }
    wchar_t *wide = activation_utf8_to_wide(path);
    if (!wide) {
        free(directory);
        free(name);
        return false;
    }
    HANDLE file =
        CreateFileW(wide, GENERIC_READ | FILE_READ_ATTRIBUTES | READ_CONTROL,
                    FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE, NULL, OPEN_EXISTING,
                    FILE_FLAG_OPEN_REPARSE_POINT | FILE_FLAG_SEQUENTIAL_SCAN, NULL);
    free(wide);
    activation_file_identity_t actual;
    activation_file_identity_t directory_now;
    bool valid = file != INVALID_HANDLE_VALUE && activation_windows_identity(file, &actual, true) &&
                 activation_windows_owner_is_trusted(file) && activation_windows_acl_secure(file) &&
                 activation_identity_equal(&actual, &expected) &&
                 activation_source_directory_secure(directory, &directory_now) &&
                 activation_identity_equal(&directory_now, &directory_identity);
    if (!valid) {
        if (file != INVALID_HANDLE_VALUE) {
            (void)CloseHandle(file);
        }
        free(directory);
        free(name);
        return false;
    }
#else
    int directory_fd = -1;
    activation_file_identity_t directory_identity;
    if (!activation_directory_secure(directory, &directory_fd, &directory_identity)) {
        free(directory);
        free(name);
        return false;
    }