Function assignProcessToJob

util/api_key_helper_windows.go:45–63

assignProcessToJob assigns a process to a Job Object. Returns the process handle which should be closed by the caller.

(job windows.Handle, pid int)

// assignProcessToJob assigns a process to a Job Object.
// Returns the process handle which should be closed by the caller.
func assignProcessToJob(job windows.Handle, pid int) (windows.Handle, error) {
	// Validate PID range to prevent overflow
	if pid < 0 || pid > 0x7FFFFFFF {
		return 0, fmt.Errorf("invalid process ID: %d", pid)
	}

	// Get child process handle (requires PROCESS_ALL_ACCESS)
	// #nosec G115 -- PID validated above to prevent overflow
	hProc, err := windows.OpenProcess(windows.PROCESS_ALL_ACCESS, false, uint32(pid))
	if err != nil {
		return 0, err
	}
	// Assign to Job
	if err = windows.AssignProcessToJobObject(job, hProc); err != nil {
		_ = windows.CloseHandle(hProc)
		return 0, err
	}
	return hProc, nil
}

// GetAPIKeyFromHelper executes a shell command to dynamically generate an API key.
// The command is executed in cmd.exe with a timeout controlled by the provided context.