Function open_read_fd

plugins/codex-security/scripts/windows_scan_local_files.py:434–465

Open a verified regular file and return an owned binary read descriptor.

(scan_dir: Path, relative_path: str, context: str)

def open_read_fd(scan_dir: Path, relative_path: str, context: str) -> int:
    """Open a verified regular file and return an owned binary read descriptor."""

    try:
        with _locked_parent(scan_dir, relative_path, create=False) as (parent_path, leaf_name):
            path = parent_path / leaf_name
            handle = _create_file(
                path,
                access=_GENERIC_READ | _FILE_READ_ATTRIBUTES,
                # Denying write/delete sharing keeps the opened contents stable.
                share=_FILE_SHARE_READ,
                disposition=_OPEN_EXISTING,
                flags=_FILE_FLAG_OPEN_REPARSE_POINT,
            )
            assert handle is not None and handle.value is not None
            try:
                _verify_regular_file(handle.value, path)
                raw_handle = handle.detach()
                try:
                    assert _msvcrt is not None
                    return _msvcrt.open_osfhandle(raw_handle, os.O_RDONLY | os.O_BINARY)
                except BaseException:
                    _close_handle(raw_handle)
                    raise
            finally:
                handle.close()
    except WindowsScanLocalFileError as exc:
        raise WindowsScanLocalFileError(
            exc.errno,
            f"{context}: {exc.strerror}",
            exc.filename,
        ) from exc


def _write_all(handle: int, payload: bytes) -> None: