mirror of
https://github.com/RetroPortingToolKit/psxrecomp
synced 2026-10-28 02:56:36 -04:00
Matthew Stanley
fe42da2744
Keeps both lines: master's PGXP session, draw-distance clamps, masked rejects and saturated-winding NCLIP; the release's render-pass kit additions, verified media/disc extents, timeline/present rings, cull-scale sites. Overlay ABI v30. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
40 lines
1.4 KiB
C
40 lines
1.4 KiB
C
/* overlay_path_canon.h — filesystem-resolved path canonicalization for the
|
|
* overlay cache's confinement boundary. A lexical prefix check can never be
|
|
* made correct against `..` segments or reparse points (symlinks/junctions):
|
|
* the only sound comparison resolves BOTH sides through the filesystem, the
|
|
* same way LoadLibrary/dlopen will resolve them, and prefix-checks the
|
|
* results. All functions fail CLOSED (0) on any resolution error. */
|
|
#ifndef PSXRECOMP_OVERLAY_PATH_CANON_H
|
|
#define PSXRECOMP_OVERLAY_PATH_CANON_H
|
|
|
|
#include <stddef.h>
|
|
|
|
#ifdef _WIN32
|
|
#define WIN32_LEAN_AND_MEAN
|
|
#include <windows.h>
|
|
#endif
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
/* Resolve `path` (file or directory; must exist) to its final normalized
|
|
* form — `..`, short names, and every reparse point resolved. Returns 1 and
|
|
* NUL-terminates `out` on success; 0 on any failure (missing, inaccessible,
|
|
* result longer than cap). */
|
|
int overlay_path_canonicalize(const char *path, char *out, size_t cap);
|
|
|
|
#ifdef _WIN32
|
|
/* Same resolution from an already-open handle. Lets a caller open the file
|
|
* with restrictive sharing FIRST and validate the canonical identity of the
|
|
* object it actually holds — closing the validate-then-swap (TOCTOU) window
|
|
* before LoadLibrary. */
|
|
int overlay_path_canonicalize_handle(HANDLE h, char *out, size_t cap);
|
|
#endif
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif /* PSXRECOMP_OVERLAY_PATH_CANON_H */
|