mirror of
https://github.com/openai/codex.git
synced 2026-10-18 17:18:52 +00:00
zm-oai
de3721a7be
## Why Malformed `deny_read_acl_state.json` previously caused deny-read ACL reconciliation to fail. Recovery must restore bookkeeping without removing unknown existing restrictions or modifying a linked file's contents. ## What changed - Retry malformed reads for up to two seconds, then rebuild bookkeeping only after excluding active writers and successfully applying current deny-read ACLs. Preserve unknown historical denies and continue propagating I/O errors. - Validate the opened state file before reading or writing, rejecting reparse points and files with multiple hard links. - Write state in place without truncating before validation, preserving file identity and permissions. Retry sharing violations during writes while preventing replacement through delete access. ## Testing Add Windows tests for corrupt-state recovery, linked-file rejection, concurrent writer and delete-handle behavior, file identity and ACL preservation, and subsequent permission-profile changes. Extend the elevated sandbox integration test to verify that denied reads remain blocked after recovery while allowed writes and deletes succeed. GitOrigin-RevId: 4aca32df00d015df3763fdc447ffdfbe3fd6cec0