mirror of
https://github.com/openai/codex.git
synced 2026-05-30 07:50:17 +00:00
7c9731c9af
## Summary In https://github.com/openai/codex/pull/21584, we disabled doctests for crates that lack any doctests. We can enforce that property via `cargo shear --deny-warnings`: crates that lack doctests will be flagged if doctests are enabled, and crates with doctests will be flagged if doctests are disabled. A few additional notes: - By adding `--deny-warnings`, `cargo shear` also flagged a number of modules that were not reachable at all. Some of those have been removed. - This PR removes a usage of `windows_modules!` (since `cargo shear` and `rustfmt` couldn't see through it) in favor of simple `#[cfg(target_os = "windows")]` macros. As a consequence, many of these files exhibit churn in this PR, since they weren't being formatted by `rustfmt` at all on main. - Again, to make the code more analyzable, this PR also removes some usages of `#[path = "cwd_junction.rs"]` in favor of a more standard module structure. The bin sidecar structure is still retained, but, e.g., `windows-sandbox-rs/src/bin/command_runner.rs` was moved to `windows-sandbox-rs/src/bin/command_runner/main.rs`, and so on. --------- Co-authored-by: Codex <noreply@openai.com>
86 lines
2.7 KiB
Rust
86 lines
2.7 KiB
Rust
use anyhow::Result;
|
|
use anyhow::anyhow;
|
|
use windows_sys::Win32::Foundation::GetLastError;
|
|
use windows_sys::Win32::Foundation::HLOCAL;
|
|
use windows_sys::Win32::Foundation::LocalFree;
|
|
use windows_sys::Win32::Security::Cryptography::CRYPT_INTEGER_BLOB;
|
|
use windows_sys::Win32::Security::Cryptography::CRYPTPROTECT_LOCAL_MACHINE;
|
|
use windows_sys::Win32::Security::Cryptography::CRYPTPROTECT_UI_FORBIDDEN;
|
|
use windows_sys::Win32::Security::Cryptography::CryptProtectData;
|
|
use windows_sys::Win32::Security::Cryptography::CryptUnprotectData;
|
|
|
|
fn make_blob(data: &[u8]) -> CRYPT_INTEGER_BLOB {
|
|
CRYPT_INTEGER_BLOB {
|
|
cbData: data.len() as u32,
|
|
pbData: data.as_ptr() as *mut u8,
|
|
}
|
|
}
|
|
|
|
#[allow(clippy::unnecessary_mut_passed)]
|
|
pub fn protect(data: &[u8]) -> Result<Vec<u8>> {
|
|
let mut in_blob = make_blob(data);
|
|
let mut out_blob = CRYPT_INTEGER_BLOB {
|
|
cbData: 0,
|
|
pbData: std::ptr::null_mut(),
|
|
};
|
|
let ok = unsafe {
|
|
CryptProtectData(
|
|
&mut in_blob,
|
|
std::ptr::null(),
|
|
std::ptr::null(),
|
|
std::ptr::null_mut(),
|
|
std::ptr::null_mut(),
|
|
// Use machine scope so elevated and non-elevated processes can decrypt.
|
|
CRYPTPROTECT_UI_FORBIDDEN | CRYPTPROTECT_LOCAL_MACHINE,
|
|
&mut out_blob,
|
|
)
|
|
};
|
|
if ok == 0 {
|
|
return Err(anyhow!("CryptProtectData failed: {}", unsafe {
|
|
GetLastError()
|
|
}));
|
|
}
|
|
let slice =
|
|
unsafe { std::slice::from_raw_parts(out_blob.pbData, out_blob.cbData as usize) }.to_vec();
|
|
unsafe {
|
|
if !out_blob.pbData.is_null() {
|
|
LocalFree(out_blob.pbData as HLOCAL);
|
|
}
|
|
}
|
|
Ok(slice)
|
|
}
|
|
|
|
#[allow(clippy::unnecessary_mut_passed)]
|
|
pub fn unprotect(blob: &[u8]) -> Result<Vec<u8>> {
|
|
let mut in_blob = make_blob(blob);
|
|
let mut out_blob = CRYPT_INTEGER_BLOB {
|
|
cbData: 0,
|
|
pbData: std::ptr::null_mut(),
|
|
};
|
|
let ok = unsafe {
|
|
CryptUnprotectData(
|
|
&mut in_blob,
|
|
std::ptr::null_mut(),
|
|
std::ptr::null(),
|
|
std::ptr::null_mut(),
|
|
std::ptr::null_mut(),
|
|
// Use machine scope so elevated and non-elevated processes can decrypt.
|
|
CRYPTPROTECT_UI_FORBIDDEN | CRYPTPROTECT_LOCAL_MACHINE,
|
|
&mut out_blob,
|
|
)
|
|
};
|
|
if ok == 0 {
|
|
return Err(anyhow!("CryptUnprotectData failed: {}", unsafe {
|
|
GetLastError()
|
|
}));
|
|
}
|
|
let slice =
|
|
unsafe { std::slice::from_raw_parts(out_blob.pbData, out_blob.cbData as usize) }.to_vec();
|
|
unsafe {
|
|
if !out_blob.pbData.is_null() {
|
|
LocalFree(out_blob.pbData as HLOCAL);
|
|
}
|
|
}
|
|
Ok(slice)
|
|
}
|