[GH-ISSUE #326] Add handle-relative I/O and real-Windows NTFS adversarial verifier #174

New issue

Open

opened 2026-10-15 18:22:02 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-15 18:22:02 +00:00

Owner

Originally created by @morluto on GitHub (Jul 20, 2026).
Original GitHub issue: https://github.com/morluto/rea/issues/326

Perform snapshot reads, writes, copies, and cleanup through retained or revalidated handles. Run a real non-admin Windows verifier against NTFS with symlinks, junctions, mount points, component replacement, and cleanup escape attempts.

Acceptance:

Target admission and snapshot creation consume authorized handles, not fresh pathname opens.
Replacing a path component has no effect on the retained handle or produces an identity mismatch.
Diagnostics preserve requested path, final path, volume identity, and rejected reparse tag.

Part of #289.

Originally created by @morluto on GitHub (Jul 20, 2026). Original GitHub issue: https://github.com/morluto/rea/issues/326 Perform snapshot reads, writes, copies, and cleanup through retained or revalidated handles. Run a real non-admin Windows verifier against NTFS with symlinks, junctions, mount points, component replacement, and cleanup escape attempts. Acceptance: - Target admission and snapshot creation consume authorized handles, not fresh pathname opens. - Replacing a path component has no effect on the retained handle or produces an identity mismatch. - Diagnostics preserve requested path, final path, volume identity, and rejected reparse tag. Part of #289.

bsakaguchi added the

area: runtime

P1: high

enhancement

labels

2026-10-15 18:22:02 +00:00

bsakaguchi referenced this issue

2026-10-15 18:28:32 +00:00

[GH-ISSUE #2383] [Tracker] Audit analysis and debugging coverage for the TIOBE top 100 languages (October 2026) #794

bsakaguchi referenced this issue

2026-10-16 21:11:51 +00:00

[PR #207] [MERGED] fix(native): harden command capture edge cases #1858