A hookshot_env.txt is passed around between players, so it may not set
switches that name a file or folder. The list had drifted: RX_DUMP_IR,
RX_SCREENSHOT, RX_FLASH_LOG and HOS_SCAN_DT take a folder or file
prefix and were still accepted with a bare name, and RX_VK_DUMP_NATIVE
wrote files into the current folder. Dump switches are now refused by
family (any name with _DUMP), the four are refused by name, and
tests/test_env_file.py scans host/ and gpu/ for switches whose value is
used as a path and fails when the shared file could set one.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

@@ -0,0 +1,65 @@
+/* (longshot) fopen for the files the game writes by itself in its folder and the user folder (longshot_options.ini, the

@@ -0,0 +34,4 @@
+        const HANDLE h = FindFirstFileA(path, &fd);
+        if (h == INVALID_HANDLE_VALUE) return NULL;
+        FindClose(h);
+        if (fd.dwReserved0 == 0xA000000CUL || fd.dwReserved0 == 0xA0000003UL || fd.dwReserved0 == 0xA000001DUL) {

@@ -458,0 +472,4 @@
+    /* RX_VK_DLSS_DIR: a folder on this PC named in full (C:\x on Windows, /x on Linux), not a share (\\server\x or
+       //server/x) or a device path; (longshot) not a relative one either, which NGX resolved against whatever folder
+       the game was started from, and no .. step out of the folder the value names */
+    if (!strcmp(name, "RX_VK_DLSS_DIR")) {

@@ -111,0 +111,4 @@
+# (longshot) what this builder writes at the top of a game folder (and in its bin): a link at one of these names, which a folder
+# from elsewhere can hold (an update builds into the folder as it is), was written through, and the file or folder it named
+# rewritten. tests/test_game_folder_links.py checks the list against the names this file joins to the folder
+FOLDER_WRITES = ["bin", "image.bin", "longshot_version.txt", "longshot_options.ini", "language.txt", "longshot.png", "longshot_pipelines.bin",

@@ -0,0 +35,4 @@
+
+# (the sources of the writes listed above, and how many plain fopen writes each keeps: switch-gated debugging only.
+# vk_draw.cpp: RX_VK_PROBE's two files and RX_VK_DRAW_STATS' file)
+ALLOWED = {"gpu/vk/vk_menu.cpp": 0, "gpu/vk/vk_draw.cpp": 3, "host/nn_applet.c": 0, "host/prompts.c": 0,

@@ -187,3 +188,3 @@
     exists(from, &f.written);
     f.size = file_size(src);
-    FILE* dst = fopen(to.c_str(), "wb");
+    FILE* dst = hos_fopen_write(to.c_str(), "wb");

@@ -0,0 +65,4 @@
+       written, and kept only if it is the file looked at) */
+    HANDLE h = plain ? CreateFileW(w, access, share, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL) : INVALID_HANDLE_VALUE;
+    const int opened = h != INVALID_HANDLE_VALUE;
+    const int same = opened && GetFileInformationByHandle(h, &is) && is.dwVolumeSerialNumber == was.dwVolumeSerialNumber &&

@@ -1507,1 +1553,3 @@
-    names (anywhere on this PC) into the game folder. The folder itself may be one. (Walked as a long path: #1468)"""
+# (Windows) the reparse points that are links: a symbolic link, a junction (mount point), WSL's link. OneDrive marks its files
+# with others, and those are files
+LINK_TAGS = (0xA000000C, 0xA0000003, 0xA000001D)

@@ -0,0 +77,4 @@
+    BY_HANDLE_FILE_INFORMATION was, is;
+    HANDLE h = INVALID_HANDLE_VALUE;
+    int same = 0, refuse = kind < 0;
+    if (kind == 0) {