fix: report unsafe recording paths distinctly from invalid ones

Splitting the empty-path and os_is_path_safe() checks lets the IPC error
and the log line say which one tripped, so a rejected symlink/junction
directory is diagnosable instead of just "Invalid recording path."

Also switch osn-encoders.hpp to a quoted include, matching every other
consumer of that header.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: summeroff

obs-studio-server/source/osn-advanced-recording.cpp

@@ -21,7 +21,7 @@
 #include "shared.hpp"
 #include "osn-audio-track.hpp"
 #include "osn-file-output.hpp"
-#include <osn-encoders.hpp>
+#include "osn-encoders.hpp"
 #include <util/platform.h>
 
 void osn::IAdvancedRecording::Register(ipc::server &srv)
@@ -282,10 +282,15 @@ void osn::IAdvancedRecording::Start(void *data, const int64_t id, const std::vec
 	}
 
 	obs_output_set_video_encoder(recording->GetOutput(), recording->videoEncoder);
-	if (!recording->path.size() || !os_is_path_safe(recording->path.c_str())) {
+
+	if (!recording->path.size()) {
 		PRETTY_ERROR_RETURN(ErrorCode::InvalidReference, "Invalid recording path.");
 	}
 
+	if (!os_is_path_safe(recording->path.c_str())) {
+		PRETTY_ERROR_RETURN(ErrorCode::InvalidReference, "Unsafe recording path: symbolic links and junctions are not allowed.");
+	}
+
 	std::string path = recording->path;
 
 	char lastChar = path.back();

obs-studio-server/source/osn-advanced-replay-buffer.cpp

@@ -202,10 +202,14 @@ void osn::IAdvancedReplayBuffer::Start(void *data, const int64_t id, const std::
 
 	obs_output_set_video_encoder(replayBuffer->GetOutput(), videoEncoder);
 
-	if (!replayBuffer->path.size() || !os_is_path_safe(replayBuffer->path.c_str())) {
+	if (!replayBuffer->path.size()) {
 		PRETTY_ERROR_RETURN(ErrorCode::InvalidReference, "Invalid recording path.");
 	}
 
+	if (!os_is_path_safe(replayBuffer->path.c_str())) {
+		PRETTY_ERROR_RETURN(ErrorCode::InvalidReference, "Unsafe recording path: symbolic links and junctions are not allowed.");
+	}
+
 	const char *rbPrefix = replayBuffer->prefix.c_str();
 	const char *rbSuffix = replayBuffer->suffix.c_str();
 	int64_t rbSize = replayBuffer->usesStream ? 0 : 512;

obs-studio-server/source/osn-simple-recording.cpp

@@ -398,10 +398,14 @@ void osn::ISimpleRecording::Start(void *data, const int64_t id, const std::vecto
 		obs_output_set_video_encoder(recording->GetOutput(), recording->videoEncoder);
 	}
 
-	if (!recording->path.size() || !os_is_path_safe(recording->path.c_str())) {
+	if (!recording->path.size()) {
 		PRETTY_ERROR_RETURN(ErrorCode::InvalidReference, "Invalid recording path.");
 	}
 
+	if (!os_is_path_safe(recording->path.c_str())) {
+		PRETTY_ERROR_RETURN(ErrorCode::InvalidReference, "Unsafe recording path: symbolic links and junctions are not allowed.");
+	}
+
 	std::string path = recording->path;
 
 	char lastChar = path.back();

obs-studio-server/source/osn-simple-replay-buffer.cpp

@@ -144,10 +144,14 @@ void osn::ISimpleReplayBuffer::Start(void *data, const int64_t id, const std::ve
 
 	obs_output_set_video_encoder(replayBuffer->GetOutput(), videoEncoder);
 
-	if (!replayBuffer->path.size() || !os_is_path_safe(replayBuffer->path.c_str())) {
+	if (!replayBuffer->path.size()) {
 		PRETTY_ERROR_RETURN(ErrorCode::InvalidReference, "Invalid recording path.");
 	}
 
+	if (!os_is_path_safe(replayBuffer->path.c_str())) {
+		PRETTY_ERROR_RETURN(ErrorCode::InvalidReference, "Unsafe recording path: symbolic links and junctions are not allowed.");
+	}
+
 	const char *rbPrefix = replayBuffer->prefix.c_str();
 	const char *rbSuffix = replayBuffer->suffix.c_str();
 	int64_t rbSize = replayBuffer->usesStream ? 0 : 512;