Fatal error if TrackedFileDescriptor and TrackedDispatchIO have not been closed in deinit.

We cannot depend on calling .close() in deinit since it’s non-failable. As a result, Subprocess needs to manually call .close() at the conclusion of the read/write operation. fatalError in deinit to ensures the FileDescriptor/DispatchIO will not leak.

Author: iCharlesHu

Sources/Subprocess/Configuration.swift

@@ -632,26 +632,7 @@ internal struct TrackedFileDescriptor: ~Copyable {
             return
         }
 
-        do {
-            try fileDescriptor.close()
-        } catch {
-            guard let errno: Errno = error as? Errno else {
-                return
-            }
-            // Getting `.badFileDescriptor` suggests that the file descriptor
-            // might have been closed unexpectedly. This can pose security risks
-            // if another part of the code inadvertently reuses the same file descriptor
-            // number. This problem is especially concerning on Unix systems due to POSIX’s
-            // guarantee of using the lowest available file descriptor number, making reuse
-            // more probable. We use `fatalError` upon receiving `.badFileDescriptor`
-            // to prevent accidentally closing a different file descriptor.
-            guard errno != .badFileDescriptor else {
-                fatalError(
-                    "FileDescriptor \(fileDescriptor.rawValue) is already closed"
-                )
-            }
-            // Otherwise ignore the error
-        }
+        fatalError("FileDescriptor \(self.fileDescriptor.rawValue) was not closed")
     }
 
     internal func platformDescriptor() -> PlatformFileDescriptor {
@@ -695,7 +676,7 @@ internal struct TrackedDispatchIO: ~Copyable {
             return
         }
 
-        dispatchIO.close()
+        fatalError("DispatchIO \(self.dispatchIO) was not closed")
     }
 }
 #endif

Sources/Subprocess/IO/Output.swift

@@ -143,9 +143,12 @@ public struct BytesOutput: OutputProtocol {
         from diskIO: consuming TrackedPlatformDiskIO?
     ) async throws -> [UInt8] {
         #if os(Windows)
-        return try await diskIO?.fileDescriptor.read(upToLength: self.maxSize) ?? []
+        let result = try await diskIO?.fileDescriptor.read(upToLength: self.maxSize) ?? []
+        try diskIO?.safelyClose()
+        return result
         #else
         let result = try await diskIO!.dispatchIO.read(upToLength: self.maxSize)
+        try diskIO?.safelyClose()
         return result?.array() ?? []
         #endif
     }
@@ -261,12 +264,13 @@ extension OutputProtocol {
         if OutputType.self == Void.self {
             return () as! OutputType
         }
-
         #if os(Windows)
         let result = try await diskIO?.fileDescriptor.read(upToLength: self.maxSize)
+        try diskIO?.safelyClose()
         return try self.output(from: result ?? [])
         #else
         let result = try await diskIO!.dispatchIO.read(upToLength: self.maxSize)
+        try diskIO?.safelyClose()
         return try self.output(from: result ?? .empty)
         #endif
     }