socketwrapper 0.1.0__tar.gz → 0.1.1__tar.gz

{socketwrapper-0.1.0/socketwrapper.egg-info → socketwrapper-0.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: socketwrapper
-Version: 0.1.0
+Version: 0.1.1
 Summary: high level socket and pipe wrappers
 Author: Felipe A Hernandez
 Author-email: ergoithz@gmail.com
@@ -109,6 +109,13 @@ uv pip install 'socketwrapper[msgpack]'
 
 ## Changelog
 
+### 0.1.1 - 2026.07.03
+
+#### Bugfixes
+
+- Tighten Windows named pipes permissions.
+- Avoid invalid Windows handles potentially causing descriptor leaks.
+
 ### 0.1.0 - 2026.01.22
 
 #### Breaking

{socketwrapper-0.1.0 → socketwrapper-0.1.1}/README.md

@@ -54,6 +54,13 @@ uv pip install 'socketwrapper[msgpack]'
 
 ## Changelog
 
+### 0.1.1 - 2026.07.03
+
+#### Bugfixes
+
+- Tighten Windows named pipes permissions.
+- Avoid invalid Windows handles potentially causing descriptor leaks.
+
 ### 0.1.0 - 2026.01.22
 
 #### Breaking

{socketwrapper-0.1.0 → socketwrapper-0.1.1}/pyproject.toml

@@ -5,7 +5,7 @@ build-backend = 'setuptools.build_meta'
 [project]
 name = 'socketwrapper'
 description = 'high level socket and pipe wrappers'
-version = '0.1.0'
+version = '0.1.1'
 requires-python = '>=3.12'
 keywords = ['socket', 'pipe', 'ipc', 'asyncio', 'multiprocessing']
 readme = { file = 'README.md', content-type = 'text/markdown' }
@@ -139,6 +139,7 @@ ignore = [
     # Ignore pylint broken nonsense
     'PLR2004',  # declare every single constant as a variable (WTF!)
     'PLR0402',  # import namespaces in the same way as properties (WTF!)
+    'PLW0717',  # too many statements in try/except (WTF!!)
     # Ignore tryceratops nonsense
     'TRY301',  # raising inside try/except (WTF!)
     # Just broken

{socketwrapper-0.1.0 → socketwrapper-0.1.1}/socketwrapper/__init__.py

@@ -320,7 +320,7 @@ class SocketWrapper(_utils.ClosingContext):
 
     @property
     def inheritable(self) -> bool:
-        """Get whether or not this socket is inheritable by subprocesses.
+        """Whether or not this socket is inheritable by subprocesses.
 
         :returns: true if the socket is inheritable by subprocesses.
 
@@ -450,7 +450,7 @@ class MessageWrapper(_utils.ClosingContext, typing_extensions.Generic[R, W, KS])
 
     @property
     def inheritable(self) -> bool:
-        """Get whether or not this socket is inheritable by subprocesses.
+        """Whether or not this socket is inheritable by subprocesses.
 
         :returns: true if the socket is inheritable by subprocesses.
 
@@ -486,7 +486,7 @@ class MessageReader(MessageWrapper[R, typing.Any, KSR], typing_extensions.Generi
 
     @property
     def _frames(self) -> StreamFrames | None:
-        """Get stream frames function."""
+        """Stream frames function."""
         return self.framing.frames if self._raw._reader.is_stream else None
 
     def recv(self, timeout: float | None = None) -> R:

{socketwrapper-0.1.0 → socketwrapper-0.1.1}/socketwrapper/_io.py

@@ -95,7 +95,7 @@ class Consumer[Q, R, IO_R]:
 
     @functools.cached_property
     def selector(self) -> selectors.BaseSelector:
-        """Get selector for class."""
+        """Selector for class."""
         selector = selectors.DefaultSelector()
         selector.register(self.sock, selectors.EVENT_WRITE if self._writer else selectors.EVENT_READ)
         return selector

{socketwrapper-0.1.0 → socketwrapper-0.1.1}/socketwrapper/_nt.py

@@ -19,10 +19,18 @@ from . import _utils
 
 IOBuffer = collections.abc.Buffer | ctypes.Array | ctypes.c_char_p
 
+advapi32 = ctypes.windll.advapi32
 kernel32 = ctypes.windll.kernel32
 ntdll = ctypes.windll.ntdll
 winsock2 = ctypes.windll.ws2_32
 
+ignored_io_status_block = (ctypes.c_void_p * 2)()
+
+PIPE_SEC = b'D:P(D;;GA;;;NU)(A;;GA;;;CO)'
+# D:P - Protected DACL — blocks inherited ACEs
+# (D;;GA;;; - U) - Deny NETWORK (S-1-5-2) all access
+# (A;;GA;;;CO) - Allow Creator Owner (S-1-3-0) all access, resolved to the pipe creator's SID
+
 FILE_TYPE_PIPE = 0x03
 WINSOCK_FIONREAD = 0x4004667F
 
@@ -290,7 +298,7 @@ class StreamOperation(OperationBase):
         super().__init__(handle)
         self._info = FilePipeLocalInformation()
         self._info_args = (
-            self.handle, ctypes.byref(ctypes.c_void_p()), ctypes.byref(self._info), ctypes.sizeof(self._info),
+            self.handle, ctypes.byref(ignored_io_status_block), ctypes.byref(self._info), ctypes.sizeof(self._info),
             FILE_PIPE_LOCAL_INFORMATION,
             )
 
@@ -336,11 +344,22 @@ class StreamOperation(OperationBase):
 
 def resolve_pipe_handle(fd: int | None = None, handle: int | None = None) -> tuple[int, int, bool, bool, bool]:
     """Get a valid fd, handle, and whether or not it's a valid pipe."""
-    fd = msvcrt.open_osfhandle(handle, os.O_BINARY | os.O_NOINHERIT) if fd is None else fd
-    handle = msvcrt.get_osfhandle(fd) if handle is None else handle
-    is_overlapped = is_overlapped_file(handle)
-    is_named_pipe, is_message = is_message_named_pipe(handle)
-    is_pipe = is_named_pipe or kernel32.GetFileType(handle) == FILE_TYPE_PIPE
+    fd, created = (
+        (msvcrt.open_osfhandle(handle, os.O_BINARY | os.O_NOINHERIT), True) if fd is None else
+        (fd, False)
+        )
+    try:
+        handle = msvcrt.get_osfhandle(fd) if handle is None else handle
+        is_overlapped = is_overlapped_file(handle)
+        is_named_pipe, is_message = is_message_named_pipe(handle)
+        is_pipe = is_named_pipe or kernel32.GetFileType(handle) == FILE_TYPE_PIPE
+
+    except Exception:
+        if created:
+            os.close(fd)
+
+        raise
+
     return fd, handle, is_pipe, is_overlapped, is_message
 
 
@@ -389,15 +408,19 @@ def is_message_named_pipe(handle: int) -> tuple[bool, bool]:
 
 def overlapped_pipe() -> tuple[int, int]:
     """Create overlapped named pipe pair (r,w) and return handlers."""
-    name = f'\\\\.\\pipe\\iocppipe_{uuid.uuid4().hex}'.encode('ascii')
-    security = SecurityAttributes(
-        nLength=ctypes.sizeof(SecurityAttributes),
-        lpSecurityDescriptor=None,
-        bInheritHandle=False,
-        )
+    sd_ptr = ctypes.c_void_p()
+    if not advapi32.ConvertStringSecurityDescriptorToSecurityDescriptorA(PIPE_SEC, 1, ctypes.byref(sd_ptr), None):
+        raise ctypes.WinError()
 
+    name = f'\\\\.\\pipe\\iocppipe_{uuid.uuid4().hex}'.encode('ascii')
     rhandle = whandle = -1
     try:
+        security = SecurityAttributes(
+            nLength=ctypes.sizeof(SecurityAttributes),
+            lpSecurityDescriptor=sd_ptr,
+            bInheritHandle=False,
+            )
+
         rhandle = kernel32.CreateNamedPipeA(name, PIPE_INBOUND_OVERLAPPED, 0, 1, BUFFER_SIZE, BUFFER_SIZE, 0,
                                             ctypes.byref(security))
         if rhandle == -1:
@@ -417,6 +440,9 @@ def overlapped_pipe() -> tuple[int, int]:
         close_handle(handle=whandle)
         raise
 
+    finally:
+        kernel32.LocalFree(sd_ptr)
+
     return rhandle, whandle
 
 

{socketwrapper-0.1.0 → socketwrapper-0.1.1}/socketwrapper/_utils.py

@@ -174,7 +174,7 @@ class Deadline:
 
     @property
     def remaining(self) -> float:
-        """Get time left before deadline."""
+        """Time left before deadline."""
         return max(0, self.deadline - time.monotonic())
 
     def __init__(self, *, deadline: float | None = None, timeout: float = 0, error: str | None = None) -> None:
@@ -251,7 +251,7 @@ class CrossLock:
 
     @property
     def locked(self) -> bool:
-        """Get whether lock is acquired or not."""
+        """Whether lock is acquired or not."""
         return self._lock.locked()
 
     def acquire(self, *, timeout: float | None = None) -> bool:

{socketwrapper-0.1.0 → socketwrapper-0.1.1/socketwrapper.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: socketwrapper
-Version: 0.1.0
+Version: 0.1.1
 Summary: high level socket and pipe wrappers
 Author: Felipe A Hernandez
 Author-email: ergoithz@gmail.com
@@ -109,6 +109,13 @@ uv pip install 'socketwrapper[msgpack]'
 
 ## Changelog
 
+### 0.1.1 - 2026.07.03
+
+#### Bugfixes
+
+- Tighten Windows named pipes permissions.
+- Avoid invalid Windows handles potentially causing descriptor leaks.
+
 ### 0.1.0 - 2026.01.22
 
 #### Breaking

{socketwrapper-0.1.0 → socketwrapper-0.1.1}/socketwrapper.egg-info/zip-safe

@@ -1 +1 @@
-
+