{"record":{"id":"8778761958b4f880","repo":"openai/codex","slug":"copysid-tokenuser-failed","errorCode":null,"errorMessage":"CopySid(TokenUser) failed: {}","messagePattern":"CopySid\\(TokenUser\\) failed: (.+?)","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"codex-rs/windows-sandbox-rs/src/token.rs","lineNumber":314,"sourceCode":"            GetLastError()\n        ));\n    }\n    let token_user: TOKEN_USER = std::ptr::read_unaligned(user_buf.as_ptr() as *const TOKEN_USER);\n    let sid_len = GetLengthSid(token_user.User.Sid);\n    if sid_len == 0 {\n        return Err(anyhow!(\n            \"GetLengthSid(TokenUser) failed: {}\",\n            GetLastError()\n        ));\n    }\n    let mut user_sid_bytes = vec![0u8; sid_len as usize];\n    if CopySid(\n        sid_len,\n        user_sid_bytes.as_mut_ptr() as *mut c_void,\n        token_user.User.Sid,\n    ) == 0\n    {\n        return Err(anyhow!(\"CopySid(TokenUser) failed: {}\", GetLastError()));\n    }\n    Ok(user_sid_bytes)\n}\n\nunsafe fn enable_single_privilege(h_token: HANDLE, name: &str) -> Result<()> {\n    let mut luid = LUID {\n        LowPart: 0,\n        HighPart: 0,\n    };\n    let ok = LookupPrivilegeValueW(std::ptr::null(), to_wide(name).as_ptr(), &mut luid);\n    if ok == 0 {\n        return Err(anyhow!(\"LookupPrivilegeValueW failed: {}\", GetLastError()));\n    }\n    let mut tp: TOKEN_PRIVILEGES = std::mem::zeroed();\n    tp.PrivilegeCount = 1;\n    tp.Privileges[0].Luid = luid;\n    tp.Privileges[0].Attributes = 0x00000002; // SE_PRIVILEGE_ENABLED\n    let ok2 = AdjustTokenPrivileges(","sourceCodeStart":296,"sourceCodeEnd":332,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/windows-sandbox-rs/src/token.rs#L296-L332","documentation":"Error \"CopySid(TokenUser) failed: {}\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/windows-sandbox-rs/src/token.rs:314 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}