{"record":{"id":"908c7a623353462f","repo":"openai/codex","slug":"command-cwd-must-be-valid-utf-8","errorCode":null,"errorMessage":"command cwd must be valid UTF-8","messagePattern":"command cwd must be valid UTF-8","errorType":"panic","errorClass":null,"httpStatus":null,"severity":"error","filePath":"codex-rs/sandboxing/src/landlock.rs","lineNumber":39,"sourceCode":"/// `docs/linux_sandbox.md` for the Linux semantics.\n#[allow(clippy::too_many_arguments)]\npub fn create_linux_sandbox_command_args_for_permission_profile(\n    command: Vec<String>,\n    command_cwd: &Path,\n    permission_profile: &PermissionProfile,\n    sandbox_policy_cwd: &Path,\n    use_legacy_landlock: bool,\n    allow_network_for_proxy: bool,\n) -> Vec<String> {\n    let permission_profile_json = serde_json::to_string(permission_profile)\n        .unwrap_or_else(|err| panic!(\"failed to serialize permission profile: {err}\"));\n    let sandbox_policy_cwd = sandbox_policy_cwd\n        .to_str()\n        .unwrap_or_else(|| panic!(\"cwd must be valid UTF-8\"))\n        .to_string();\n    let command_cwd = command_cwd\n        .to_str()\n        .unwrap_or_else(|| panic!(\"command cwd must be valid UTF-8\"))\n        .to_string();\n\n    let mut linux_cmd: Vec<String> = vec![\n        \"--sandbox-policy-cwd\".to_string(),\n        sandbox_policy_cwd,\n        \"--command-cwd\".to_string(),\n        command_cwd,\n        \"--permission-profile\".to_string(),\n        permission_profile_json,\n    ];\n    // Proxy-only networking requires bubblewrap's isolated network namespace.\n    if use_legacy_landlock && !allow_network_for_proxy {\n        linux_cmd.push(\"--use-legacy-landlock\".to_string());\n    }\n    if allow_network_for_proxy {\n        linux_cmd.push(\"--allow-network-for-proxy\".to_string());\n    }\n    linux_cmd.push(\"--\".to_string());","sourceCodeStart":21,"sourceCodeEnd":57,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/sandboxing/src/landlock.rs#L21-L57","documentation":"Error \"command cwd must be valid UTF-8\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/sandboxing/src/landlock.rs:39 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}