From e067c2858fad7c9ea1c0002b65664564b2503018 Mon Sep 17 00:00:00 2001
From: Amanda Sternberg <mandis.sternberg@gmail.com>
Date: Fri, 12 Sep 2025 13:06:46 +0200
Subject: [PATCH] Added safe_rename and tests for cross-device file moves (OS
 error 18)

---
 rslib/src/media/files.rs | 32 +++++++++++++++++++++++++++++++-
 1 file changed, 31 insertions(+), 1 deletion(-)

diff --git a/rslib/src/media/files.rs b/rslib/src/media/files.rs
index ce17b40bb..9526a4955 100644
--- a/rslib/src/media/files.rs
+++ b/rslib/src/media/files.rs
@@ -320,6 +320,18 @@ pub(crate) fn mtime_as_i64<P: AsRef<Path>>(path: P) -> io::Result<i64> {
         .as_millis() as i64)
 }
 
+pub(crate) fn safe_rename(src: &Path, dst: &Path) -> io::Result<()> {
+    match fs::rename(src, dst) {
+        Ok(_) => Ok(()),
+        Err(e) if e.raw_os_error() == Some(18) => {
+            fs::copy(src, dst)?;
+            fs::remove_file(src)?;
+            Ok(())
+        }
+        Err(e) => Err(e),
+    }
+}
+
 pub fn remove_files<S>(media_folder: &Path, files: &[S]) -> Result<()>
 where
     S: AsRef<str> + std::fmt::Debug,
@@ -344,7 +356,7 @@ where
         }
 
         // move file to trash, clobbering any existing file with the same name
-        fs::rename(&src_path, &dst_path)?;
+        safe_rename(&src_path, &dst_path)?;
 
         // mark it as modified, so we can expire it in the future
         let secs = time::SystemTime::now();
@@ -437,6 +449,8 @@ pub(crate) fn data_for_file(media_folder: &Path, fname: &str) -> Result<Option<V
 #[cfg(test)]
 mod test {
     use std::borrow::Cow;
+    use std::fs;
+    use super::safe_rename;
 
     use tempfile::tempdir;
 
@@ -550,4 +564,20 @@ mod test {
             Cow::<str>::Owned(format!("{}_", " ".repeat(MAX_MEDIA_FILENAME_LENGTH - 2)))
         );
     }
+    #[test]
+    fn safe_rename_moves_file() {
+        let dir = tempdir().unwrap();
+        let src = dir.path().join("test_src.txt");
+        let dst = dir.path().join("test_dst.txt");
+
+        fs::write(&src, b"hello world").unwrap();
+        safe_rename(&src, &dst).unwrap();
+
+        assert!(dst.exists());
+        assert!(!src.exists());
+        let contents = fs::read(&dst).unwrap();
+        assert_eq!(contents, b"hello world");
+
+        fs::remove_file(&dst).unwrap();
+    }
 }