From 382ed528dc83228665c84b2e7b91436fea33b31c Mon Sep 17 00:00:00 2001
From: Jubilee Young <workingjubilee@gmail.com>
Date: Tue, 11 Jun 2024 22:55:55 -0700
Subject: [PATCH] Make PathBuf less Ok with adding UTF-16 then `into_string`

---
 std/src/sys_common/wtf8.rs |  3 +++
 std/tests/windows.rs       | 14 ++++++++++++++
 2 files changed, 17 insertions(+)
 create mode 100644 std/tests/windows.rs

diff --git a/std/src/sys_common/wtf8.rs b/std/src/sys_common/wtf8.rs
index bb1e505285bf1..84128a4b595f7 100644
--- a/std/src/sys_common/wtf8.rs
+++ b/std/src/sys_common/wtf8.rs
@@ -477,6 +477,9 @@ impl Wtf8Buf {
     /// Part of a hack to make PathBuf::push/pop more efficient.
     #[inline]
     pub(crate) fn as_mut_vec_for_path_buf(&mut self) -> &mut Vec<u8> {
+        // FIXME: this function should not even exist, as it implies violating Wtf8Buf invariants
+        // For now, simply assume that is about to happen.
+        self.is_known_utf8 = false;
         &mut self.bytes
     }
 }
diff --git a/std/tests/windows.rs b/std/tests/windows.rs
new file mode 100644
index 0000000000000..9f7596f1bc2c0
--- /dev/null
+++ b/std/tests/windows.rs
@@ -0,0 +1,14 @@
+#![cfg(windows)]
+//! An external tests
+
+use std::{ffi::OsString, os::windows::ffi::OsStringExt, path::PathBuf};
+
+#[test]
+#[should_panic]
+fn os_string_must_know_it_isnt_utf8_issue_126291() {
+    let mut utf8 = PathBuf::from(OsString::from("utf8".to_owned()));
+    let non_utf8: OsString =
+        OsStringExt::from_wide(&[0x6e, 0x6f, 0x6e, 0xd800, 0x75, 0x74, 0x66, 0x38]);
+    utf8.set_extension(&non_utf8);
+    utf8.into_os_string().into_string().unwrap();
+}