Describes a read the file itself defeated, rather than the attempt.
Both cases are damage: the bytes on disk are wrong, so reporting an
error would stall the caller where reporting damage lets it quarantine and
start cold. `EFBIG` means the file was within the cap when it was measured
and grew past it before it could be read, which is exactly what an attacker
would produce. `EILSEQ` means it is not valid UTF-8, and decoding it
leniently would hand back a silently altered credential.
Describes a read the file itself defeated, rather than the attempt.
Both cases are damage: the bytes on disk are wrong, so reporting an error would stall the caller where reporting damage lets it quarantine and start cold. `EFBIG` means the file was within the cap when it was measured and grew past it before it could be read, which is exactly what an attacker would produce. `EILSEQ` means it is not valid UTF-8, and decoding it leniently would hand back a silently altered credential.