Function xmlReaderNewFile 

#[unsafe(no_mangle)]
pub unsafe extern "C" fn xmlReaderNewFile(
    reader: *mut XmlTextReader,
    filename: *const c_char,
    encoding: *const c_char,
    options: c_int,
) -> c_int

int xmlReaderNewFile(xmlTextReaderPtr reader, const char *filename, const char *encoding, int options).

SAFETY

• reader must be valid pointers (or NULL where the upstream C contract allows), obtained from the matching constructor/owner and not yet freed; the callee may take or keep ownership exactly as the C API specifies.

• filename, encoding must point to valid NUL-terminated strings (or NULL where the C contract allows) for the lifetime of the call.

The caller must not race this call with concurrent mutation of the same objects from other threads (per-object state is not internally synchronized). Violating any of the above is undefined behavior.

Exercised by the C-API differential courts (courts/suites/data-abi/*-family-probe.c) and the CLI differential courts; those pass byte-for-byte against the upstream oracle.