This closes a potential race condition when recursing directories.
The code was written to operate on a directory path string. This means that potential exploits could leverage that to gain advantage.
This change opendir's the path early on and attempts to use a file descriptor instead.

There is no known way to leverage this race condition so the commit should be uncontroversial.