1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320
#![cfg(feature = "bash")]
use crate::{Quotable, QuoteInto};
/// Quote byte strings for use with Bash, the GNU Bourne-Again Shell.
///
/// # Compatibility
///
/// Quoted/escaped strings produced by [`Bash`] work in both Bash and Z Shell.
///
/// # ⚠️ Warning
///
/// It is _possible_ to encode NUL in a Bash string, but Bash appears to then
/// truncate the rest of the string after that point **or** sometimes it filters
/// the NUL out. It's not yet clear to me when/why each behaviour is chosen.
///
/// If you're quoting UTF-8 content this may not be a problem since there is
/// only one code point – the null character itself – that will ever produce a
/// NUL byte. To avoid this problem entirely, consider using [Modified
/// UTF-8][modified-utf-8] so that the NUL byte can never appear in a valid byte
/// stream.
///
/// [modified-utf-8]: https://en.wikipedia.org/wiki/UTF-8#Modified_UTF-8
///
/// # Notes
///
/// From bash(1):
///
/// Words of the form $'string' are treated specially. The word expands to
/// string, with backslash-escaped characters replaced as specified by the
/// ANSI C standard. Backslash escape sequences, if present, are decoded as
/// follows:
///
/// ```text
/// \a alert (bell)
/// \b backspace
/// \e an escape character
/// \f form feed
/// \n new line
/// \r carriage return
/// \t horizontal tab
/// \v vertical tab
/// \\ backslash
/// \' single quote
/// \nnn the eight-bit character whose value is the
/// octal value nnn (one to three digits)
/// \xHH the eight-bit character whose value is the
/// hexadecimal value HH (one or two hex digits)
/// \cx a control-x character
/// ```
///
/// Bash allows, in newer versions, for non-ASCII Unicode characters with
/// `\uHHHH` and `\UXXXXXXXX` syntax inside these [ANSI C quoted
/// strings][ansi-c-quoting], but we avoid this and work only with bytes. Part
/// of the problem is that it's not clear how Bash then works with these
/// strings. Does it encode these characters into bytes according to the user's
/// current locale? Are strings in Bash now natively Unicode?
///
/// For now it's up to the caller to figure out encoding. A significant use case
/// for this code is to quote filenames into scripts, and on *nix variants I
/// understand that filenames are essentially arrays of bytes, even if the OS
/// adds some normalisation and case-insensitivity on top.
///
/// [ansi-c-quoting]:
/// https://www.gnu.org/software/bash/manual/html_node/ANSI_002dC-Quoting.html
///
#[derive(Debug, Clone, Copy)]
pub struct Bash;
// ----------------------------------------------------------------------------
impl QuoteInto<Vec<u8>> for Bash {
fn quote_into<'q, S: ?Sized + Into<Quotable<'q>>>(s: S, out: &mut Vec<u8>) {
Self::quote_into_vec(s, out);
}
}
impl QuoteInto<String> for Bash {
fn quote_into<'q, S: ?Sized + Into<Quotable<'q>>>(s: S, out: &mut String) {
Self::quote_into_vec(s, unsafe { out.as_mut_vec() })
}
}
#[cfg(unix)]
impl QuoteInto<std::ffi::OsString> for Bash {
fn quote_into<'q, S: ?Sized + Into<Quotable<'q>>>(s: S, out: &mut std::ffi::OsString) {
use std::os::unix::ffi::OsStringExt;
let s = Self::quote_vec(s);
let s = std::ffi::OsString::from_vec(s);
out.push(s);
}
}
#[cfg(feature = "bstr")]
impl QuoteInto<bstr::BString> for Bash {
fn quote_into<'q, S: ?Sized + Into<Quotable<'q>>>(s: S, out: &mut bstr::BString) {
let s = Self::quote_vec(s);
out.extend(s);
}
}
// ----------------------------------------------------------------------------
impl Bash {
/// Quote a string of bytes into a new `Vec<u8>`.
///
/// This will return one of the following:
/// - The string as-is, if no escaping is necessary.
/// - An [ANSI-C escaped string][ansi-c-quoting], like `$'foo\nbar'`.
///
/// See [`quote_into_vec`][`Self::quote_into_vec`] for a variant that
/// extends an existing `Vec` instead of allocating a new one.
///
/// # Examples
///
/// ```
/// # use shell_quote::Bash;
/// assert_eq!(Bash::quote_vec("foobar"), b"foobar");
/// assert_eq!(Bash::quote_vec("foo bar"), b"$'foo bar'");
/// ```
///
/// [ansi-c-quoting]:
/// https://www.gnu.org/software/bash/manual/html_node/ANSI_002dC-Quoting.html
///
pub fn quote_vec<'a, S: ?Sized + Into<Quotable<'a>>>(s: S) -> Vec<u8> {
// Here, previously, in the `Escape` cases, an optimisation
// precalculated the required capacity of the output `Vec` to avoid
// reallocations later on, but benchmarks showed that it was slower. It
// _may_ have lowered maximum RAM required, but that was not measured.
match s.into() {
Quotable::Bytes(bytes) => match bytes::escape_prepare(bytes) {
bytes::Prepared::Empty => vec![b'\'', b'\''],
bytes::Prepared::Inert => bytes.into(),
bytes::Prepared::Escape(esc) => {
let mut sout = Vec::new();
bytes::escape_chars(esc, &mut sout);
sout
}
},
Quotable::Text(text) => match text::escape_prepare(text) {
text::Prepared::Empty => vec![b'\'', b'\''],
text::Prepared::Inert => text.into(),
text::Prepared::Escape(esc) => {
let mut sout = Vec::new();
text::escape_chars(esc, &mut sout);
sout
}
},
}
}
/// Quote a string of bytes into an existing `Vec<u8>`.
///
/// See [`quote_vec`][`Self::quote_vec`] for more details.
///
/// # Examples
///
/// ```
/// # use shell_quote::Bash;
/// let mut buf = Vec::with_capacity(128);
/// Bash::quote_into_vec("foobar", &mut buf);
/// buf.push(b' '); // Add a space.
/// Bash::quote_into_vec("foo bar", &mut buf);
/// assert_eq!(buf, b"foobar $'foo bar'");
/// ```
///
pub fn quote_into_vec<'a, S: ?Sized + Into<Quotable<'a>>>(s: S, sout: &mut Vec<u8>) {
// Here, previously, in the `Escape` cases, an optimisation
// precalculated the required capacity of the output `Vec` to avoid
// reallocations later on, but benchmarks showed that it was slower. It
// _may_ have lowered maximum RAM required, but that was not measured.
match s.into() {
Quotable::Bytes(bytes) => match bytes::escape_prepare(bytes) {
bytes::Prepared::Empty => sout.extend(b"''"),
bytes::Prepared::Inert => sout.extend(bytes),
bytes::Prepared::Escape(esc) => bytes::escape_chars(esc, sout),
},
Quotable::Text(text) => match text::escape_prepare(text) {
text::Prepared::Empty => sout.extend(b"''"),
text::Prepared::Inert => sout.extend(text.as_bytes()),
text::Prepared::Escape(esc) => text::escape_chars(esc, sout),
},
}
}
}
// ----------------------------------------------------------------------------
mod bytes {
use super::u8_to_hex_escape;
use crate::ascii::Char;
pub enum Prepared {
Empty,
Inert,
Escape(Vec<Char>),
}
pub fn escape_prepare(sin: &[u8]) -> Prepared {
let esc: Vec<_> = sin.iter().map(Char::from).collect();
// An optimisation: if the string is not empty and contains only "safe"
// characters we can avoid further work.
if esc.is_empty() {
Prepared::Empty
} else if esc.iter().all(Char::is_inert) {
Prepared::Inert
} else {
Prepared::Escape(esc)
}
}
pub fn escape_chars(esc: Vec<Char>, sout: &mut Vec<u8>) {
// Push a Bash-style $'...' quoted string into `sout`.
sout.extend(b"$'");
for mode in esc {
use Char::*;
match mode {
Bell => sout.extend(b"\\a"),
Backspace => sout.extend(b"\\b"),
Escape => sout.extend(b"\\e"),
FormFeed => sout.extend(b"\\f"),
NewLine => sout.extend(b"\\n"),
CarriageReturn => sout.extend(b"\\r"),
HorizontalTab => sout.extend(b"\\t"),
VerticalTab => sout.extend(b"\\v"),
Control(ch) => sout.extend(&u8_to_hex_escape(ch)),
Backslash => sout.extend(b"\\\\"),
SingleQuote => sout.extend(b"\\'"),
DoubleQuote => sout.extend(b"\""),
Delete => sout.extend(b"\\x7F"),
PrintableInert(ch) => sout.push(ch),
Printable(ch) => sout.push(ch),
Extended(ch) => sout.extend(&u8_to_hex_escape(ch)),
}
}
sout.push(b'\'');
}
}
// ----------------------------------------------------------------------------
mod text {
use super::u8_to_hex_escape;
use crate::utf8::Char;
pub enum Prepared {
Empty,
Inert,
Escape(Vec<Char>),
}
pub fn escape_prepare(sin: &str) -> Prepared {
let esc: Vec<_> = sin.chars().map(Char::from).collect();
// An optimisation: if the string is not empty and contains only "safe"
// characters we can avoid further work.
if esc.is_empty() {
Prepared::Empty
} else if esc.iter().all(Char::is_inert) {
Prepared::Inert
} else {
Prepared::Escape(esc)
}
}
pub fn escape_chars(esc: Vec<Char>, sout: &mut Vec<u8>) {
// Push a Bash-style $'...' quoted string into `sout`.
sout.extend(b"$'");
let buf = &mut [0u8; 4];
for mode in esc {
use Char::*;
match mode {
Bell => sout.extend(b"\\a"),
Backspace => sout.extend(b"\\b"),
Escape => sout.extend(b"\\e"),
FormFeed => sout.extend(b"\\f"),
NewLine => sout.extend(b"\\n"),
CarriageReturn => sout.extend(b"\\r"),
HorizontalTab => sout.extend(b"\\t"),
VerticalTab => sout.extend(b"\\v"),
Control(ch) => sout.extend(&u8_to_hex_escape(ch)),
Backslash => sout.extend(b"\\\\"),
SingleQuote => sout.extend(b"\\'"),
DoubleQuote => sout.extend(b"\""),
Delete => sout.extend(b"\\x7F"),
PrintableInert(ch) => sout.push(ch),
Printable(ch) => sout.push(ch),
Utf8(ch) => sout.extend(ch.encode_utf8(buf).as_bytes()),
}
}
sout.push(b'\'');
}
}
// ----------------------------------------------------------------------------
/// Escape a byte as a 4-byte hex escape sequence.
///
/// The `\\xHH` format (backslash, a literal "x", two hex characters) is
/// understood by many shells.
#[inline]
fn u8_to_hex_escape(ch: u8) -> [u8; 4] {
const HEX_DIGITS: &[u8] = b"0123456789ABCDEF";
[
b'\\',
b'x',
HEX_DIGITS[(ch >> 4) as usize],
HEX_DIGITS[(ch & 0xF) as usize],
]
}
#[cfg(test)]
#[test]
fn test_u8_to_hex_escape() {
for ch in u8::MIN..=u8::MAX {
let expected = format!("\\x{ch:02X}");
let observed = u8_to_hex_escape(ch);
let observed = std::str::from_utf8(&observed).unwrap();
assert_eq!(observed, &expected);
}
}