1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226
use crate::{ascii::Char, quoter::QuoterSealed, util::u8_to_hex, Quotable, Quoter};
/// Quote byte strings for use with Bash, the GNU Bourne-Again Shell.
///
/// # ⚠️ Warning
///
/// It is _possible_ to encode NUL in a Bash string, but Bash appears to then
/// truncate the rest of the string after that point, likely because NUL is the
/// C string terminator. This appears to be a bug in Bash or at least a serious
/// limitation.
///
/// If you're quoting UTF-8 content this may not be a problem since there is
/// only one code point – the null character itself – that will ever produce a
/// NUL byte. To avoid this problem entirely, consider using [Modified
/// UTF-8][modified-utf-8] so that the NUL byte can never appear in a valid byte
/// stream.
///
/// [modified-utf-8]: https://en.wikipedia.org/wiki/UTF-8#Modified_UTF-8
///
/// # Notes
///
/// From bash(1):
///
/// Words of the form $'string' are treated specially. The word expands to
/// string, with backslash-escaped characters replaced as specified by the
/// ANSI C standard. Backslash escape sequences, if present, are decoded as
/// follows:
///
/// ```text
/// \a alert (bell)
/// \b backspace
/// \e an escape character
/// \f form feed
/// \n new line
/// \r carriage return
/// \t horizontal tab
/// \v vertical tab
/// \\ backslash
/// \' single quote
/// \nnn the eight-bit character whose value is the
/// octal value nnn (one to three digits)
/// \xHH the eight-bit character whose value is the
/// hexadecimal value HH (one or two hex digits)
/// \cx a control-x character
/// ```
///
/// Bash allows, in newer versions, for non-ASCII Unicode characters with
/// `\uHHHH` and `\UXXXXXXXX` syntax inside these [ANSI C quoted
/// strings][ansi-c-quoting], but we avoid this and work only with bytes. Part
/// of the problem is that it's not clear how Bash then works with these
/// strings. Does it encode these characters into bytes according to the user's
/// current locale? Are strings in Bash now natively Unicode?
///
/// For now it's up to the caller to figure out encoding. A significant use case
/// for this code is to quote filenames into scripts, and on *nix variants I
/// understand that filenames are essentially arrays of bytes, even if the OS
/// adds some normalisation and case-insensitivity on top.
///
/// If you have some expertise in this area I would love to hear from you.
///
/// [ansi-c-quoting]:
/// https://www.gnu.org/software/bash/manual/html_node/ANSI_002dC-Quoting.html
///
#[derive(Debug, Clone, Copy)]
pub struct Bash;
impl Quoter for Bash {}
/// Expose [`Quoter`] implementation as default impl too, for convenience.
impl QuoterSealed for Bash {
fn quote<'a, S: ?Sized + Into<Quotable<'a>>>(s: S) -> Vec<u8> {
Self::quote(s)
}
fn quote_into<'a, S: ?Sized + Into<Quotable<'a>>>(s: S, sout: &mut Vec<u8>) {
Self::quote_into(s, sout)
}
}
impl Bash {
/// Quote a string of bytes into a new `Vec<u8>`.
///
/// This will return one of the following:
/// - The string as-is, if no escaping is necessary.
/// - An [ANSI-C escaped string][ansi-c-quoting], like `$'foo\nbar'`.
///
/// See [`quote_into`](#method.quote_into) for a variant that extends an
/// existing `Vec` instead of allocating a new one.
///
/// # Examples
///
/// ```
/// # use shell_quote::{Bash, Quoter};
/// assert_eq!(Bash::quote("foobar"), b"foobar");
/// assert_eq!(Bash::quote("foo bar"), b"$'foo bar'");
/// ```
///
/// [ansi-c-quoting]:
/// https://www.gnu.org/software/bash/manual/html_node/ANSI_002dC-Quoting.html
///
pub fn quote<'a, S: ?Sized + Into<Quotable<'a>>>(s: S) -> Vec<u8> {
let sin: Quotable<'a> = s.into();
match escape_prepare(sin.bytes) {
Prepared::Empty => vec![b'\'', b'\''],
Prepared::Inert => sin.bytes.into(),
Prepared::Escape(esc) => {
// This may be a pointless optimisation, but calculate the
// memory needed to avoid reallocations as we construct the
// output. Since we know we're going to use $'...' notation, we
// also add 3 bytes.
let size: usize = esc.iter().map(escape_size).sum();
let mut sout = Vec::with_capacity(size + 3);
escape_chars(esc, &mut sout); // Do the work.
sout
}
}
}
/// Quote a string of bytes into an existing `Vec<u8>`.
///
/// See [`quote`](#method.quote) for more details.
///
/// # Examples
///
/// ```
/// # use shell_quote::{Bash, Quoter};
/// let mut buf = Vec::with_capacity(128);
/// Bash::quote_into("foobar", &mut buf);
/// buf.push(b' '); // Add a space.
/// Bash::quote_into("foo bar", &mut buf);
/// assert_eq!(buf, b"foobar $'foo bar'");
/// ```
///
pub fn quote_into<'a, S: ?Sized + Into<Quotable<'a>>>(s: S, sout: &mut Vec<u8>) {
let sin: Quotable<'a> = s.into();
match escape_prepare(sin.bytes) {
Prepared::Empty => sout.extend(b"''"),
Prepared::Inert => sout.extend(sin.bytes),
Prepared::Escape(esc) => {
// This may be a pointless optimisation, but calculate the
// memory needed to avoid reallocations as we construct the
// output. Since we know we're going to use $'...' notation, we
// also add 3 bytes.
let size: usize = esc.iter().map(escape_size).sum();
sout.reserve(size + 3);
escape_chars(esc, sout); // Do the work.
}
}
}
}
// ----------------------------------------------------------------------------
enum Prepared {
Empty,
Inert,
Escape(Vec<Char>),
}
fn escape_prepare(sin: &[u8]) -> Prepared {
let esc: Vec<_> = sin.iter().map(Char::from).collect();
// An optimisation: if the string is not empty and contains only "safe"
// characters we can avoid further work.
if esc.is_empty() {
Prepared::Empty
} else if esc.iter().all(Char::is_inert) {
Prepared::Inert
} else {
Prepared::Escape(esc)
}
}
fn escape_chars(esc: Vec<Char>, sout: &mut Vec<u8>) {
// Push a Bash-style $'...' quoted string into `sout`.
sout.extend(b"$'");
let mut tmp = b"\\x00".to_owned();
for mode in esc {
use Char::*;
match mode {
Bell => sout.extend(b"\\a"),
Backspace => sout.extend(b"\\b"),
Escape => sout.extend(b"\\e"),
FormFeed => sout.extend(b"\\f"),
NewLine => sout.extend(b"\\n"),
CarriageReturn => sout.extend(b"\\r"),
HorizontalTab => sout.extend(b"\\t"),
VerticalTab => sout.extend(b"\\v"),
Control(ch) => {
tmp[2..].copy_from_slice(&u8_to_hex(ch));
sout.extend(&tmp)
}
Backslash => sout.extend(b"\\\\"),
SingleQuote => sout.extend(b"\\'"),
DoubleQuote => sout.extend(b"\""),
Delete => sout.extend(b"\\x7F"),
PrintableInert(ch) => sout.push(ch),
Printable(ch) => sout.push(ch),
Extended(ch) => {
tmp[2..].copy_from_slice(&u8_to_hex(ch));
sout.extend(&tmp)
}
}
}
sout.push(b'\'');
}
fn escape_size(char: &Char) -> usize {
use Char::*;
match char {
Bell => 2,
Backspace => 2,
Escape => 2,
FormFeed => 2,
NewLine => 2,
CarriageReturn => 2,
HorizontalTab => 2,
VerticalTab => 2,
Control(_) => 4,
Backslash => 2,
SingleQuote => 2,
DoubleQuote => 1,
Delete => 4,
PrintableInert(_) => 1,
Printable(_) => 1,
Extended(_) => 4,
}
}