X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=udev_utils_string.c;h=e3dc137e63257be33471a2d1a8ede3523a281dd4;hp=8cda47272ffc9ee83cef43e2a55c2b7f416b78b4;hb=956cf79390e303925135663a858456dd0a26e6c6;hpb=27b77df44daebbd7597c572343105c16de099233

diff --git a/udev_utils_string.c b/udev_utils_string.c
index 8cda47272..e3dc137e6 100644
--- a/udev_utils_string.c
+++ b/udev_utils_string.c
@@ -50,6 +50,49 @@ void remove_trailing_chars(char *path, char c)
 		path[--len] = '\0';
 }
 
+size_t path_encode(char *s, size_t len)
+{
+	char t[(len * 3)+1];
+	size_t i, j;
+
+	t[0] = '\0';
+	for (i = 0, j = 0; s[i] != '\0'; i++) {
+		if (s[i] == '/') {
+			memcpy(&t[j], "\\x2f", 4);
+			j += 4;
+		} else if (s[i] == '\\') {
+			memcpy(&t[j], "\\x5c", 4);
+			j += 4;
+		} else {
+			t[j] = s[i];
+			j++;
+		}
+	}
+	t[j] = '\0';
+	strncpy(s, t, len);
+	return j;
+}
+
+size_t path_decode(char *s)
+{
+	size_t i, j;
+
+	for (i = 0, j = 0; s[i] != '\0'; j++) {
+		if (memcmp(&s[i], "\\x2f", 4) == 0) {
+			s[j] = '/';
+			i += 4;
+		}else if (memcmp(&s[i], "\\x5c", 4) == 0) {
+			s[j] = '\\';
+			i += 4;
+		} else {
+			s[j] = s[i];
+			i++;
+		}
+	}
+	s[j] = '\0';
+	return j;
+}
+
 /* count of characters used to encode one unicode char */
 static int utf8_encoded_expected_len(const char *str)
 {
@@ -173,8 +216,8 @@ int utf8_encoded_valid_unichar(const char *str)
 	return len;
 }
 
-/* replace everything but whitelisted plain ascii and valid utf8 */
-int replace_untrusted_chars(char *str)
+/* allow chars in whitelist, plain ascii, hex-escaping and valid utf8 */
+int replace_chars(char *str, const char *white)
 {
 	size_t i = 0;
 	int replaced = 0;
@@ -182,22 +225,42 @@ int replace_untrusted_chars(char *str)
 	while (str[i] != '\0') {
 		int len;
 
-		/* valid printable ascii char */
+		/* accept whitelist */
+		if (white != NULL && strchr(white, str[i]) != NULL) {
+			i++;
+			continue;
+		}
+
+		/* accept plain ascii char */
 		if ((str[i] >= '0' && str[i] <= '9') ||
 		    (str[i] >= 'A' && str[i] <= 'Z') ||
-		    (str[i] >= 'a' && str[i] <= 'z') ||
-		    strchr(" #$%+-./:=?@_,", str[i])) {
+		    (str[i] >= 'a' && str[i] <= 'z')) {
 			i++;
 			continue;
 		}
-		/* valid utf8 is accepted */
+
+		/* accept hex encoding */
+		if (str[i] == '\\' && str[i+1] == 'x') {
+			i += 2;
+			continue;
+		}
+
+		/* accept valid utf8 */
 		len = utf8_encoded_valid_unichar(&str[i]);
 		if (len > 1) {
 			i += len;
 			continue;
 		}
 
-		/* everything else is garbage */
+		/* if space is allowed, replace whitespace with ordinary space */
+		if (isspace(str[i]) && strchr(white, ' ') != NULL) {
+			str[i] = ' ';
+			i++;
+			replaced++;
+			continue;
+		}
+
+		/* everything else is replaced with '_' */
 		str[i] = '_';
 		i++;
 		replaced++;