Merge feat/hardening-misc: lazy protocol debug escaping, log_debug_enabled

src/shared/log.c

@@ -27,6 +27,10 @@ uint32_t get_log_debug_flags(void) {
   return current_debug_flags;
 }
 
+bool log_debug_enabled(LogDebugFlag flag) {
+  return current_log_level <= LOG_LEVEL_DEBUG && (current_debug_flags & flag) != 0;
+}
+
 void set_log_info_flags(uint32_t flags) {
   info_flags = flags;
   info_flags_explicit = true;

src/shared/log.h

@@ -29,6 +29,10 @@ void log_perror(const char* context);
 void set_log_level(LogLevel level);
 void set_log_debug_flags(uint32_t flags);
 uint32_t get_log_debug_flags(void);
+/* True when a log_debug_message() call with the same flag would actually emit:
+ * the debug log level is enabled AND the flag is selected.  Hot paths use this
+ * to skip expensive message formatting/escaping when the line is filtered. */
+bool log_debug_enabled(LogDebugFlag flag);
 void log_debug_message(LogDebugFlag flag, const char* message, ...);
 void set_log_info_flags(uint32_t flags);
 uint32_t get_log_info_flags(void);

src/shared/protocol.c

@@ -441,7 +441,7 @@ static bool protocol_send_str_impl(ProtocolSession* session, const char* data, b
     return false;
   if (redact) {
     log_debug_message(LOG_DEBUG_PROTO, "Send String: <redacted>");
-  } else {
+  } else if (log_debug_enabled(LOG_DEBUG_PROTO)) {
     char* escaped_data = output_escape(data, log_get_8_bit_output());
     log_debug_message(LOG_DEBUG_PROTO, "Send String: %s",
                       escaped_data ? escaped_data : "<allocation failed>");
@@ -474,7 +474,7 @@ static char* protocol_receive_str_impl(ProtocolSession* session, bool redact) {
   data[size] = '\0';
   if (redact) {
     log_debug_message(LOG_DEBUG_PROTO, "Received String: <redacted>");
-  } else {
+  } else if (log_debug_enabled(LOG_DEBUG_PROTO)) {
     char* escaped_data = output_escape(data, log_get_8_bit_output());
     log_debug_message(LOG_DEBUG_PROTO, "Received String: %s",
                       escaped_data ? escaped_data : "<allocation failed>");