#include "file_list.h" #include "log.h" #include "utils.h" #include #include #include #include #include typedef struct { char** items; int count; int capacity; } StringList; static void string_list_destroy(StringList* list) { if (!list) return; for (int i = 0; i < list->count; i++) free(list->items[i]); free(list->items); } static bool string_list_add(StringList* list, const char* text) { if (list->count == list->capacity) { int new_cap = list->capacity > 0 ? list->capacity * 2 : 16; char** grown = realloc(list->items, (size_t)new_cap * sizeof(char*)); if (!grown) return false; list->items = grown; list->capacity = new_cap; } list->items[list->count] = str_dup(text); if (!list->items[list->count]) return false; list->count++; return true; } /* Validate and normalize one entry. Returns: * 1 -> added to `out` * 0 -> blank entry, skip * -1 -> invalid (message set in `err`) * `strip_line_endings` trims a trailing CR/LF (line mode only); NUL mode keeps * the entry bytes verbatim so names ending in CR/LF survive. */ static int normalize_entry(const char* raw, size_t len, bool strip_line_endings, StringList* out, char* err, size_t err_size) { if (strip_line_endings) { while (len > 0 && (raw[len - 1] == '\n' || raw[len - 1] == '\r')) len--; } if (len == 0) return 0; if (raw[0] == '/') { int print_len = len > (size_t)INT_MAX ? INT_MAX : (int)len; snprintf(err, err_size, "absolute path entries are not allowed: '%.*s'", print_len, raw); return -1; } /* Reject NUL bytes inside a token defensively (NUL-delimited mode splits on * them, so this only guards against embedded garbage). */ char* dup = malloc(len + 1); if (!dup) { snprintf(err, err_size, "memory allocation failed"); return -1; } memcpy(dup, raw, len); dup[len] = '\0'; /* Rebuild the path token-by-token: skip '.' and empty segments, reject '..'. */ size_t out_len = 0; for (const char* part = dup;;) { const char* slash = strchr(part, '/'); size_t part_len = slash ? (size_t)(slash - part) : strlen(part); if (part_len == 1 && part[0] == '.') { /* skip "." segment */ } else if (part_len == 2 && part[0] == '.' && part[1] == '.') { snprintf(err, err_size, "path traversal entry is not allowed: '%s'", dup); free(dup); return -1; } else if (part_len > 0) { if (out_len > 0) dup[out_len++] = '/'; memmove(dup + out_len, part, part_len); out_len += part_len; } if (!slash) break; part = slash + 1; } dup[out_len] = '\0'; int result; if (out_len == 0) { /* "." / "./" lists the source root: the whole tree is transferred. */ result = string_list_add(out, "") ? 1 : -1; if (result < 0) snprintf(err, err_size, "memory allocation failed"); } else { result = string_list_add(out, dup) ? 1 : -1; if (result < 0) snprintf(err, err_size, "memory allocation failed"); } free(dup); return result; } /* Build the membership index: each non-empty entry plus every ancestor directory prefix of it. The entry flag lets file_list_affects tell an exact listed path from an ancestor of a listed path. An empty entry (the source root) short-circuits every query, so it is recorded as whole_tree. */ static bool file_list_index_build(FileListSet* set, char* err, size_t err_size) { if (!str_hash_set_init(&set->node_index, (size_t)set->count * 2 + 1)) { snprintf(err, err_size, "memory allocation failed"); return false; } for (int i = 0; i < set->count; i++) { const char* entry = set->entries[i]; if (entry[0] == '\0') { set->whole_tree = true; continue; } if (!str_hash_set_insert_ref(&set->node_index, entry, true)) { snprintf(err, err_size, "memory allocation failed"); return false; } for (const char* slash = entry; (slash = strchr(slash, '/')) != NULL; slash++) { if (!str_hash_set_insert_copy_n(&set->node_index, entry, (size_t)(slash - entry), false)) { snprintf(err, err_size, "memory allocation failed"); return false; } } } return true; } static FileListSet* string_list_to_set(StringList* raw, char* err, size_t err_size) { FileListSet* set = calloc(1, sizeof(FileListSet)); if (!set) { snprintf(err, err_size, "memory allocation failed"); return NULL; } set->count = raw->count; set->entries = raw->items; raw->items = NULL; raw->count = 0; if (!file_list_index_build(set, err, err_size)) { file_list_destroy(set); return NULL; } return set; } FileListSet* file_list_load(const char* path, bool null_separated, char* err, size_t err_size) { if (err && err_size > 0) err[0] = '\0'; if (!path || !*path) { snprintf(err, err_size, "no file given"); return NULL; } FILE* fp = fopen(path, "r"); if (!fp) { char* escaped = output_escape(path, false); snprintf(err, err_size, "could not open '%s': %s", escaped ? escaped : path, strerror(errno)); free(escaped); return NULL; } StringList raw = {0}; char* line = NULL; size_t line_cap = 0; ssize_t n; bool ok = true; char delim = null_separated ? '\0' : '\n'; while (ok && (n = getdelim(&line, &line_cap, delim, fp)) != -1) { int r = normalize_entry(line, (size_t)n, !null_separated, &raw, err, err_size); if (r < 0) { ok = false; break; } } free(line); fclose(fp); if (!ok) { string_list_destroy(&raw); return NULL; } FileListSet* set = string_list_to_set(&raw, err, err_size); if (!set) string_list_destroy(&raw); return set; } void file_list_destroy(FileListSet* set) { if (!set) return; for (int i = 0; i < set->count; i++) free(set->entries[i]); free(set->entries); str_hash_set_free(&set->node_index); free(set); } bool file_list_affects(const FileListSet* set, const char* rel) { if (!set) return true; if (!rel) return false; if (set->whole_tree) return true; /* whole tree listed */ /* A node hit means `rel` is a listed entry, or an ancestor directory of one (rel lives on the path to some listed entry). */ if (str_hash_set_lookup(&set->node_index, rel, NULL)) return true; /* Otherwise `rel` is affected only when a listed entry is an ancestor of it; walk rel's directory prefixes (which preserve path-boundary semantics) and test each for an exact entry. */ size_t len = strlen(rel); while (len > 0) { const char* slash = NULL; for (size_t i = len; i-- > 0;) { if (rel[i] == '/') { slash = rel + i; break; } } if (!slash) break; len = (size_t)(slash - rel); bool is_entry = false; if (str_hash_set_lookup_n(&set->node_index, rel, len, &is_entry) && is_entry) return true; } return false; }