FastSync/src/shared/file_list.c

#include "file_list.h"
#include "log.h"
#include "utils.h"
#include <errno.h>
#include <limits.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>

typedef struct {
  char** items;
  int count;
  int capacity;
} StringList;

static void string_list_destroy(StringList* list) {
  if (!list)
    return;
  for (int i = 0; i < list->count; i++)
    free(list->items[i]);
  free(list->items);
}

static bool string_list_add(StringList* list, const char* text) {
  if (list->count == list->capacity) {
    int new_cap = list->capacity > 0 ? list->capacity * 2 : 16;
    char** grown = realloc(list->items, (size_t)new_cap * sizeof(char*));
    if (!grown)
      return false;
    list->items = grown;
    list->capacity = new_cap;
  }
  list->items[list->count] = str_dup(text);
  if (!list->items[list->count])
    return false;
  list->count++;
  return true;
}

/* Validate and normalize one entry. Returns:
 *   1 -> added to `out`
 *   0 -> blank entry, skip
 *  -1 -> invalid (message set in `err`)
 * `strip_line_endings` trims a trailing CR/LF (line mode only); NUL mode keeps
 * the entry bytes verbatim so names ending in CR/LF survive. */
static int normalize_entry(const char* raw, size_t len, bool strip_line_endings, StringList* out,
                           char* err, size_t err_size) {
  if (strip_line_endings) {
    while (len > 0 && (raw[len - 1] == '\n' || raw[len - 1] == '\r'))
      len--;
  }
  if (len == 0)
    return 0;
  if (raw[0] == '/') {
    int print_len = len > (size_t)INT_MAX ? INT_MAX : (int)len;
    snprintf(err, err_size, "absolute path entries are not allowed: '%.*s'", print_len, raw);
    return -1;
  }
  /* Reject NUL bytes inside a token defensively (NUL-delimited mode splits on
   * them, so this only guards against embedded garbage). */
  char* dup = malloc(len + 1);
  if (!dup) {
    snprintf(err, err_size, "memory allocation failed");
    return -1;
  }
  memcpy(dup, raw, len);
  dup[len] = '\0';

  /* Rebuild the path token-by-token: skip '.' and empty segments, reject '..'. */
  size_t out_len = 0;
  for (const char* part = dup;;) {
    const char* slash = strchr(part, '/');
    size_t part_len = slash ? (size_t)(slash - part) : strlen(part);
    if (part_len == 1 && part[0] == '.') {
      /* skip "." segment */
    } else if (part_len == 2 && part[0] == '.' && part[1] == '.') {
      snprintf(err, err_size, "path traversal entry is not allowed: '%s'", dup);
      free(dup);
      return -1;
    } else if (part_len > 0) {
      if (out_len > 0)
        dup[out_len++] = '/';
      memmove(dup + out_len, part, part_len);
      out_len += part_len;
    }
    if (!slash)
      break;
    part = slash + 1;
  }
  dup[out_len] = '\0';

  int result;
  if (out_len == 0) {
    /* "." / "./" lists the source root: the whole tree is transferred. */
    result = string_list_add(out, "") ? 1 : -1;
    if (result < 0)
      snprintf(err, err_size, "memory allocation failed");
  } else {
    result = string_list_add(out, dup) ? 1 : -1;
    if (result < 0)
      snprintf(err, err_size, "memory allocation failed");
  }
  free(dup);
  return result;
}

/* Build the membership index: each non-empty entry plus every ancestor
   directory prefix of it.  The entry flag lets file_list_affects tell an exact
   listed path from an ancestor of a listed path.  An empty entry (the source
   root) short-circuits every query, so it is recorded as whole_tree. */
static bool file_list_index_build(FileListSet* set, char* err, size_t err_size) {
  if (!str_hash_set_init(&set->node_index, (size_t)set->count * 2 + 1)) {
    snprintf(err, err_size, "memory allocation failed");
    return false;
  }
  for (int i = 0; i < set->count; i++) {
    const char* entry = set->entries[i];
    if (entry[0] == '\0') {
      set->whole_tree = true;
      continue;
    }
    if (!str_hash_set_insert_ref(&set->node_index, entry, true)) {
      snprintf(err, err_size, "memory allocation failed");
      return false;
    }
    for (const char* slash = entry; (slash = strchr(slash, '/')) != NULL; slash++) {
      if (!str_hash_set_insert_copy_n(&set->node_index, entry, (size_t)(slash - entry), false)) {
        snprintf(err, err_size, "memory allocation failed");
        return false;
      }
    }
  }
  return true;
}

static FileListSet* string_list_to_set(StringList* raw, char* err, size_t err_size) {
  FileListSet* set = calloc(1, sizeof(FileListSet));
  if (!set) {
    snprintf(err, err_size, "memory allocation failed");
    return NULL;
  }
  set->count = raw->count;
  set->entries = raw->items;
  raw->items = NULL;
  raw->count = 0;
  if (!file_list_index_build(set, err, err_size)) {
    file_list_destroy(set);
    return NULL;
  }
  return set;
}

FileListSet* file_list_load(const char* path, bool null_separated, char* err, size_t err_size) {
  if (err && err_size > 0)
    err[0] = '\0';
  if (!path || !*path) {
    snprintf(err, err_size, "no file given");
    return NULL;
  }
  FILE* fp = fopen(path, "r");
  if (!fp) {
    char* escaped = output_escape(path, false);
    snprintf(err, err_size, "could not open '%s': %s", escaped ? escaped : path, strerror(errno));
    free(escaped);
    return NULL;
  }

  StringList raw = {0};
  char* line = NULL;
  size_t line_cap = 0;
  ssize_t n;
  bool ok = true;
  char delim = null_separated ? '\0' : '\n';
  while (ok && (n = getdelim(&line, &line_cap, delim, fp)) != -1) {
    int r = normalize_entry(line, (size_t)n, !null_separated, &raw, err, err_size);
    if (r < 0) {
      ok = false;
      break;
    }
  }
  free(line);
  fclose(fp);
  if (!ok) {
    string_list_destroy(&raw);
    return NULL;
  }
  FileListSet* set = string_list_to_set(&raw, err, err_size);
  if (!set)
    string_list_destroy(&raw);
  return set;
}

void file_list_destroy(FileListSet* set) {
  if (!set)
    return;
  for (int i = 0; i < set->count; i++)
    free(set->entries[i]);
  free(set->entries);
  str_hash_set_free(&set->node_index);
  free(set);
}

bool file_list_affects(const FileListSet* set, const char* rel) {
  if (!set)
    return true;
  if (!rel)
    return false;
  if (set->whole_tree)
    return true; /* whole tree listed */
  /* A node hit means `rel` is a listed entry, or an ancestor directory of one
     (rel lives on the path to some listed entry). */
  if (str_hash_set_lookup(&set->node_index, rel, NULL))
    return true;
  /* Otherwise `rel` is affected only when a listed entry is an ancestor of it;
     walk rel's directory prefixes (which preserve path-boundary semantics) and
     test each for an exact entry. */
  size_t len = strlen(rel);
  while (len > 0) {
    const char* slash = NULL;
    for (size_t i = len; i-- > 0;) {
      if (rel[i] == '/') {
        slash = rel + i;
        break;
      }
    }
    if (!slash)
      break;
    len = (size_t)(slash - rel);
    bool is_entry = false;
    if (str_hash_set_lookup_n(&set->node_index, rel, len, &is_entry) && is_entry)
      return true;
  }
  return false;
}