diff options
| author | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2023-04-03 12:43:53 +0200 |
|---|---|---|
| committer | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2023-04-24 10:02:30 +0200 |
| commit | e7416db183cb205146fd7fbb4e791b72cdae2b70 (patch) | |
| tree | 03d09940edfa45440cfd354b4a37dd3821f2c127 /src/test | |
| parent | a12bc99ef0fc04fa48767c891f7a6db6404e51d5 (diff) | |
| download | systemd-e7416db183cb205146fd7fbb4e791b72cdae2b70.tar.gz | |
core/unit: fix shell-escaping of strings
Our escaping of '$' is '$$', not '\$'. We would write unit files that
were not valid:
$ systemd-run --user bash -c 'echo $$; sleep 1000'
Running as unit: run-r1c7c45b5b69f487c86ae205e12100808.service
$ systemctl cat --user run-r1c7c45b5b69f487c86ae205e12100808
# /run/user/1000/systemd/transient/run-r1c7c45b5b69f487c86ae205e12100808.service
...
ExecStart="/usr/bin/bash" "-c" "echo \$\$\; sleep 1000"
$ systemd-analyze verify /run/user/1000/systemd/transient/run-r1c7c45b5b69f487c86ae205e12100808.service
/run/user/1000/systemd/transient/run-r1c7c45b5b69f487c86ae205e12100808.service:7:
Ignoring unknown escape sequences: "echo \$\$\; sleep 1000"
Similarly, ';' cannot be escaped as '\;'. Only a handful of characters
listed in "Supported escapes" is allowed.
Escaping of "'" can be done, but it's not useful because we use double quotes
around the string anyway whenever we do escaping.
unit_write_setting() is called all over the place. In a great majority of
places we write either fixed strings or something that we generate ourselves,
so no escaping or quoting is needed. (And it's not allowed, e.g.
'Type="oneshot"' would not work.) But if we forgot to add escaping or quoting
for a free-style string, it would probably allow writing a unit file that would
be read completely wrong. I looked over various places where
unit_write_setting() is called, and I couldn't find any place where
quoting/escaping was forgotten. But trying to figure out the full
ramifications of this change is not easy.
Diffstat (limited to 'src/test')
| -rw-r--r-- | src/test/test-core-unit.c | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/src/test/test-core-unit.c b/src/test/test-core-unit.c index 6593f2fb4b..ea514a5c8c 100644 --- a/src/test/test-core-unit.c +++ b/src/test/test-core-unit.c @@ -41,13 +41,13 @@ static void test_unit_escape_setting_one( TEST(unit_escape_setting) { test_unit_escape_setting_one("/sbin/sbash", NULL, NULL); - test_unit_escape_setting_one("$", "\\$", "$"); - test_unit_escape_setting_one("$$", "\\$\\$", "$$"); - test_unit_escape_setting_one("'", "\\'", NULL); + test_unit_escape_setting_one("$", "$$", "$"); + test_unit_escape_setting_one("$$", "$$$$", "$$"); + test_unit_escape_setting_one("'", "'", "\\'"); test_unit_escape_setting_one("\"", "\\\"", NULL); test_unit_escape_setting_one("\t", "\\t", NULL); test_unit_escape_setting_one(" ", NULL, NULL); - test_unit_escape_setting_one("$;'\"\t\n", "\\$\\;\\'\\\"\\t\\n", "$;\\'\\\"\\t\\n"); + test_unit_escape_setting_one("$;'\"\t\n", "$$;'\\\"\\t\\n", "$;\\'\\\"\\t\\n"); } static void test_unit_concat_strv_one( @@ -89,7 +89,7 @@ TEST(unit_concat_strv) { NULL); test_unit_concat_strv_one(STRV_MAKE("a", " ", "$", "$$", ""), "\"a\" \" \" \"$\" \"$$\" \"\"", - "\"a\" \" \" \"\\$\" \"\\$\\$\" \"\"", + "\"a\" \" \" \"$$\" \"$$$$\" \"\"", NULL); test_unit_concat_strv_one(STRV_MAKE("\n", " ", "\t"), "\"\n\" \" \" \"\t\"", |