*NOT* safe for binary strings
*/
-PHPAPI char *php_escape_shell_cmd(char *str)
+PHPAPI zend_string *php_escape_shell_cmd(char *str)
{
register int x, y, l = strlen(str);
- char *cmd;
char *p = NULL;
size_t estimate = (2 * l) + 1;
+ zend_string *cmd;
TSRMLS_FETCH();
- cmd = safe_emalloc(2, l, 1);
+ cmd = STR_ALLOC(2 * l, 0);
for (x = 0, y = 0; x < l; x++) {
int mb_len = php_mblen(str + x, (l - x));
if (mb_len < 0) {
continue;
} else if (mb_len > 1) {
- memcpy(cmd + y, str + x, mb_len);
+ memcpy(cmd->val + y, str + x, mb_len);
y += mb_len;
x += mb_len - 1;
continue;
} else if (p && *p == str[x]) {
p = NULL;
} else {
- cmd[y++] = '\\';
+ cmd->val[y++] = '\\';
}
- cmd[y++] = str[x];
+ cmd->val[y++] = str[x];
break;
#else
/* % is Windows specific for enviromental variables, ^%PATH% will
- output PATH whil ^%PATH^% not. escapeshellcmd will escape all %.
+ output PATH whil ^%PATH^% not. escapeshellcmd->val will escape all %.
*/
case '%':
case '"':
case '\x0A': /* excluding these two */
case '\xFF':
#ifdef PHP_WIN32
- cmd[y++] = '^';
+ cmd->val[y++] = '^';
#else
- cmd[y++] = '\\';
+ cmd->val[y++] = '\\';
#endif
/* fall-through */
default:
- cmd[y++] = str[x];
+ cmd->val[y++] = str[x];
}
}
- cmd[y] = '\0';
+ cmd->val[y] = '\0';
if ((estimate - y) > 4096) {
/* realloc if the estimate was way overill
* Arbitrary cutoff point of 4096 */
- cmd = erealloc(cmd, y + 1);
+ cmd = STR_REALLOC(cmd, y, 0);
}
+ cmd->len = y;
+
return cmd;
}
/* }}} */
/* {{{ php_escape_shell_arg
*/
-PHPAPI char *php_escape_shell_arg(char *str)
+PHPAPI zend_string *php_escape_shell_arg(char *str)
{
int x, y = 0, l = strlen(str);
- char *cmd;
+ zend_string *cmd;
size_t estimate = (4 * l) + 3;
TSRMLS_FETCH();
- cmd = safe_emalloc(4, l, 3); /* worst case */
+ cmd = STR_ALLOC(4 * l + 2, 0); /* worst case */
#ifdef PHP_WIN32
- cmd[y++] = '"';
+ cmd->val[y++] = '"';
#else
- cmd[y++] = '\'';
+ cmd->val[y++] = '\'';
#endif
for (x = 0; x < l; x++) {
if (mb_len < 0) {
continue;
} else if (mb_len > 1) {
- memcpy(cmd + y, str + x, mb_len);
+ memcpy(cmd->val + y, str + x, mb_len);
y += mb_len;
x += mb_len - 1;
continue;
#ifdef PHP_WIN32
case '"':
case '%':
- cmd[y++] = ' ';
+ cmd->val[y++] = ' ';
break;
#else
case '\'':
- cmd[y++] = '\'';
- cmd[y++] = '\\';
- cmd[y++] = '\'';
+ cmd->val[y++] = '\'';
+ cmd->val[y++] = '\\';
+ cmd->val[y++] = '\'';
#endif
/* fall-through */
default:
- cmd[y++] = str[x];
+ cmd->val[y++] = str[x];
}
}
#ifdef PHP_WIN32
- cmd[y++] = '"';
+ cmd->val[y++] = '"';
#else
- cmd[y++] = '\'';
+ cmd->val[y++] = '\'';
#endif
- cmd[y] = '\0';
+ cmd->val[y] = '\0';
if ((estimate - y) > 4096) {
/* realloc if the estimate was way overill
* Arbitrary cutoff point of 4096 */
- cmd = erealloc(cmd, y + 1);
+ cmd = STR_REALLOC(cmd, y, 0);
}
+ cmd->len = y;
return cmd;
}
/* }}} */
}
if (command_len) {
- cmd = php_escape_shell_cmd(command);
-//??? RETVAL_STRING(cmd, 0);
- RETVAL_STRING(cmd);
+ RETVAL_STRING(php_escape_shell_cmd(command));
} else {
RETVAL_EMPTY_STRING();
}
}
if (argument) {
- cmd = php_escape_shell_arg(argument);
-//??? RETVAL_STRING(cmd, 0);
- RETVAL_STRING(cmd);
+ RETVAL_STR(php_escape_shell_arg(argument));
}
}
/* }}} */