From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by sourceware.org (Postfix) with ESMTPS id 04261385841D for ; Wed, 14 Sep 2022 14:29:10 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 04261385841D Received: from mail-qv1-f72.google.com (mail-qv1-f72.google.com [209.85.219.72]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_128_GCM_SHA256) id us-mta-524-ACgu_VHaNEieVXi9s__02Q-1; Wed, 14 Sep 2022 10:29:09 -0400 X-MC-Unique: ACgu_VHaNEieVXi9s__02Q-1 Received: by mail-qv1-f72.google.com with SMTP id nn9-20020a056214358900b004ac7136c9a3so10519835qvb.16 for ; Wed, 14 Sep 2022 07:29:09 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date; bh=7DkjVPzNbt/9Gx5JEftqatXuoq2X/ChqPJLD9wl326Y=; b=bWuse4d/SDU7NYovVcc183EuDG8PjlSQW6ii/y3/PgU0ps54tdat/HQkEDAUxhRpss N4QcSgn60m2Ss4Ix4/AEEDt9yiGg8MLpytyYoTypxoIDLZErypzu9NHU+bLPTWTO9cnd 2POcVHH/u4rSTBn8IIyi6HZXBRrjR3DpDkMXarbt1gnUFPzUrfxZHe2eDFLHrnYRNDpT DR1N9AQD2QMWmaiMS6WawglkGbPuGZvjncrTQ76kDZnHJ08q9Mj1Y/XcJE7rJ1F2StdC IPo8AIRI1WRG97+/wpRZykzTMIX5dcJTYjta1nJ3li/MG4Y7uURnYc/CBqcUEDRayUcO KHoA== X-Gm-Message-State: ACgBeo3GyZ7G9grqngSjNAi79LEH49Q/4H3SlMaJFarb3KSvGZm2iPMS JV5fHp8Wduy133/ji5qGFL4lCpulCy6yh3+3GII55j2ShpORNDZAS41hALA51isZaL8bYXszWus Byd18oRCz/AuMaYQaPwY0G4tu8MWCFWH6l1IOT/jBtWeuem2Xc9Z6Z6v2npsqTkokWq8+TQigLQ == X-Received: by 2002:ac8:5b88:0:b0:344:52be:4004 with SMTP id a8-20020ac85b88000000b0034452be4004mr32747098qta.201.1663165748765; Wed, 14 Sep 2022 07:29:08 -0700 (PDT) X-Google-Smtp-Source: AA6agR6Ou4TG5ZxGmRT+ir1oK9myMnMCMgPXmda1n5YDHDO5Nh4EVGRRK7Uruu6BVZAgTaycV8fY5g== X-Received: by 2002:ac8:5b88:0:b0:344:52be:4004 with SMTP id a8-20020ac85b88000000b0034452be4004mr32747057qta.201.1663165748297; Wed, 14 Sep 2022 07:29:08 -0700 (PDT) Received: from localhost (52.72.115.87.dyn.plus.net. [87.115.72.52]) by smtp.gmail.com with ESMTPSA id p17-20020a05620a22b100b006cdf38dd3f2sm1818894qkh.16.2022.09.14.07.29.07 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Sep 2022 07:29:07 -0700 (PDT) From: Andrew Burgess To: gdb-patches@sourceware.org Subject: [PATCH] gdb/python: restrict the names accepted by gdb.register_window_type Date: Wed, 14 Sep 2022 15:29:04 +0100 Message-Id: <20220914142904.1071745-1-aburgess@redhat.com> X-Mailer: git-send-email 2.25.4 MIME-Version: 1.0 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII"; x-default=true X-Spam-Status: No, score=-10.7 required=5.0 tests=BAYES_00, DKIMWL_WL_HIGH, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, GIT_PATCH_0, KAM_SHORT, RCVD_IN_BARRACUDACENTRAL, RCVD_IN_DNSWL_LOW, SPF_HELO_NONE, SPF_NONE, TXREP, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: gdb-patches@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Gdb-patches mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Sep 2022 14:29:13 -0000 I noticed that, from Python, I could register a new TUI window that had whitespace in its name, like this: gdb.register_window_type('my window', MyWindowType) however, it is not possible to then use this window in a new TUI layout, e.g.: (gdb) tui new-layout foo my window 1 cmd 1 Unknown window "my" (gdb) tui new-layout foo "my window" 1 cmd 1 Unknown window ""my" (gdb) tui new-layout foo my\ window 1 cmd 1 Unknown window "my\" GDB clearly uses the whitespace to split the incoming command line. I could fix this by trying to add a mechanism by which we can use whitespace within a window name, but it seems like an easier solution if we just forbid whitespace within a window name. Not only is this easier, but I think this is probably the better solution, identifier names with spaces in would mean we'd need to audit all the places a window name could be printed and ensure that the use of a space didn't make the output ambiguous. So, having decided to disallow whitespace, I then thought about other special characters. We currently accept anything as a window name, and I wondered if this was a good idea. My concerns were about how special characters used in a window name might cause confusion, for example, we allow '$' in window names, which is maybe fine now, but what if one day we wanted to allow variable expansion when creating new layouts? Or what about starting a window name with '-'? We already support a '-horizontal' option, what if we want to add more in the future? Or use of the special character '{' which has special meaning within a new layout? In the end I figured it might make sense to place some restrictive rules in place, and then relax the rules later if/when users complain, we can consider each relaxation as its requested. So, I propose that window names should match this regular expression: [a-zA-Z][-_.a-zA-Z0-9]* There is a chance that there is user code in the wild which will break with the addition of this change, but hopefully adapting to the new restrictions shouldn't be too difficult. --- gdb/NEWS | 5 ++ gdb/doc/python.texi | 4 +- gdb/testsuite/gdb.python/tui-window-names.exp | 84 +++++++++++++++++++ gdb/tui/tui-layout.c | 13 +++ 4 files changed, 105 insertions(+), 1 deletion(-) create mode 100644 gdb/testsuite/gdb.python/tui-window-names.exp diff --git a/gdb/NEWS b/gdb/NEWS index 555ef2ddf77..9619842bc03 100644 --- a/gdb/NEWS +++ b/gdb/NEWS @@ -193,6 +193,11 @@ GNU/Linux/CSKY (gdbserver) csky*-*linux* gdb.BreakpointLocation objects specifying the locations where the breakpoint is inserted into the debuggee. + ** The gdb.register_window_type method now restricts the set of + acceptable window names. The first character of a window's name + must start with a character in the set [a-zA-Z], every subsequent + character of a window's name must be in the set [-_.a-zA-Z0-9]. + * New features in the GDB remote stub, GDBserver ** GDBserver is now supported on LoongArch GNU/Linux. diff --git a/gdb/doc/python.texi b/gdb/doc/python.texi index 7aa9e853d85..2692211f388 100644 --- a/gdb/doc/python.texi +++ b/gdb/doc/python.texi @@ -6597,7 +6597,9 @@ @var{name} is the name of the new window. It's an error to try to replace one of the built-in windows, but other window types can be -replaced. +replaced. The @var{name} should match the regular expression +@code{[a-zA-Z][-_.a-zA-Z0-9]*}, it is an error to try and create a +window with an invalid name. @var{function} is a factory function that is called to create the TUI window. This is called with a single argument of type diff --git a/gdb/testsuite/gdb.python/tui-window-names.exp b/gdb/testsuite/gdb.python/tui-window-names.exp new file mode 100644 index 00000000000..8aaf3b42229 --- /dev/null +++ b/gdb/testsuite/gdb.python/tui-window-names.exp @@ -0,0 +1,84 @@ +# Copyright (C) 2022 Free Software Foundation, Inc. +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see . + +# Test that GDB rejects invalid TUI window names, and that valid names +# are allowed. + +load_lib gdb-python.exp + +tuiterm_env + +clean_restart + +if {[skip_tui_tests]} { + return +} + +# Define a function we can use as a window constructor. If this ever +# gets called we'll throw an error, but that's OK, this test doesn't +# actually try to create any windows. +gdb_test_multiline "create a window constructor" \ + "python" "" \ + "def failwin(win):" "" \ + " raise RuntimeError('failwin')" "" \ + "end" "" + +# Check for some of the characters that can't be used within a window +# name. +foreach c {$ * \{ \} ( ) @ #} { + set re [string_to_regexp "$c"] + gdb_test "python gdb.register_window_type('te${c}st', failwin)" \ + [multi_line \ + "gdb.error: invalid character '${re}' in window name" \ + "Error while executing Python code\\." ] + + gdb_test "python gdb.register_window_type('${c}test', failwin)" \ + [multi_line \ + "gdb.error: invalid character '${re}' in window name" \ + "Error while executing Python code\\." ] +} + +# Check that whitespace within a window name is rejected. +foreach c [list " " "\\t" "\\n" "\\r"] { + gdb_test "python gdb.register_window_type('te${c}st', failwin)" \ + [multi_line \ + "gdb.error: invalid whitespace character in window name" \ + "Error while executing Python code\\." ] +} + +# Check some of the characters which are allowed within a window name, +# but are not allowed to be used as the first character. +foreach c {1 _ - .} { + set re [string_to_regexp "$c"] + gdb_test "python gdb.register_window_type('${c}test', failwin)" \ + [multi_line \ + "gdb.error: window name must start with a letter, not '${re}'" \ + "Error while executing Python code\\." ] +} + +# Check different capitalisations. +gdb_test_no_output "python gdb.register_window_type('TEST', failwin)" +gdb_test_no_output "python gdb.register_window_type('test', failwin)" +gdb_test_no_output "python gdb.register_window_type('tEsT', failwin)" +gdb_test_no_output "python gdb.register_window_type('TeSt', failwin)" + +# Check a set of characters that can appear within a name, just not +# necessarily as the first character. We check at both the end of the +# name, and within the name. +foreach c {1 _ - . A} { + set re [string_to_regexp "$c"] + gdb_test_no_output "python gdb.register_window_type('test${c}', failwin)" + gdb_test_no_output "python gdb.register_window_type('te${c}st', failwin)" +} diff --git a/gdb/tui/tui-layout.c b/gdb/tui/tui-layout.c index 09887d3d594..2c4e60ab2cb 100644 --- a/gdb/tui/tui-layout.c +++ b/gdb/tui/tui-layout.c @@ -44,6 +44,7 @@ #include "tui/tui-layout.h" #include "tui/tui-source.h" #include "gdb_curses.h" +#include "safe-ctype.h" static void extract_display_start_addr (struct gdbarch **, CORE_ADDR *); @@ -405,6 +406,18 @@ tui_register_window (const char *name, window_factory &&factory) || name_copy == DISASSEM_NAME || name_copy == STATUS_NAME) error (_("Window type \"%s\" is built-in"), name); + for (const char &c : name_copy) + { + if (ISSPACE (c)) + error (_("invalid whitespace character in window name")); + + if (!ISALNUM (c) && strchr ("-_.", c) == nullptr) + error (_("invalid character '%c' in window name"), c); + } + + if (!ISALPHA (name_copy[0])) + error (_("window name must start with a letter, not '%c'"), name_copy[0]); + known_window_types->emplace (std::move (name_copy), std::move (factory)); } -- 2.25.4