1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
|
use std::fs;
use std::io::{self, Write as _};
use std::path::{Path, PathBuf};
use std::time::{Duration, SystemTime, UNIX_EPOCH};
const STAGED_CLIPBOARD_IMAGE_MAX_AGE: Duration = Duration::from_secs(24 * 60 * 60);
pub(crate) struct StagedClipboardImage {
pub(crate) path: PathBuf,
pub(crate) paste_text: String,
}
pub(crate) fn stage(
client_id: u64,
extension: &str,
data: &[u8],
) -> io::Result<StagedClipboardImage> {
let extension = sanitize_extension(extension);
let dir = ensure_staging_dir()?;
cleanup_stale(&dir);
let unique = SystemTime::now()
.duration_since(UNIX_EPOCH)
.map(|duration| duration.as_nanos())
.unwrap_or(0);
for attempt in 0..100 {
let path = dir.join(format!(
"client-{client_id}-clipboard-{unique}-{attempt}.{extension}"
));
let mut options = fs::OpenOptions::new();
options.write(true).create_new(true);
restrict_file_options(&mut options);
let mut file = match options.open(&path) {
Ok(file) => file,
Err(err) if err.kind() == io::ErrorKind::AlreadyExists => continue,
Err(err) => return Err(err),
};
file.write_all(data)?;
return Ok(StagedClipboardImage {
paste_text: path.to_string_lossy().into_owned(),
path,
});
}
Err(io::Error::new(
io::ErrorKind::AlreadyExists,
"failed to allocate unique clipboard image staging path",
))
}
pub(crate) fn remove_files(paths: Vec<PathBuf>) {
for path in paths {
let _ = fs::remove_file(path);
}
}
fn sanitize_extension(extension: &str) -> &'static str {
if extension.eq_ignore_ascii_case("png") {
"png"
} else if extension.eq_ignore_ascii_case("jpg") || extension.eq_ignore_ascii_case("jpeg") {
"jpg"
} else if extension.eq_ignore_ascii_case("gif") {
"gif"
} else if extension.eq_ignore_ascii_case("webp") {
"webp"
} else if extension.eq_ignore_ascii_case("bmp") {
"bmp"
} else {
"png"
}
}
fn staging_dir() -> PathBuf {
#[cfg(unix)]
let user_id = unsafe { libc::geteuid() };
#[cfg(windows)]
let user_id = std::process::id();
std::env::temp_dir().join(format!("herdr-clipboard-images-{user_id}"))
}
fn ensure_staging_dir() -> io::Result<PathBuf> {
let dir = staging_dir();
fs::create_dir_all(&dir)?;
let metadata = fs::metadata(&dir)?;
if !metadata.is_dir() {
return Err(io::Error::other(format!(
"clipboard image staging path is not a directory: {}",
dir.display()
)));
}
restrict_dir_permissions(&dir)?;
Ok(dir)
}
#[cfg(unix)]
fn restrict_file_options(options: &mut fs::OpenOptions) {
use std::os::unix::fs::OpenOptionsExt;
options.mode(0o600);
}
#[cfg(windows)]
fn restrict_file_options(_options: &mut fs::OpenOptions) {}
#[cfg(unix)]
fn restrict_dir_permissions(dir: &Path) -> io::Result<()> {
use std::os::unix::fs::PermissionsExt;
fs::set_permissions(dir, fs::Permissions::from_mode(0o700))
}
#[cfg(windows)]
fn restrict_dir_permissions(_dir: &Path) -> io::Result<()> {
Ok(())
}
fn cleanup_stale(dir: &Path) {
let Ok(entries) = fs::read_dir(dir) else {
return;
};
for entry in entries.flatten() {
let path = entry.path();
let Ok(metadata) = entry.metadata() else {
continue;
};
let Ok(modified) = metadata.modified() else {
continue;
};
if modified.elapsed().unwrap_or_default() > STAGED_CLIPBOARD_IMAGE_MAX_AGE {
let _ = fs::remove_file(path);
}
}
}
#[cfg(test)]
mod tests {
use super::*;
#[test]
fn sanitize_extension_accepts_known_image_extensions() {
assert_eq!(sanitize_extension("PNG"), "png");
assert_eq!(sanitize_extension("jpeg"), "jpg");
assert_eq!(sanitize_extension("webp"), "webp");
assert_eq!(sanitize_extension("sh"), "png");
}
}
|
