1 /* Copyright (C) 2004 Andre Noll <maan@tuebingen.mpg.de>, see file COPYING. */
3 /** \file string.c Memory allocation and string handling functions. */
8 #include <sys/utsname.h> /* uname() */
18 * Paraslash's version of realloc().
20 * \param p Pointer to the memory block, may be \p NULL.
21 * \param size The desired new size.
23 * A wrapper for realloc(3). It calls \p exit(\p EXIT_FAILURE) on errors,
24 * i.e. there is no need to check the return value in the caller.
26 * \return A pointer to newly allocated memory which is suitably aligned for
27 * any kind of variable and may be different from \a p.
31 __must_check void *para_realloc(void *p, size_t size)
34 * No need to check for NULL pointers: If p is NULL, the call
35 * to realloc is equivalent to malloc(size)
38 if (!(p = realloc(p, size))) {
39 PARA_EMERG_LOG("realloc failed (size = %zu), aborting\n",
47 * Paraslash's version of malloc().
49 * \param size The desired new size.
51 * A wrapper for malloc(3) which exits on errors.
53 * \return A pointer to the allocated memory, which is suitably aligned for any
58 __must_check __malloc void *para_malloc(size_t size)
65 PARA_EMERG_LOG("malloc failed (size = %zu), aborting\n",
73 * Paraslash's version of calloc().
75 * \param size The desired new size.
77 * A wrapper for calloc(3) which exits on errors.
79 * \return A pointer to the allocated and zeroed-out memory, which is suitably
80 * aligned for any kind of variable.
84 __must_check __malloc void *para_calloc(size_t size)
86 void *ret = para_malloc(size);
93 * Paraslash's version of strdup().
95 * \param s The string to be duplicated.
97 * A wrapper for strdup(3). It calls \p exit(EXIT_FAILURE) on errors, i.e.
98 * there is no need to check the return value in the caller.
100 * \return A pointer to the duplicated string. If \a s was the \p NULL pointer,
101 * an pointer to an empty string is returned.
105 __must_check __malloc char *para_strdup(const char *s)
109 if ((ret = strdup(s? s: "")))
111 PARA_EMERG_LOG("strdup failed, aborting\n");
116 * Print a formatted message to a dynamically allocated string.
118 * \param result The formatted string is returned here.
119 * \param fmt The format string.
120 * \param ap Initialized list of arguments.
122 * This function is similar to vasprintf(), a GNU extension which is not in C
123 * or POSIX. It allocates a string large enough to hold the output including
124 * the terminating null byte. The allocated string is returned via the first
125 * argument and must be freed by the caller. However, unlike vasprintf(), this
126 * function calls exit() if insufficient memory is available, while vasprintf()
127 * returns -1 in this case.
129 * \return Number of bytes written, not including the terminating \p NULL
132 * \sa printf(3), vsnprintf(3), va_start(3), vasprintf(3), \ref xasprintf().
134 __printf_2_0 unsigned xvasprintf(char **result, const char *fmt, va_list ap)
140 *result = para_malloc(size + 1);
142 ret = vsnprintf(*result, size, fmt, aq);
145 if (ret < size) /* OK */
148 *result = para_realloc(*result, size);
150 ret = vsnprintf(*result, size, fmt, aq);
152 assert(ret >= 0 && ret < size);
157 * Print to a dynamically allocated string, variable number of arguments.
159 * \param result See \ref xvasprintf().
160 * \param fmt Usual format string.
162 * \return The return value of the underlying call to \ref xvasprintf().
164 * \sa \ref xvasprintf() and the references mentioned there.
166 __printf_2_3 unsigned xasprintf(char **result, const char *fmt, ...)
172 ret = xvasprintf(result, fmt, ap);
178 * Allocate a sufficiently large string and print into it.
180 * \param fmt A usual format string.
182 * Produce output according to \p fmt. No artificial bound on the length of the
183 * resulting string is imposed.
185 * \return This function either returns a pointer to a string that must be
186 * freed by the caller or aborts without returning.
188 * \sa printf(3), \ref xasprintf().
190 __must_check __printf_1_2 __malloc char *make_message(const char *fmt, ...)
196 xvasprintf(&msg, fmt, ap);
202 * Free the content of a pointer and set it to \p NULL.
204 * This is equivalent to "free(*arg); *arg = NULL;".
206 * \param arg The pointer whose content should be freed.
208 void freep(void *arg)
210 void **ptr = (void **)arg;
216 * Paraslash's version of strcat().
218 * \param a String to be appended to.
219 * \param b String to append.
221 * Append \p b to \p a.
223 * \return If \a a is \p NULL, return a pointer to a copy of \a b, i.e.
224 * para_strcat(NULL, b) is equivalent to para_strdup(b). If \a b is \p NULL,
225 * return \a a without making a copy of \a a. Otherwise, construct the
226 * concatenation \a c, free \a a (but not \a b) and return \a c.
230 __must_check __malloc char *para_strcat(char *a, const char *b)
235 return para_strdup(b);
238 tmp = make_message("%s%s", a, b);
244 * Paraslash's version of dirname().
246 * \param name Pointer to the full path.
248 * Compute the directory component of \p name.
250 * \return If \a name is \p NULL or the empty string, return \p NULL.
251 * Otherwise, Make a copy of \a name and return its directory component. Caller
252 * is responsible to free the result.
254 __must_check __malloc char *para_dirname(const char *name)
260 ret = para_strdup(name);
261 p = strrchr(ret, '/');
270 * Paraslash's version of basename().
272 * \param name Pointer to the full path.
274 * Compute the filename component of \a name.
276 * \return \p NULL if (a) \a name is the empty string or \p NULL, or (b) name
277 * ends with a slash. Otherwise, a pointer within \a name is returned. Caller
278 * must not free the result.
280 __must_check char *para_basename(const char *name)
286 ret = strrchr(name, '/');
294 * Get the logname of the current user.
296 * \return A dynamically allocated string that must be freed by the caller. On
297 * errors, the string "unknown_user" is returned, i.e. this function never
302 __must_check __malloc char *para_logname(void)
304 struct passwd *pw = getpwuid(getuid());
305 return para_strdup(pw? pw->pw_name : "unknown_user");
309 * Get the home directory of the current user.
311 * \return A dynamically allocated string that must be freed by the caller. If
312 * the home directory could not be found, this function returns "/tmp".
314 __must_check __malloc char *para_homedir(void)
316 struct passwd *pw = getpwuid(getuid());
317 return para_strdup(pw? pw->pw_dir : "/tmp");
321 * Get the own hostname.
323 * \return A dynamically allocated string containing the hostname.
327 __malloc char *para_hostname(void)
332 return para_strdup(u.nodename);
336 * Call a custom function for each complete line.
338 * \param flags Any combination of flags defined in \ref for_each_line_flags.
339 * \param buf The buffer containing data separated by newlines.
340 * \param size The number of bytes in \a buf.
341 * \param line_handler The custom function.
342 * \param private_data Pointer passed to \a line_handler.
344 * For each complete line in \p buf, \p line_handler is called. The first
345 * argument to \p line_handler is (a copy of) the current line, and \p
346 * private_data is passed as the second argument. If the \p FELF_READ_ONLY
347 * flag is unset, a pointer into \a buf is passed to the line handler,
348 * otherwise a pointer to a copy of the current line is passed instead. This
349 * copy is freed immediately after the line handler returns.
351 * The function returns if \p line_handler returns a negative value or no more
352 * lines are in the buffer. The rest of the buffer (last chunk containing an
353 * incomplete line) is moved to the beginning of the buffer if FELF_READ_ONLY is
356 * \return On success this function returns the number of bytes not handled to
357 * \p line_handler. The only possible error is a negative return value from the
358 * line handler. In this case processing stops and the return value of the line
359 * handler is returned to indicate failure.
361 * \sa \ref for_each_line_flags.
363 int for_each_line(unsigned flags, char *buf, size_t size,
364 line_handler_t *line_handler, void *private_data)
366 char *start = buf, *end;
367 int ret, i, num_lines = 0;
369 // PARA_NOTICE_LOG("buf: %s\n", buf);
370 while (start < buf + size) {
374 next_cr = memchr(start, '\n', buf + size - start);
375 next_null = memchr(start, '\0', next_cr?
376 next_cr - start : buf + size - start);
377 if (!next_cr && !next_null)
384 if (!(flags & FELF_DISCARD_FIRST) || start != buf) {
385 if (flags & FELF_READ_ONLY) {
386 size_t s = end - start;
387 char *b = para_malloc(s + 1);
390 ret = line_handler(b, private_data);
394 ret = line_handler(start, private_data);
401 i = buf + size - start;
402 if (i && i != size && !(flags & FELF_READ_ONLY))
403 memmove(buf, start, i);
407 /** Return the hex characters of the lower 4 bits. */
408 #define hex(a) (hexchar[(a) & 15])
410 static void write_size_header(char *buf, int n)
412 static char hexchar[] = "0123456789abcdef";
414 buf[0] = hex(n >> 12);
415 buf[1] = hex(n >> 8);
416 buf[2] = hex(n >> 4);
422 * Read a four-byte hex-number and return its value.
424 * Each status item sent by para_server is prefixed with such a hex number in
425 * ASCII which describes the size of the status item.
427 * \param buf The buffer which must be at least four bytes long.
429 * \return The value of the hex number on success, \p -E_SIZE_PREFIX if the
430 * buffer did not contain only hex digits.
432 int read_size_header(const char *buf)
436 for (i = 0; i < 4; i++) {
437 unsigned char c = buf[i];
439 if (c >= '0' && c <= '9') {
443 if (c >= 'a' && c <= 'f') {
447 return -E_SIZE_PREFIX;
450 return -E_SIZE_PREFIX;
455 * Safely print into a buffer at a given offset.
457 * \param b Determines the buffer, its size, and the offset.
458 * \param fmt The format string.
460 * This function prints into the buffer given by \a b at the offset which is
461 * also given by \a b. If there is not enough space to hold the result, the
462 * buffer size is doubled until the underlying call to vsnprintf() succeeds
463 * or the size of the buffer exceeds the maximal size specified in \a b.
465 * In the latter case the unmodified \a buf and \a offset values as well as the
466 * private_data pointer of \a b are passed to the \a max_size_handler of \a b.
467 * If this function succeeds, i.e. returns a non-negative value, the offset of
468 * \a b is reset to zero and the given data is written to the beginning of the
469 * buffer. If \a max_size_handler() returns a negative value, this value is
470 * returned by \a para_printf().
472 * Upon return, the offset of \a b is adjusted accordingly so that subsequent
473 * calls to this function append data to what is already contained in the
476 * It's OK to call this function with \p b->buf being \p NULL. In this case, an
477 * initial buffer is allocated.
479 * \return The number of bytes printed into the buffer (not including the
480 * terminating \p NULL byte) on success, negative on errors. If there is no
481 * size-bound on \a b, i.e. if \p b->max_size is zero, this function never
484 * \sa make_message(), vsnprintf(3).
486 __printf_2_3 int para_printf(struct para_buffer *b, const char *fmt, ...)
488 int ret, sz_off = (b->flags & PBF_SIZE_PREFIX)? 5 : 0;
491 b->buf = para_malloc(128);
496 char *p = b->buf + b->offset;
497 size_t size = b->size - b->offset;
502 ret = vsnprintf(p + sz_off, size - sz_off, fmt, ap);
504 if (ret > -1 && ret < size - sz_off) { /* success */
505 b->offset += ret + sz_off;
507 write_size_header(p, ret);
511 /* check if we may grow the buffer */
512 if (!b->max_size || 2 * b->size < b->max_size) { /* yes */
513 /* try again with more space */
515 b->buf = para_realloc(b->buf, b->size);
518 /* can't grow buffer */
519 if (!b->offset || !b->max_size_handler) /* message too large */
520 return -ERRNO_TO_PARA_ERROR(ENOSPC);
521 ret = b->max_size_handler(b->buf, b->offset, b->private_data);
528 /** \cond llong_minmax */
529 /* LLONG_MAX and LLONG_MIN might not be defined. */
531 #define LLONG_MAX 9223372036854775807LL
534 #define LLONG_MIN (-LLONG_MAX - 1LL)
536 /** \endcond llong_minmax */
539 * Convert a string to a 64-bit signed integer value.
541 * \param str The string to be converted.
542 * \param value Result pointer.
546 * \sa \ref para_atoi32(), strtol(3), atoi(3).
548 int para_atoi64(const char *str, int64_t *value)
553 errno = 0; /* To distinguish success/failure after call */
554 tmp = strtoll(str, &endptr, 10);
555 if (errno == ERANGE && (tmp == LLONG_MAX || tmp == LLONG_MIN))
556 return -E_ATOI_OVERFLOW;
558 * If there were no digits at all, strtoll() stores the original value
562 return -E_ATOI_NO_DIGITS;
564 * The implementation may also set errno and return 0 in case no
565 * conversion was performed.
567 if (errno != 0 && tmp == 0)
568 return -E_ATOI_NO_DIGITS;
569 if (*endptr != '\0') /* Further characters after number */
570 return -E_ATOI_JUNK_AT_END;
576 * Convert a string to a 32-bit signed integer value.
578 * \param str The string to be converted.
579 * \param value Result pointer.
583 * \sa \ref para_atoi64().
585 int para_atoi32(const char *str, int32_t *value)
589 const int32_t max = 2147483647;
591 ret = para_atoi64(str, &tmp);
594 if (tmp > max || tmp < -max - 1)
595 return -E_ATOI_OVERFLOW;
600 static inline int loglevel_equal(const char *arg, const char * const ll)
602 return !strncasecmp(arg, ll, strlen(ll));
606 * Compute the loglevel number from its name.
608 * \param txt The name of the loglevel (debug, info, ...).
610 * \return The numeric representation of the loglevel name.
612 int get_loglevel_by_name(const char *txt)
614 if (loglevel_equal(txt, "debug"))
616 if (loglevel_equal(txt, "info"))
618 if (loglevel_equal(txt, "notice"))
620 if (loglevel_equal(txt, "warning"))
622 if (loglevel_equal(txt, "error"))
624 if (loglevel_equal(txt, "crit"))
626 if (loglevel_equal(txt, "emerg"))
631 static int get_next_word(const char *buf, const char *delim, char **word)
633 enum line_state_flags {LSF_HAVE_WORD = 1, LSF_BACKSLASH = 2,
634 LSF_SINGLE_QUOTE = 4, LSF_DOUBLE_QUOTE = 8};
639 out = para_malloc(strlen(buf) + 1);
642 for (in = buf; *in; in++) {
647 if (state & LSF_BACKSLASH) /* \\ */
649 state |= LSF_BACKSLASH;
650 state |= LSF_HAVE_WORD;
654 if (state & LSF_BACKSLASH) { /* \n or \t */
655 *out++ = (*in == 'n')? '\n' : '\t';
656 state &= ~LSF_BACKSLASH;
661 if (state & LSF_BACKSLASH) /* \" */
663 if (state & LSF_SINGLE_QUOTE) /* '" */
665 if (state & LSF_DOUBLE_QUOTE) {
666 state &= ~LSF_DOUBLE_QUOTE;
669 state |= LSF_HAVE_WORD;
670 state |= LSF_DOUBLE_QUOTE;
673 if (state & LSF_BACKSLASH) /* \' */
675 if (state & LSF_DOUBLE_QUOTE) /* "' */
677 if (state & LSF_SINGLE_QUOTE) {
678 state &= ~LSF_SINGLE_QUOTE;
681 state |= LSF_HAVE_WORD;
682 state |= LSF_SINGLE_QUOTE;
685 for (p = delim; *p; p++) {
688 if (state & LSF_BACKSLASH)
690 if (state & LSF_SINGLE_QUOTE)
692 if (state & LSF_DOUBLE_QUOTE)
694 if (state & LSF_HAVE_WORD)
698 if (*p) /* ignore delimiter at the beginning */
701 state |= LSF_HAVE_WORD;
703 state &= ~LSF_BACKSLASH;
706 if (!(state & LSF_HAVE_WORD))
708 ret = -ERRNO_TO_PARA_ERROR(EINVAL);
709 if (state & LSF_BACKSLASH) {
710 PARA_ERROR_LOG("trailing backslash\n");
713 if ((state & LSF_SINGLE_QUOTE) || (state & LSF_DOUBLE_QUOTE)) {
714 PARA_ERROR_LOG("unmatched quote character\n");
727 * Get the number of the word the cursor is on.
729 * \param buf The zero-terminated line buffer.
730 * \param delim Characters that separate words.
731 * \param point The cursor position.
733 * \return Zero-based word number.
735 int compute_word_num(const char *buf, const char *delim, int point)
741 for (p = buf, num_words = 0; ; p += ret, num_words++) {
742 ret = get_next_word(p, delim, &word);
746 if (p + ret >= buf + point)
753 * Free an array of words created by create_argv() or create_shifted_argv().
755 * \param argv A pointer previously obtained by \ref create_argv().
757 void free_argv(char **argv)
763 for (i = 0; argv[i]; i++)
768 static int create_argv_offset(int offset, const char *buf, const char *delim,
771 char *word, **argv = para_malloc((offset + 1) * sizeof(char *));
775 for (i = 0; i < offset; i++)
777 for (p = buf; p && *p; p += ret, i++) {
778 ret = get_next_word(p, delim, &word);
783 argv = para_realloc(argv, (i + 2) * sizeof(char*));
798 * Split a buffer into words.
800 * This parser honors single and double quotes, backslash-escaped characters
801 * and special characters like \\n. The result contains pointers to copies of
802 * the words contained in buf and has to be freed by using \ref free_argv().
804 * \param buf The buffer to be split.
805 * \param delim Each character in this string is treated as a separator.
806 * \param result The array of words is returned here.
808 * It's OK to pass NULL as the buffer argument. This is equivalent to passing
811 * \return Number of words in buf, negative on errors. The array returned
812 * through the result pointer is NULL terminated.
814 int create_argv(const char *buf, const char *delim, char ***result)
816 return create_argv_offset(0, buf, delim, result);
820 * Split a buffer into words, offset one.
822 * This is similar to \ref create_argv() but the returned array is one element
823 * larger, words start at index one and element zero is initialized to \p NULL.
824 * Callers must set element zero to a non-NULL value before calling free_argv()
825 * on the returned array to avoid a memory leak.
827 * \param buf See \ref create_argv().
828 * \param delim See \ref create_argv().
829 * \param result See \ref create_argv().
831 * \return Number of words plus one on success, negative on errors.
833 int create_shifted_argv(const char *buf, const char *delim, char ***result)
835 return create_argv_offset(1, buf, delim, result);
839 * Find out if the given string is contained in the arg vector.
841 * \param arg The string to look for.
842 * \param argv The array to search.
844 * \return The first index whose value equals \a arg, or \p -E_ARG_NOT_FOUND if
845 * arg was not found in \a argv.
847 int find_arg(const char *arg, char **argv)
852 return -E_ARG_NOT_FOUND;
853 for (i = 0; argv[i]; i++)
854 if (strcmp(arg, argv[i]) == 0)
856 return -E_ARG_NOT_FOUND;
860 * Compile a regular expression.
862 * This simple wrapper calls regcomp() and logs a message on errors.
864 * \param preg See regcomp(3).
865 * \param regex See regcomp(3).
866 * \param cflags See regcomp(3).
870 int para_regcomp(regex_t *preg, const char *regex, int cflags)
874 int ret = regcomp(preg, regex, cflags);
878 size = regerror(ret, preg, NULL, 0);
879 buf = para_malloc(size);
880 regerror(ret, preg, buf, size);
881 PARA_ERROR_LOG("%s\n", buf);
887 * strdup() for not necessarily zero-terminated strings.
889 * \param src The source buffer.
890 * \param len The number of bytes to be copied.
892 * \return A 0-terminated buffer of length \a len + 1.
894 * This is similar to strndup(), which is a GNU extension. However, one
895 * difference is that strndup() returns \p NULL if insufficient memory was
896 * available while this function aborts in this case.
898 * \sa strdup(), \ref para_strdup().
900 char *safe_strdup(const char *src, size_t len)
904 assert(len < (size_t)-1);
905 p = para_malloc(len + 1);
913 * Copy the value of a key=value pair.
915 * This checks whether the given buffer starts with "key=", ignoring case. If
916 * yes, a copy of the value is returned. The source buffer may not be
919 * \param src The source buffer.
920 * \param len The number of bytes of the tag.
921 * \param key Only copy if it is the value of this key.
923 * \return A zero-terminated buffer, or \p NULL if the key was
924 * not of the given type.
926 char *key_value_copy(const char *src, size_t len, const char *key)
928 int keylen = strlen(key);
932 if (strncasecmp(src, key, keylen))
934 if (src[keylen] != '=')
936 return safe_strdup(src + keylen + 1, len - keylen - 1);
939 static bool utf8_mode(void)
941 static bool initialized, have_utf8;
944 char *info = nl_langinfo(CODESET);
945 have_utf8 = (info && strcmp(info, "UTF-8") == 0);
947 PARA_INFO_LOG("%susing UTF-8 character encoding\n",
948 have_utf8? "" : "not ");
953 static int xwcwidth(wchar_t wc, size_t pos)
957 /* special-case for tab */
958 if (wc == 0x09) /* tab */
959 return (pos | 7) + 1 - pos;
961 /* wcswidth() returns -1 for non-printable characters */
962 return n >= 0? n : 1;
965 static size_t xwcswidth(const wchar_t *s, size_t n)
970 w += xwcwidth(*s++, w);
975 * Skip a given number of cells at the beginning of a string.
977 * \param s The input string.
978 * \param cells_to_skip Desired number of cells that should be skipped.
979 * \param bytes_to_skip Result.
981 * This function computes how many input bytes must be skipped to advance a
982 * string by the given width. If the current character encoding is not UTF-8,
983 * this is simply the given number of cells, i.e. \a cells_to_skip. Otherwise,
984 * \a s is treated as a multibyte string and on successful return, \a s +
985 * bytes_to_skip points to the start of a multibyte string such that the total
986 * width of the multibyte characters that are skipped by advancing \a s that
987 * many bytes equals at least \a cells_to_skip.
991 int skip_cells(const char *s, size_t cells_to_skip, size_t *bytes_to_skip)
995 size_t n, bytes_parsed, cells_skipped;
998 if (cells_to_skip == 0)
1001 *bytes_to_skip = cells_to_skip;
1004 bytes_parsed = cells_skipped = 0;
1005 memset(&ps, 0, sizeof(ps));
1007 while (cells_to_skip > cells_skipped) {
1010 mbret = mbrtowc(&wc, s + bytes_parsed, n - bytes_parsed, &ps);
1012 if (mbret == (size_t)-1 || mbret == (size_t)-2)
1013 return -ERRNO_TO_PARA_ERROR(EILSEQ);
1014 bytes_parsed += mbret;
1015 cells_skipped += xwcwidth(wc, cells_skipped);
1017 *bytes_to_skip = bytes_parsed;
1022 * Compute the width of an UTF-8 string.
1024 * \param s The string.
1025 * \param result The width of \a s is returned here.
1027 * If not in UTF8-mode. this function is just a wrapper for strlen(3).
1028 * Otherwise \a s is treated as an UTF-8 string and its display width is
1029 * computed. Note that this function may fail if the underlying call to
1030 * mbsrtowcs(3) fails, so the caller must check the return value.
1032 * \sa nl_langinfo(3), wcswidth(3).
1036 __must_check int strwidth(const char *s, size_t *result)
1038 const char *src = s;
1040 static wchar_t *dest;
1044 * Never call any log function here. This may result in an endless loop
1045 * as para_gui's para_log() calls this function.
1049 *result = strlen(s);
1052 memset(&state, 0, sizeof(state));
1054 num_wchars = mbsrtowcs(NULL, &src, 0, &state);
1055 if (num_wchars == (size_t)-1)
1056 return -ERRNO_TO_PARA_ERROR(errno);
1057 if (num_wchars == 0)
1059 dest = para_malloc((num_wchars + 1) * sizeof(*dest));
1061 memset(&state, 0, sizeof(state));
1062 num_wchars = mbsrtowcs(dest, &src, num_wchars, &state);
1063 assert(num_wchars > 0 && num_wchars != (size_t)-1);
1064 *result = xwcswidth(dest, num_wchars);
1070 * Truncate and sanitize a (wide character) string.
1072 * This replaces all non-printable characters by spaces and makes sure that the
1073 * modified string does not exceed the given maximal width.
1075 * \param src The source string in multi-byte form.
1076 * \param max_width The maximal number of cells the result may occupy.
1077 * \param result Sanitized multi-byte string, must be freed by caller.
1078 * \param width The width of the sanitized string, always <= max_width.
1080 * The function is wide-character aware but falls back to C strings for
1081 * non-UTF-8 locales.
1083 * \return Standard. On success, *result points to a sanitized copy of the
1084 * given string. This copy was allocated with malloc() and should hence be
1085 * freed when the caller is no longer interested in the result.
1087 * The function fails if the given string contains an invalid multibyte
1088 * sequence. In this case, *result is set to NULL, and *width to zero.
1090 __must_check int sanitize_str(const char *src, size_t max_width,
1091 char **result, size_t *width)
1094 static wchar_t *wcs;
1095 size_t num_wchars, n;
1098 *result = para_strdup(src);
1099 /* replace non-printable characters by spaces */
1100 for (n = 0; n < max_width && src[n]; n++) {
1101 if (!isprint((unsigned char)src[n]))
1104 (*result)[n] = '\0';
1110 memset(&state, 0, sizeof(state));
1111 num_wchars = mbsrtowcs(NULL, &src, 0, &state);
1112 if (num_wchars == (size_t)-1)
1113 return -ERRNO_TO_PARA_ERROR(errno);
1114 wcs = para_malloc((num_wchars + 1) * sizeof(*wcs));
1115 memset(&state, 0, sizeof(state));
1116 num_wchars = mbsrtowcs(wcs, &src, num_wchars + 1, &state);
1117 assert(num_wchars != (size_t)-1);
1118 for (n = 0; n < num_wchars && *width < max_width; n++) {
1119 if (!iswprint(wcs[n]))
1121 *width += xwcwidth(wcs[n], *width);
1124 n = wcstombs(NULL, wcs, 0) + 1;
1125 *result = para_malloc(n);
1126 num_wchars = wcstombs(*result, wcs, n);
1127 assert(num_wchars != (size_t)-1);