Skip to main content

PathTokenError

Enum PathTokenError 

Source
pub enum PathTokenError {
    Empty,
    Separator,
    ParentDir,
    CurDir,
    NulByte,
    Colon,
    Unindexable,
}
Expand description

Why a string is not a safe path token.

An untrusted string becomes a path component in several places: a blob’s id/namespace (interpolated into its on-disk file path and cloud object key), and a store_id/sid from an untrusted device invitation or restore code (the name of a directory under stores/). All arrive from outside — an incoming changeset authored by any write-capable member, or a pasted code anyone can craft — so an unconstrained one could climb out of the directory it is joined onto (.., a path separator, an absolute leading slash) and make a pulling or joining device read, write, or recursively delete an arbitrary location, or — too short / not aligned to a char boundary — crash a blob’s partition-prefix slice. A string that trips any of these is bad data, refused before a path is built or used.

Variants§

§

Empty

The token is empty — no file name to write, no key to form.

§

Separator

The token contains a path separator (/ or \), so joining it onto a directory would descend into (or, with a leading separator, replace) the path rather than name a single child.

§

ParentDir

The token is exactly .., which names the parent of the directory it is joined onto rather than a child. A trailing .. component is normalized away when the path is resolved, so the join lands on the parent.

§

CurDir

The token is exactly ., which names the directory it is joined onto itself rather than a child. Like .., a trailing . component is normalized away, so stores/. resolves to stores’s parent (the data dir) — an escape just as .. is.

§

NulByte

The token contains a NUL byte, which truncates the path at the OS boundary.

§

Colon

The token contains a :, which on Windows names an alternate data stream (file:stream) or a drive-relative reference (c:dir) rather than a child.

§

Unindexable

The dash-stripped id is too short, or splits a multi-byte char, to take the two leading byte-pairs the {ab}/{cd} partition prefix needs.

Trait Implementations§

Source§

impl Clone for PathTokenError

Source§

fn clone(&self) -> PathTokenError

Returns a duplicate of the value. Read more
1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for PathTokenError

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Display for PathTokenError

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Error for PathTokenError

1.30.0 · Source§

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any. Read more
1.0.0 · Source§

fn description(&self) -> &str

👎Deprecated since 1.42.0: use the Display impl or to_string()
1.0.0 · Source§

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0: replaced by Error::source, which can support downcasting
Source§

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)
Provides type-based access to context intended for error reports. Read more
Source§

impl From<PathTokenError> for CachedLocatorRemovalError

Source§

fn from(source: PathTokenError) -> Self

Converts to this type from the input type.
Source§

impl From<PathTokenError> for LocalBlobRemovalError

Source§

fn from(source: PathTokenError) -> Self

Converts to this type from the input type.
Source§

impl From<PathTokenError> for LocalBlobStoreError

Source§

fn from(source: PathTokenError) -> Self

Converts to this type from the input type.
Source§

impl From<PathTokenError> for RequiredLocalBlobPathError

Source§

fn from(source: PathTokenError) -> Self

Converts to this type from the input type.
Source§

impl From<PathTokenError> for StoreBlobFileError

Source§

fn from(source: PathTokenError) -> Self

Converts to this type from the input type.
Source§

impl PartialEq for PathTokenError

Source§

fn eq(&self, other: &PathTokenError) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl Eq for PathTokenError

Source§

impl StructuralPartialEq for PathTokenError

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
§

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

§

fn equivalent(&self, key: &K) -> bool

Checks if this value is equivalent to the given key. Read more
§

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

§

fn equivalent(&self, key: &K) -> bool

Compare self to key and return true if they are equal.
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T> Instrument for T

§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided [Span], returning an Instrumented wrapper. Read more
§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T> ToString for T
where T: Display + ?Sized,

Source§

fn to_string(&self) -> String

Converts the given value to a String. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<T> WithSubscriber for T

§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a [WithDispatch] wrapper. Read more
§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a [WithDispatch] wrapper. Read more