cbor.rs 90.7%

175 of 193 lines run, 44 of 52 functions · run #35 on main · run missed

//! Deterministic CBOR (RFC 8949 §4.2), as much of it as Spectra encodes:
//! unsigned integers, byte and text strings, arrays, maps with integer
//! keys, null and booleans. Shortest forms, definite lengths, map keys in
//! ascending order; the decoder refuses anything else, so one value has
//! exactly one encoding and hashing it is meaningful (spec §9.5).

use std::collections::BTreeMap;

#[derive(Clone, Debug, PartialEq, Eq)]
pub enum Value {
    Uint(u64),
    Bytes(Vec<u8>),
    Text(String),
    Array(Vec<Value>),
    Map(BTreeMap<u64, Value>),
    Bool(bool),
    Null,
}

impl Value {
    pub fn map<const N: usize>(entries: [(u64, Value); N]) -> Value {
        Value::Map(entries.into_iter().collect())
    }
    pub fn as_uint(&self) -> Option<u64> {
        match self {
            Value::Uint(u) => Some(*u),
            _ => None,
        }
    }
    pub fn as_bytes(&self) -> Option<&[u8]> {
        match self {
            Value::Bytes(b) => Some(b),
            _ => None,
        }
    }
    pub fn as_text(&self) -> Option<&str> {
        match self {
            Value::Text(t) => Some(t),
            _ => None,
        }
    }
    pub fn as_array(&self) -> Option<&[Value]> {
        match self {
            Value::Array(a) => Some(a),
            _ => None,
        }
    }
    pub fn as_map(&self) -> Option<&BTreeMap<u64, Value>> {
        match self {
            Value::Map(m) => Some(m),
            _ => None,
        }
    }
    pub fn is_null(&self) -> bool {
        matches!(self, Value::Null)
    }
}

fn head(out: &mut Vec<u8>, major: u8, n: u64) {
    let m = major << 5;
    match n {
        0..=23 => out.push(m | n as u8),
        24..=0xff => out.extend_from_slice(&[m | 24, n as u8]),
        0x100..=0xffff => {
            out.push(m | 25);
            out.extend_from_slice(&(n as u16).to_be_bytes());
        }
        0x1_0000..=0xffff_ffff => {
            out.push(m | 26);
            out.extend_from_slice(&(n as u32).to_be_bytes());
        }
        _ => {
            out.push(m | 27);
            out.extend_from_slice(&n.to_be_bytes());
        }
    }
}

fn put(out: &mut Vec<u8>, v: &Value) {
    match v {
        Value::Uint(n) => head(out, 0, *n),
        Value::Bytes(b) => {
            head(out, 2, b.len() as u64);
            out.extend_from_slice(b);
        }
        Value::Text(t) => {
            head(out, 3, t.len() as u64);
            out.extend_from_slice(t.as_bytes());
        }
        Value::Array(a) => {
            head(out, 4, a.len() as u64);
            for x in a {
                put(out, x);
            }
        }
        // BTreeMap iterates keys ascending, which for unsigned integers is
        // the order of their shortest encodings.
        Value::Map(m) => {
            head(out, 5, m.len() as u64);
            for (k, x) in m {
                head(out, 0, *k);
                put(out, x);
            }
        }
        Value::Bool(false) => out.push(0xf4),
        Value::Bool(true) => out.push(0xf5),
        Value::Null => out.push(0xf6),
    }
}

pub fn encode(v: &Value) -> Vec<u8> {
    let mut out = Vec::new();
    put(&mut out, v);
    out
}

/// Why bytes are not a value Spectra encodes.
#[derive(Clone, Debug, PartialEq, Eq, thiserror::Error)]
#[error("malformed CBOR: {0}")]
pub struct Error(pub String);

struct Reader<'a> {
    b: &'a [u8],
    at: usize,
    depth: usize,
}

const MAX_DEPTH: usize = 32;

impl<'a> Reader<'a> {
    fn take(&mut self, n: usize) -> Result<&'a [u8], Error> {
        let end = self.at.checked_add(n).filter(|e| *e <= self.b.len()).ok_or_else(|| Error("truncated".into()))?;
        let s = &self.b[self.at..end];
        self.at = end;
        Ok(s)
    }

    fn head(&mut self) -> Result<(u8, u64), Error> {
        let first = self.take(1)?[0];
        let (major, info) = (first >> 5, first & 0x1f);
        let n = match info {
            0..=23 => info as u64,
            24 => self.take(1)?[0] as u64,
            25 => u16::from_be_bytes(self.take(2)?.try_into().unwrap()) as u64,
            26 => u32::from_be_bytes(self.take(4)?.try_into().unwrap()) as u64,
            27 => u64::from_be_bytes(self.take(8)?.try_into().unwrap()),
            _ if major == 7 => return Ok((7, info as u64)),
            _ => return Err(Error("an indefinite length or a reserved form".into())),
        };
        let minimal = match info {
            24 => n >= 24,
            25 => n > 0xff,
            26 => n > 0xffff,
            27 => n > 0xffff_ffff,
            _ => true,
        };
        if !minimal && major != 7 {
            return Err(Error("a length or number not in its shortest form".into()));
        }
        Ok((major, n))
    }

    fn len(&mut self, n: u64) -> Result<usize, Error> {
        let n = usize::try_from(n).map_err(|_| Error("too long".into()))?;
        if n > self.b.len() - self.at {
            return Err(Error("truncated".into()));
        }
        Ok(n)
    }

    fn value(&mut self) -> Result<Value, Error> {
        self.depth += 1;
        if self.depth > MAX_DEPTH {
            return Err(Error("nested too deeply".into()));
        }
        let (major, n) = self.head()?;
        let v = match major {
            0 => Value::Uint(n),
            2 => {
                let l = self.len(n)?;
                Value::Bytes(self.take(l)?.to_vec())
            }
            3 => {
                let l = self.len(n)?;
                Value::Text(String::from_utf8(self.take(l)?.to_vec()).map_err(|_| Error("text that is not UTF-8".into()))?)
            }
            4 => {
                let l = self.len(n)?;
                let mut a = Vec::with_capacity(l);
                for _ in 0..l {
                    a.push(self.value()?);
                }
                Value::Array(a)
            }
            5 => {
                let l = self.len(n)?;
                let mut m = BTreeMap::new();
                let mut last: Option<u64> = None;
                for _ in 0..l {
                    let (km, k) = self.head()?;
                    if km != 0 {
                        return Err(Error("a map key that is not an unsigned integer".into()));
                    }
                    if last.is_some_and(|p| k <= p) {
                        return Err(Error("map keys out of order or repeated".into()));
                    }
                    last = Some(k);
                    m.insert(k, self.value()?);
                }
                Value::Map(m)
            }
            7 => match n {
                20 => Value::Bool(false),
                21 => Value::Bool(true),
                22 => Value::Null,
                _ => return Err(Error("an unsupported simple value or float".into())),
            },
            _ => return Err(Error("a negative integer or a tag".into())),
        };
        self.depth -= 1;
        Ok(v)
    }
}

/// Decode exactly one value, refusing any non-canonical encoding.
pub fn decode(b: &[u8]) -> Result<Value, Error> {
    let mut r = Reader { b, at: 0, depth: 0 };
    let v = r.value()?;
    if r.at != b.len() {
        return Err(Error("bytes after the value".into()));
    }
    Ok(v)
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn round_trips_and_known_encodings() {
        let v = Value::map([
            (0, Value::Uint(1)),
            (1, Value::Text("é".into())),
            (2, Value::Bytes(vec![1, 2])),
            (3, Value::Array(vec![Value::Null, Value::Bool(true), Value::Uint(500)])),
            (24, Value::Uint(u64::MAX)),
        ]);
        let b = encode(&v);
        assert_eq!(decode(&b).unwrap(), v);
        assert_eq!(encode(&Value::Uint(23)), [0x17]);
        assert_eq!(encode(&Value::Uint(24)), [0x18, 24]);
        assert_eq!(encode(&Value::Uint(1000)), [0x19, 0x03, 0xe8]);
        assert_eq!(encode(&Value::Text("a".into())), [0x61, b'a']);
    }

    #[test]
    fn refuses_what_is_not_canonical() {
        assert!(decode(&[0x18, 5]).is_err(), "5 in two bytes");
        assert!(decode(&[0xa2, 0x01, 0x00, 0x00, 0x00]).is_err(), "keys out of order");
        assert!(decode(&[0x5f]).is_err(), "indefinite length");
        assert!(decode(&[0x01, 0x02]).is_err(), "trailing bytes");
        assert!(decode(&[0x5a, 0xff, 0xff, 0xff, 0xff]).is_err(), "truncated");
        assert!(decode(&[0x20]).is_err(), "negative");
        let deep = [0x81u8; 64];
        assert!(decode(&deep).is_err(), "too deep");
    }
}

`/`	Search
`g` `c`	Code
`g` `h`	History
`g` `b`	Bookmarks
`g` `t`	Trust
`y`	Permalink to this state (files and trees)
`?`	This sheet

1		//! Deterministic CBOR (RFC 8949 §4.2), as much of it as Spectra encodes:
2		//! unsigned integers, byte and text strings, arrays, maps with integer
3		//! keys, null and booleans. Shortest forms, definite lengths, map keys in
4		//! ascending order; the decoder refuses anything else, so one value has
5		//! exactly one encoding and hashing it is meaningful (spec §9.5).
6
7		use std::collections::BTreeMap;
8
9		#[derive(Clone, Debug, PartialEq, Eq)]
10		pub enum Value {
11		Uint(u64),
12		Bytes(Vec<u8>),
13		Text(String),
14		Array(Vec<Value>),
15		Map(BTreeMap<u64, Value>),
16		Bool(bool),
17		Null,
18		}
19
20		impl Value {
21	67465×	pub fn map<const N: usize>(entries: [(u64, Value); N]) -> Value {
22	67465×	Value::Map(entries.into_iter().collect())
23	67465×	}
24	5013×	pub fn as_uint(&self) -> Option<u64> {
25	5013×	match self {
26	5013×	Value::Uint(u) => Some(*u),
27	0×	_ => None,
28		}
29	5013×	}
30	13260×	pub fn as_bytes(&self) -> Option<&[u8]> {
31	13260×	match self {
32	13260×	Value::Bytes(b) => Some(b),
33	0×	_ => None,
34		}
35	13260×	}
36	4549×	pub fn as_text(&self) -> Option<&str> {
37	4549×	match self {
38	4549×	Value::Text(t) => Some(t),
39	0×	_ => None,
40		}
41	4549×	}
42	1727×	pub fn as_array(&self) -> Option<&[Value]> {
43	1727×	match self {
44	1727×	Value::Array(a) => Some(a),
45	0×	_ => None,
46		}
47	1727×	}
48	5962×	pub fn as_map(&self) -> Option<&BTreeMap<u64, Value>> {
49	5962×	match self {
50	5962×	Value::Map(m) => Some(m),
51	0×	_ => None,
52		}
53	5962×	}
54	0×	pub fn is_null(&self) -> bool {
55	0×	matches!(self, Value::Null)
56	0×	}
57		}
58
59	977436×	fn head(out: &mut Vec<u8>, major: u8, n: u64) {
60	977436×	let m = major << 5;
61	977436×	match n {
62	977436×	0..=23 => out.push(m \| n as u8),
63	187916×	24..=0xff => out.extend_from_slice(&[m \| 24, n as u8]),
64	88704×	0x100..=0xffff => {
65	31230×	out.push(m \| 25);
66	31230×	out.extend_from_slice(&(n as u16).to_be_bytes());
67	31230×	}
68	57474×	0x1_0000..=0xffff_ffff => {
69	0×	out.push(m \| 26);
70	0×	out.extend_from_slice(&(n as u32).to_be_bytes());
71	0×	}
72	57474×	_ => {
73	57474×	out.push(m \| 27);
74	57474×	out.extend_from_slice(&n.to_be_bytes());
75	57474×	}
76		}
77	977436×	}
78
79	602712×	fn put(out: &mut Vec<u8>, v: &Value) {
80	602712×	match v {
81	185421×	Value::Uint(n) => head(out, 0, *n),
82	85706×	Value::Bytes(b) => {
83	85706×	head(out, 2, b.len() as u64);
84	85706×	out.extend_from_slice(b);
85	85706×	}
86	93492×	Value::Text(t) => {
87	93492×	head(out, 3, t.len() as u64);
88	93492×	out.extend_from_slice(t.as_bytes());
89	93492×	}
90	33305×	Value::Array(a) => {
91	33305×	head(out, 4, a.len() as u64);
92	56437×	for x in a {
93	56437×	put(out, x);
94	56437×	}
95		}
96		// BTreeMap iterates keys ascending, which for unsigned integers is
97		// the order of their shortest encodings.
98	67465×	Value::Map(m) => {
99	67465×	head(out, 5, m.len() as u64);
100	512047×	for (k, x) in m {
101	512047×	head(out, 0, *k);
102	512047×	put(out, x);
103	512047×	}
104		}
105	0×	Value::Bool(false) => out.push(0xf4),
106	1×	Value::Bool(true) => out.push(0xf5),
107	137322×	Value::Null => out.push(0xf6),
108		}
109	602712×	}
110
111	34228×	pub fn encode(v: &Value) -> Vec<u8> {
112	34228×	let mut out = Vec::new();
113	34228×	put(&mut out, v);
114	34228×	out
115	34228×	}
116
117		/// Why bytes are not a value Spectra encodes.
118		#[derive(Clone, Debug, PartialEq, Eq, thiserror::Error)]
119		#[error("malformed CBOR: {0}")]
120		pub struct Error(pub String);
121
122		struct Reader<'a> {
123		b: &'a [u8],
124		at: usize,
125		depth: usize,
126		}
127
128		const MAX_DEPTH: usize = 32;
129
130		impl<'a> Reader<'a> {
131	96945×	fn take(&mut self, n: usize) -> Result<&'a [u8], Error> {
132	96945×	let end = self.at.checked_add(n).filter(\|e\| *e <= self.b.len()).ok_or_else(\|\| Error("truncated".into()))?;
133	96945×	let s = &self.b[self.at..end];
134	96945×	self.at = end;
135	96945×	Ok(s)
136	96945×	}
137
138	64116×	fn head(&mut self) -> Result<(u8, u64), Error> {
139	64116×	let first = self.take(1)?[0];
140	64116×	let (major, info) = (first >> 5, first & 0x1f);
141	64115×	let n = match info {
142	64116×	0..=23 => info as u64,
143	9071×	24 => self.take(1)?[0] as u64,
144	3099×	25 => u16::from_be_bytes(self.take(2)?.try_into().unwrap()) as u64,
145	1×	26 => u32::from_be_bytes(self.take(4)?.try_into().unwrap()) as u64,
146	2847×	27 => u64::from_be_bytes(self.take(8)?.try_into().unwrap()),
147	1×	_ if major == 7 => return Ok((7, info as u64)),
148	1×	_ => return Err(Error("an indefinite length or a reserved form".into())),
149		};
150	64115×	let minimal = match info {
151	9071×	24 => n >= 24,
152	3099×	25 => n > 0xff,
153	1×	26 => n > 0xffff,
154	2847×	27 => n > 0xffff_ffff,
155	49097×	_ => true,
156		};
157	64115×	if !minimal && major != 7 {
158	1×	return Err(Error("a length or number not in its shortest form".into()));
159	64114×	}
160	64114×	Ok((major, n))
161	64116×	}
162
163	25536×	fn len(&mut self, n: u64) -> Result<usize, Error> {
164	25536×	let n = usize::try_from(n).map_err(\|_\| Error("too long".into()))?;
165	25536×	if n > self.b.len() - self.at {
166	1×	return Err(Error("truncated".into()));
167	25535×	}
168	25535×	Ok(n)
169	25536×	}
170
171	34513×	fn value(&mut self) -> Result<Value, Error> {
172	34513×	self.depth += 1;
173	34513×	if self.depth > MAX_DEPTH {
174	1×	return Err(Error("nested too deeply".into()));
175	34512×	}
176	34512×	let (major, n) = self.head()?;
177	34510×	let v = match major {
178	5043×	0 => Value::Uint(n),
179		2 => {
180	13262×	let l = self.len(n)?;
181	13261×	Value::Bytes(self.take(l)?.to_vec())
182		}
183		3 => {
184	4550×	let l = self.len(n)?;
185	4550×	Value::Text(String::from_utf8(self.take(l)?.to_vec()).map_err(\|_\| Error("text that is not UTF-8".into()))?)
186		}
187		4 => {
188	1760×	let l = self.len(n)?;
189	1760×	let mut a = Vec::with_capacity(l);
190	1760×	for _ in 0..l {
191	1340×	a.push(self.value()?);
192		}
193	1728×	Value::Array(a)
194		}
195		5 => {
196	5964×	let l = self.len(n)?;
197	5964×	let mut m = BTreeMap::new();
198	5964×	let mut last: Option<u64> = None;
199	5964×	for _ in 0..l {
200	29604×	let (km, k) = self.head()?;
201	29604×	if km != 0 {
202	0×	return Err(Error("a map key that is not an unsigned integer".into()));
203	29604×	}
204	29604×	if last.is_some_and(\|p\| k <= p) {
205	1×	return Err(Error("map keys out of order or repeated".into()));
206	29603×	}
207	29603×	last = Some(k);
208	29603×	m.insert(k, self.value()?);
209		}
210	5963×	Value::Map(m)
211		}
212	3930×	7 => match n {
213	0×	20 => Value::Bool(false),
214	1×	21 => Value::Bool(true),
215	3929×	22 => Value::Null,
216	0×	_ => return Err(Error("an unsupported simple value or float".into())),
217		},
218	1×	_ => return Err(Error("a negative integer or a tag".into())),
219		};
220	34475×	self.depth -= 1;
221	34475×	Ok(v)
222	34513×	}
223		}
224
225		/// Decode exactly one value, refusing any non-canonical encoding.
226	3570×	pub fn decode(b: &[u8]) -> Result<Value, Error> {
227	3570×	let mut r = Reader { b, at: 0, depth: 0 };
228	3570×	let v = r.value()?;
229	3564×	if r.at != b.len() {
230	1×	return Err(Error("bytes after the value".into()));
231	3563×	}
232	3563×	Ok(v)
233	3570×	}
234
235		#[cfg(test)]
236		mod tests {
237		use super::*;
238
239		#[test]
240	1×	fn round_trips_and_known_encodings() {
241	1×	let v = Value::map([
242	1×	(0, Value::Uint(1)),
243	1×	(1, Value::Text("é".into())),
244	1×	(2, Value::Bytes(vec![1, 2])),
245	1×	(3, Value::Array(vec![Value::Null, Value::Bool(true), Value::Uint(500)])),
246	1×	(24, Value::Uint(u64::MAX)),
247	1×	]);
248	1×	let b = encode(&v);
249	1×	assert_eq!(decode(&b).unwrap(), v);
250	1×	assert_eq!(encode(&Value::Uint(23)), [0x17]);
251	1×	assert_eq!(encode(&Value::Uint(24)), [0x18, 24]);
252	1×	assert_eq!(encode(&Value::Uint(1000)), [0x19, 0x03, 0xe8]);
253	1×	assert_eq!(encode(&Value::Text("a".into())), [0x61, b'a']);
254	1×	}
255
256		#[test]
257	1×	fn refuses_what_is_not_canonical() {
258	1×	assert!(decode(&[0x18, 5]).is_err(), "5 in two bytes");
259	1×	assert!(decode(&[0xa2, 0x01, 0x00, 0x00, 0x00]).is_err(), "keys out of order");
260	1×	assert!(decode(&[0x5f]).is_err(), "indefinite length");
261	1×	assert!(decode(&[0x01, 0x02]).is_err(), "trailing bytes");
262	1×	assert!(decode(&[0x5a, 0xff, 0xff, 0xff, 0xff]).is_err(), "truncated");
263	1×	assert!(decode(&[0x20]).is_err(), "negative");
264	1×	let deep = [0x81u8; 64];
265	1×	assert!(decode(&deep).is_err(), "too deep");
266	1×	}
267		}

Coverage / crates/spectra-core/src/cbor.rs 90.7%

Keyboard