Function cbm_shell_quote_word

src/cli/cli.c:5316–5350

Encode one shell word without permitting expansion or command substitution. * POSIX single-quoted strings represent an apostrophe as: '\'' */

/* Encode one shell word without permitting expansion or command substitution.
 * POSIX single-quoted strings represent an apostrophe as: '\'' */
static int cbm_shell_quote_word(const char *value, char *out, size_t out_size) {
    if (!value || !out || out_size < CLI_PAIR_LEN) {
        return CLI_ERR;
    }
    size_t used = 0;
    out[used++] = '\'';
    for (const unsigned char *cursor = (const unsigned char *)value; *cursor; cursor++) {
        if (*cursor < 0x20 || *cursor == 0x7f) {
            out[0] = '\0';
            return CLI_ERR;
        }
        if (*cursor == '\'') {
            static const char escaped_quote[] = "'\\''";
            if (sizeof(escaped_quote) - CLI_SKIP_ONE > out_size - used - CLI_PAIR_LEN) {
                out[0] = '\0';
                return CLI_ERR;
            }
            memcpy(out + used, escaped_quote, sizeof(escaped_quote) - CLI_SKIP_ONE);
            used += sizeof(escaped_quote) - CLI_SKIP_ONE;
        } else {
            if (used >= out_size - CLI_PAIR_LEN) {
                out[0] = '\0';
                return CLI_ERR;
            }
            out[used++] = (char)*cursor;
        }
    }
    if (used >= out_size - CLI_SKIP_ONE) {
        out[0] = '\0';
        return CLI_ERR;
    }
    out[used++] = '\'';
    out[used] = '\0';
    return CLI_OK;
}

/* PowerShell single-quoted words are literal; an apostrophe is represented by
 * two apostrophes. This prevents $env expansion and command substitution. */