CommandLineOptions: disallow recursive embedding of @-files.

And tests.

Author: kfriedberger

core/src/main/java/com/google/googlejavaformat/java/CommandLineOptionsParser.java

@@ -17,6 +17,7 @@
 import static java.nio.charset.StandardCharsets.UTF_8;
 
 import com.google.common.base.CharMatcher;
+import com.google.common.base.Preconditions;
 import com.google.common.base.Splitter;
 import com.google.common.collect.ImmutableRangeSet;
 import com.google.common.collect.Range;
@@ -25,7 +26,9 @@
 import java.nio.file.Files;
 import java.nio.file.Path;
 import java.nio.file.Paths;
+import java.util.ArrayDeque;
 import java.util.ArrayList;
+import java.util.Deque;
 import java.util.Iterator;
 import java.util.List;
 
@@ -41,7 +44,7 @@ final class CommandLineOptionsParser {
   static CommandLineOptions parse(Iterable<String> options) {
     CommandLineOptions.Builder optionsBuilder = CommandLineOptions.builder();
     List<String> expandedOptions = new ArrayList<>();
-    expandParamsFiles(options, expandedOptions);
+    expandParamsFiles(options, expandedOptions, new ArrayDeque<>());
     Iterator<String> it = expandedOptions.iterator();
     while (it.hasNext()) {
       String option = it.next();
@@ -186,7 +189,7 @@ private static Range<Integer> parseRange(String arg) {
    * Pre-processes an argument list, expanding arguments of the form {@code @filename} by reading
    * the content of the file and appending whitespace-delimited options to {@code arguments}.
    */
-  private static void expandParamsFiles(Iterable<String> args, List<String> expanded) {
+  private static void expandParamsFiles(Iterable<String> args, List<String> expanded, Deque<String> paramFilesStack) {
     for (String arg : args) {
       if (arg.isEmpty()) {
         continue;
@@ -196,13 +199,20 @@ private static void expandParamsFiles(Iterable<String> args, List<String> expand
       } else if (arg.startsWith("@@")) {
         expanded.add(arg.substring(1));
       } else {
-        Path path = Paths.get(arg.substring(1));
+        String filename = arg.substring(1);
+        if (paramFilesStack.contains(filename)) {
+          throw new IllegalArgumentException("parameter file was included recursively: " + filename);
+        }
+        paramFilesStack.push(filename);
+        Path path = Paths.get(filename);
         try {
           String sequence = new String(Files.readAllBytes(path), UTF_8);
-          expandParamsFiles(ARG_SPLITTER.split(sequence), expanded);
+          expandParamsFiles(ARG_SPLITTER.split(sequence), expanded, paramFilesStack);
         } catch (IOException e) {
           throw new UncheckedIOException(path + ": could not read file: " + e.getMessage(), e);
         }
+        String finishedFilename = paramFilesStack.pop();
+        Preconditions.checkState(filename.equals(finishedFilename));
       }
     }
   }

core/src/test/java/com/google/googlejavaformat/java/CommandLineOptionsParserTest.java

@@ -18,6 +18,7 @@
 import static com.google.common.truth.Truth8.assertThat;
 import static java.nio.charset.StandardCharsets.UTF_8;
 import static org.junit.Assert.fail;
+import static org.junit.Assert.assertThrows;
 
 import com.google.common.collect.ImmutableList;
 import com.google.common.collect.Range;
@@ -179,6 +180,44 @@ public void paramsFile() throws IOException {
     assertThat(options.files()).containsExactly("L", "M", "ℕ", "@O", "P", "Q");
   }
 
+  @Test
+  public void paramsFileWithNesting() throws IOException {
+    Path outer = testFolder.newFile("outer").toPath();
+    Path exit = testFolder.newFile("exit").toPath();
+    Path nested1 = testFolder.newFile("nested1").toPath();
+    Path nested2 = testFolder.newFile("nested2").toPath();
+    Path nested3 = testFolder.newFile("nested3").toPath();
+
+    String[] args = {"--dry-run", "@" + exit, "L", "@" + outer, "U"};
+
+    Files.write(exit, "--set-exit-if-changed".getBytes(UTF_8));
+    Files.write(outer, ("M\n@" + nested1.toAbsolutePath() + "\nT").getBytes(UTF_8));
+    Files.write(nested1, ("ℕ\n@" + nested2.toAbsolutePath() + "\nS").getBytes(UTF_8));
+    Files.write(nested2, ("O\n@" + nested3.toAbsolutePath() + "\nR").getBytes(UTF_8));
+    Files.write(nested3, "P\n\n   \n@@Q\n".getBytes(UTF_8));
+
+    CommandLineOptions options = CommandLineOptionsParser.parse(Arrays.asList(args));
+    assertThat(options.files()).containsExactly("L", "M", "ℕ", "O", "P", "@Q", "R", "S", "T", "U");
+  }
+
+  @Test
+  public void paramsFileWithRecursion() throws IOException {
+    Path outer = testFolder.newFile("outer").toPath();
+    Path exit = testFolder.newFile("exit").toPath();
+    Path nested1 = testFolder.newFile("nested1").toPath();
+    Path nested2 = testFolder.newFile("nested2").toPath();
+
+    String[] args = {"--dry-run", "@" + exit, "L", "@" + outer, "U"};
+
+    Files.write(exit, "--set-exit-if-changed".getBytes(UTF_8));
+    Files.write(outer, ("M\n@" + nested1.toAbsolutePath() + "\nT").getBytes(UTF_8));
+    Files.write(nested1, ("ℕ\n@" + nested2.toAbsolutePath() + "\nS").getBytes(UTF_8));
+    Files.write(nested2, ("O\n@" + nested1.toAbsolutePath() + "\nR").getBytes(UTF_8));
+
+    Exception exception = assertThrows(IllegalArgumentException.class, () -> CommandLineOptionsParser.parse(Arrays.asList(args)));
+    assertThat(exception.getMessage().startsWith("parameter file was included recursively: ")).isTrue();
+  }
+
   @Test
   public void assumeFilename() {
     assertThat(