fix(cli): tighten Wasm tool validation

Signed-off-by: akrm al-hakimi <alhakimiakrmj@gmail.com>

Author: cachebag

host/src/wasm_host_fns.rs

@@ -61,16 +61,17 @@ impl WasmToolOptions {
         }
 
         let mut merged_env = Vec::with_capacity(env.len() + inherit_env.len());
-        for spec in env {
-            merged_env.push(parse_env_pair(spec)?);
-        }
         for key in inherit_env {
             if key.is_empty() {
                 bail!("--tool-wasi-env-inherit key must not be empty");
             }
             let value = std::env::var(key)
                 .with_context(|| format!("inherit environment variable {key}"))?;
-            merged_env.push((key.clone(), value));
+            set_env_pair(&mut merged_env, key.clone(), value);
+        }
+        for spec in env {
+            let (key, value) = parse_env_pair(spec)?;
+            set_env_pair(&mut merged_env, key, value);
         }
 
         Ok(Self {
@@ -134,7 +135,7 @@ impl WasmTool {
     }
 
     pub fn invoke(&self, args: Value) -> Result<Value> {
-        let request = serde_json::json!({ "name": self.name, "args": args });
+        let request = serde_json::json!({ "name": &self.name, "args": args });
         let stdin = serde_json::to_vec(&request)?;
         let stdout = MemoryOutputPipe::new(self.options.output_limit);
         let stderr = MemoryOutputPipe::new(self.options.output_limit);
@@ -244,10 +245,15 @@ fn parse_wasi_dir(spec: &str, read_only: bool) -> Result<WasiDir> {
     let (host, guest) = if let Some(idx) = spec.rfind(':') {
         let (host, guest) = spec.split_at(idx);
         let guest = &guest[1..];
-        if guest.starts_with('/') || guest == "." || guest.starts_with("./") {
+        if is_windows_drive_path(spec, idx) {
+            (spec, "/host")
+        } else if guest.starts_with('/') || guest == "." || guest.starts_with("./") {
             (host, guest)
         } else {
-            (spec, "/host")
+            bail!(
+                "invalid WASI preopen guest path {:?}: expected absolute path, '.', or './path'",
+                guest
+            );
         }
     } else {
         (spec, "/host")
@@ -279,6 +285,31 @@ fn parse_env_pair(spec: &str) -> Result<(String, String)> {
     Ok((key.to_string(), value.to_string()))
 }
 
+fn set_env_pair(env: &mut Vec<(String, String)>, key: String, value: String) {
+    if let Some((_, existing)) = env
+        .iter_mut()
+        .find(|(existing_key, _)| existing_key == &key)
+    {
+        *existing = value;
+    } else {
+        env.push((key, value));
+    }
+}
+
+fn is_windows_drive_path(spec: &str, colon_idx: usize) -> bool {
+    colon_idx == 1
+        && spec
+            .as_bytes()
+            .first()
+            .map(|b| b.is_ascii_alphabetic())
+            .unwrap_or(false)
+        && spec
+            .as_bytes()
+            .get(2)
+            .map(|b| *b == b'/' || *b == b'\\')
+            .unwrap_or(false)
+}
+
 fn pipe_text(pipe: &MemoryOutputPipe) -> String {
     String::from_utf8_lossy(&pipe.contents()).into_owned()
 }
@@ -847,6 +878,27 @@ mod tests {
         assert_eq!(opts.dirs[0].guest, "/host");
     }
 
+    #[test]
+    fn cli_options_use_last_explicit_env_value_for_duplicate_keys() {
+        let opts = WasmToolOptions::from_cli(
+            &[],
+            &[],
+            &[
+                "A=first".to_string(),
+                "B=only".to_string(),
+                "A=second".to_string(),
+            ],
+            &[],
+            1,
+            1,
+        )
+        .unwrap();
+        assert_eq!(
+            opts.env,
+            vec![("A".into(), "second".into()), ("B".into(), "only".into())]
+        );
+    }
+
     #[test]
     fn cli_options_reject_invalid_values() {
         let dir = tempdir("invalid-options");
@@ -857,6 +909,15 @@ mod tests {
         );
         assert!(WasmToolOptions::from_cli(&[], &[], &["=value".to_string()], &[], 1, 1).is_err());
         assert!(WasmToolOptions::from_cli(&[], &[], &[], &["".to_string()], 1, 1).is_err());
+        assert!(WasmToolOptions::from_cli(
+            &[format!("{}:relative", dir.display())],
+            &[],
+            &[],
+            &[],
+            1,
+            1,
+        )
+        .is_err());
         assert!(WasmToolOptions::from_cli(
             &[
                 format!("{}:/dup", dir.display()),