1 /* vsprintf with automatic memory allocation.
2    Copyright (C) 1999, 2002-2003 Free Software Foundation, Inc.
3 
4    This program is free software; you can redistribute it and/or modify it
5    under the terms of the GNU Library General Public License as published
6    by the Free Software Foundation; either version 2, or (at your option)
7    any later version.
8 
9    This program is distributed in the hope that it will be useful,
10    but WITHOUT ANY WARRANTY; without even the implied warranty of
11    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
12    Library General Public License for more details.
13 
14    You should have received a copy of the GNU Library General Public
15    License along with this program; if not, write to the Free Software
16    Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307,
17    USA.  */
18 
19 /* Tell glibc's <stdio.h> to provide a prototype for snprintf().
20    This must come before <config.h> because <config.h> may include
21    <features.h>, and once <features.h> has been included, it's too late.  */
22 #ifndef _GNU_SOURCE
23 # define _GNU_SOURCE    1
24 #endif
25 
26 #ifdef HAVE_CONFIG_H
27 # include <config.h>
28 #endif
29 #ifndef IN_LIBINTL
30 # include <alloca.h>
31 #endif
32 
33 /* Specification.  */
34 #if WIDE_CHAR_VERSION
35 # include "vasnwprintf.h"
36 #else
37 # include "vasnprintf.h"
38 #endif
39 
40 #include <stdio.h>	/* snprintf(), sprintf() */
41 #include <stdlib.h>	/* abort(), malloc(), realloc(), free() */
42 #include <string.h>	/* memcpy(), strlen() */
43 #include <errno.h>	/* errno */
44 #include <limits.h>	/* CHAR_BIT */
45 #include <float.h>	/* DBL_MAX_EXP, LDBL_MAX_EXP */
46 #if WIDE_CHAR_VERSION
47 # include "wprintf-parse.h"
48 #else
49 # include "printf-parse.h"
50 #endif
51 
52 /* Checked size_t computations.  */
53 #include "xsize.h"
54 
55 #ifdef HAVE_WCHAR_T
56 # ifdef HAVE_WCSLEN
57 #  define local_wcslen wcslen
58 # else
59    /* Solaris 2.5.1 has wcslen() in a separate library libw.so. To avoid
60       a dependency towards this library, here is a local substitute.
61       Define this substitute only once, even if this file is included
62       twice in the same compilation unit.  */
63 #  ifndef local_wcslen_defined
64 #   define local_wcslen_defined 1
65 static size_t
local_wcslen(const wchar_t * s)66 local_wcslen (const wchar_t *s)
67 {
68   const wchar_t *ptr;
69 
70   for (ptr = s; *ptr != (wchar_t) 0; ptr++)
71     ;
72   return ptr - s;
73 }
74 #  endif
75 # endif
76 #endif
77 
78 #if WIDE_CHAR_VERSION
79 # define VASNPRINTF vasnwprintf
80 # define CHAR_T wchar_t
81 # define DIRECTIVE wchar_t_directive
82 # define DIRECTIVES wchar_t_directives
83 # define PRINTF_PARSE wprintf_parse
84 # define USE_SNPRINTF 1
85 # if HAVE_DECL__SNWPRINTF
86    /* On Windows, the function swprintf() has a different signature than
87       on Unix; we use the _snwprintf() function instead.  */
88 #  define SNPRINTF _snwprintf
89 # else
90    /* Unix.  */
91 #  define SNPRINTF swprintf
92 # endif
93 #else
94 # define VASNPRINTF vasnprintf
95 # define CHAR_T char
96 # define DIRECTIVE char_directive
97 # define DIRECTIVES char_directives
98 # define PRINTF_PARSE printf_parse
99 # define USE_SNPRINTF (HAVE_DECL__SNPRINTF || HAVE_SNPRINTF)
100 # if HAVE_DECL__SNPRINTF
101    /* Windows.  */
102 #  define SNPRINTF _snprintf
103 # else
104    /* Unix.  */
105 #  define SNPRINTF snprintf
106 # endif
107 #endif
108 
109 CHAR_T *
VASNPRINTF(CHAR_T * resultbuf,size_t * lengthp,const CHAR_T * format,va_list args)110 VASNPRINTF (CHAR_T *resultbuf, size_t *lengthp, const CHAR_T *format, va_list args)
111 {
112   DIRECTIVES d;
113   arguments a;
114 
115   if (PRINTF_PARSE (format, &d, &a) < 0)
116     {
117       errno = EINVAL;
118       return NULL;
119     }
120 
121 #define CLEANUP() \
122   free (d.dir);								\
123   if (a.arg)								\
124     free (a.arg);
125 
126   if (printf_fetchargs (args, &a) < 0)
127     {
128       CLEANUP ();
129       errno = EINVAL;
130       return NULL;
131     }
132 
133   {
134     size_t buf_neededlength;
135     CHAR_T *buf;
136     CHAR_T *buf_malloced;
137     const CHAR_T *cp;
138     size_t i;
139     DIRECTIVE *dp;
140     /* Output string accumulator.  */
141     CHAR_T *result;
142     size_t allocated;
143     size_t length;
144 
145     /* Allocate a small buffer that will hold a directive passed to
146        sprintf or snprintf.  */
147     buf_neededlength =
148       xsum4 (7, d.max_width_length, d.max_precision_length, 6);
149 #if HAVE_ALLOCA
150     if (buf_neededlength < 4000 / sizeof (CHAR_T))
151       {
152 	buf = (CHAR_T *) alloca (buf_neededlength * sizeof (CHAR_T));
153 	buf_malloced = NULL;
154       }
155     else
156 #endif
157       {
158 	size_t buf_memsize = xtimes (buf_neededlength, sizeof (CHAR_T));
159 	if (size_overflow_p (buf_memsize))
160 	  goto out_of_memory_1;
161 	buf = (CHAR_T *) malloc (buf_memsize);
162 	if (buf == NULL)
163 	  goto out_of_memory_1;
164 	buf_malloced = buf;
165       }
166 
167     if (resultbuf != NULL)
168       {
169 	result = resultbuf;
170 	allocated = *lengthp;
171       }
172     else
173       {
174 	result = NULL;
175 	allocated = 0;
176       }
177     length = 0;
178     /* Invariants:
179        result is either == resultbuf or == NULL or malloc-allocated.
180        If length > 0, then result != NULL.  */
181 
182     /* Ensures that allocated >= needed.  Aborts through a jump to
183        out_of_memory if needed is SIZE_MAX or otherwise too big.  */
184 #define ENSURE_ALLOCATION(needed) \
185     if ((needed) > allocated)						     \
186       {									     \
187 	size_t memory_size;						     \
188 	CHAR_T *memory;							     \
189 									     \
190 	allocated = (allocated > 0 ? xtimes (allocated, 2) : 12);	     \
191 	if ((needed) > allocated)					     \
192 	  allocated = (needed);						     \
193 	memory_size = xtimes (allocated, sizeof (CHAR_T));		     \
194 	if (size_overflow_p (memory_size))				     \
195 	  goto out_of_memory;						     \
196 	if (result == resultbuf || result == NULL)			     \
197 	  memory = (CHAR_T *) malloc (memory_size);			     \
198 	else								     \
199 	  memory = (CHAR_T *) realloc (result, memory_size);		     \
200 	if (memory == NULL)						     \
201 	  goto out_of_memory;						     \
202 	if (result == resultbuf && length > 0)				     \
203 	  memcpy (memory, result, length * sizeof (CHAR_T));		     \
204 	result = memory;						     \
205       }
206 
207     for (cp = format, i = 0, dp = &d.dir[0]; ; cp = dp->dir_end, i++, dp++)
208       {
209 	if (cp != dp->dir_start)
210 	  {
211 	    size_t n = dp->dir_start - cp;
212 	    size_t augmented_length = xsum (length, n);
213 
214 	    ENSURE_ALLOCATION (augmented_length);
215 	    memcpy (result + length, cp, n * sizeof (CHAR_T));
216 	    length = augmented_length;
217 	  }
218 	if (i == d.count)
219 	  break;
220 
221 	/* Execute a single directive.  */
222 	if (dp->conversion == '%')
223 	  {
224 	    size_t augmented_length;
225 
226 	    if (!(dp->arg_index == ARG_NONE))
227 	      abort ();
228 	    augmented_length = xsum (length, 1);
229 	    ENSURE_ALLOCATION (augmented_length);
230 	    result[length] = '%';
231 	    length = augmented_length;
232 	  }
233 	else
234 	  {
235 	    if (!(dp->arg_index != ARG_NONE))
236 	      abort ();
237 
238 	    if (dp->conversion == 'n')
239 	      {
240 		switch (a.arg[dp->arg_index].type)
241 		  {
242 		  case TYPE_COUNT_SCHAR_POINTER:
243 		    *a.arg[dp->arg_index].a.a_count_schar_pointer = length;
244 		    break;
245 		  case TYPE_COUNT_SHORT_POINTER:
246 		    *a.arg[dp->arg_index].a.a_count_short_pointer = length;
247 		    break;
248 		  case TYPE_COUNT_INT_POINTER:
249 		    *a.arg[dp->arg_index].a.a_count_int_pointer = length;
250 		    break;
251 		  case TYPE_COUNT_LONGINT_POINTER:
252 		    *a.arg[dp->arg_index].a.a_count_longint_pointer = length;
253 		    break;
254 #ifdef HAVE_LONG_LONG
255 		  case TYPE_COUNT_LONGLONGINT_POINTER:
256 		    *a.arg[dp->arg_index].a.a_count_longlongint_pointer = length;
257 		    break;
258 #endif
259 		  default:
260 		    abort ();
261 		  }
262 	      }
263 	    else
264 	      {
265 		arg_type type = a.arg[dp->arg_index].type;
266 		CHAR_T *p;
267 		unsigned int prefix_count;
268 		int prefixes[2];
269 #if !USE_SNPRINTF
270 		size_t tmp_length;
271 		CHAR_T tmpbuf[700];
272 		CHAR_T *tmp;
273 
274 		/* Allocate a temporary buffer of sufficient size for calling
275 		   sprintf.  */
276 		{
277 		  size_t width;
278 		  size_t precision;
279 
280 		  width = 0;
281 		  if (dp->width_start != dp->width_end)
282 		    {
283 		      if (dp->width_arg_index != ARG_NONE)
284 			{
285 			  int arg;
286 
287 			  if (!(a.arg[dp->width_arg_index].type == TYPE_INT))
288 			    abort ();
289 			  arg = a.arg[dp->width_arg_index].a.a_int;
290 			  width = (arg < 0 ? (unsigned int) (-arg) : arg);
291 			}
292 		      else
293 			{
294 			  const CHAR_T *digitp = dp->width_start;
295 
296 			  do
297 			    width = xsum (xtimes (width, 10), *digitp++ - '0');
298 			  while (digitp != dp->width_end);
299 			}
300 		    }
301 
302 		  precision = 6;
303 		  if (dp->precision_start != dp->precision_end)
304 		    {
305 		      if (dp->precision_arg_index != ARG_NONE)
306 			{
307 			  int arg;
308 
309 			  if (!(a.arg[dp->precision_arg_index].type == TYPE_INT))
310 			    abort ();
311 			  arg = a.arg[dp->precision_arg_index].a.a_int;
312 			  precision = (arg < 0 ? 0 : arg);
313 			}
314 		      else
315 			{
316 			  const CHAR_T *digitp = dp->precision_start + 1;
317 
318 			  precision = 0;
319 			  do
320 			    precision = xsum (xtimes (precision, 10), *digitp++ - '0');
321 			  while (digitp != dp->precision_end);
322 			}
323 		    }
324 
325 		  switch (dp->conversion)
326 		    {
327 
328 		    case 'd': case 'i': case 'u':
329 # ifdef HAVE_LONG_LONG
330 		      if (type == TYPE_LONGLONGINT || type == TYPE_ULONGLONGINT)
331 			tmp_length =
332 			  (unsigned int) (sizeof (unsigned long long) * CHAR_BIT
333 					  * 0.30103 /* binary -> decimal */
334 					  * 2 /* estimate for FLAG_GROUP */
335 					 )
336 			  + 1 /* turn floor into ceil */
337 			  + 1; /* account for leading sign */
338 		      else
339 # endif
340 		      if (type == TYPE_LONGINT || type == TYPE_ULONGINT)
341 			tmp_length =
342 			  (unsigned int) (sizeof (unsigned long) * CHAR_BIT
343 					  * 0.30103 /* binary -> decimal */
344 					  * 2 /* estimate for FLAG_GROUP */
345 					 )
346 			  + 1 /* turn floor into ceil */
347 			  + 1; /* account for leading sign */
348 		      else
349 			tmp_length =
350 			  (unsigned int) (sizeof (unsigned int) * CHAR_BIT
351 					  * 0.30103 /* binary -> decimal */
352 					  * 2 /* estimate for FLAG_GROUP */
353 					 )
354 			  + 1 /* turn floor into ceil */
355 			  + 1; /* account for leading sign */
356 		      break;
357 
358 		    case 'o':
359 # ifdef HAVE_LONG_LONG
360 		      if (type == TYPE_LONGLONGINT || type == TYPE_ULONGLONGINT)
361 			tmp_length =
362 			  (unsigned int) (sizeof (unsigned long long) * CHAR_BIT
363 					  * 0.333334 /* binary -> octal */
364 					 )
365 			  + 1 /* turn floor into ceil */
366 			  + 1; /* account for leading sign */
367 		      else
368 # endif
369 		      if (type == TYPE_LONGINT || type == TYPE_ULONGINT)
370 			tmp_length =
371 			  (unsigned int) (sizeof (unsigned long) * CHAR_BIT
372 					  * 0.333334 /* binary -> octal */
373 					 )
374 			  + 1 /* turn floor into ceil */
375 			  + 1; /* account for leading sign */
376 		      else
377 			tmp_length =
378 			  (unsigned int) (sizeof (unsigned int) * CHAR_BIT
379 					  * 0.333334 /* binary -> octal */
380 					 )
381 			  + 1 /* turn floor into ceil */
382 			  + 1; /* account for leading sign */
383 		      break;
384 
385 		    case 'x': case 'X':
386 # ifdef HAVE_LONG_LONG
387 		      if (type == TYPE_LONGLONGINT || type == TYPE_ULONGLONGINT)
388 			tmp_length =
389 			  (unsigned int) (sizeof (unsigned long long) * CHAR_BIT
390 					  * 0.25 /* binary -> hexadecimal */
391 					 )
392 			  + 1 /* turn floor into ceil */
393 			  + 2; /* account for leading sign or alternate form */
394 		      else
395 # endif
396 		      if (type == TYPE_LONGINT || type == TYPE_ULONGINT)
397 			tmp_length =
398 			  (unsigned int) (sizeof (unsigned long) * CHAR_BIT
399 					  * 0.25 /* binary -> hexadecimal */
400 					 )
401 			  + 1 /* turn floor into ceil */
402 			  + 2; /* account for leading sign or alternate form */
403 		      else
404 			tmp_length =
405 			  (unsigned int) (sizeof (unsigned int) * CHAR_BIT
406 					  * 0.25 /* binary -> hexadecimal */
407 					 )
408 			  + 1 /* turn floor into ceil */
409 			  + 2; /* account for leading sign or alternate form */
410 		      break;
411 
412 		    case 'f': case 'F':
413 # ifdef HAVE_LONG_DOUBLE
414 		      if (type == TYPE_LONGDOUBLE)
415 			tmp_length =
416 			  (unsigned int) (LDBL_MAX_EXP
417 					  * 0.30103 /* binary -> decimal */
418 					  * 2 /* estimate for FLAG_GROUP */
419 					 )
420 			  + 1 /* turn floor into ceil */
421 			  + 10; /* sign, decimal point etc. */
422 		      else
423 # endif
424 			tmp_length =
425 			  (unsigned int) (DBL_MAX_EXP
426 					  * 0.30103 /* binary -> decimal */
427 					  * 2 /* estimate for FLAG_GROUP */
428 					 )
429 			  + 1 /* turn floor into ceil */
430 			  + 10; /* sign, decimal point etc. */
431 		      tmp_length = xsum (tmp_length, precision);
432 		      break;
433 
434 		    case 'e': case 'E': case 'g': case 'G':
435 		    case 'a': case 'A':
436 		      tmp_length =
437 			12; /* sign, decimal point, exponent etc. */
438 		      tmp_length = xsum (tmp_length, precision);
439 		      break;
440 
441 		    case 'c':
442 # if defined HAVE_WINT_T && !WIDE_CHAR_VERSION
443 		      if (type == TYPE_WIDE_CHAR)
444 			tmp_length = MB_CUR_MAX;
445 		      else
446 # endif
447 			tmp_length = 1;
448 		      break;
449 
450 		    case 's':
451 # ifdef HAVE_WCHAR_T
452 		      if (type == TYPE_WIDE_STRING)
453 			{
454 			  tmp_length =
455 			    local_wcslen (a.arg[dp->arg_index].a.a_wide_string);
456 
457 #  if !WIDE_CHAR_VERSION
458 			  tmp_length = xtimes (tmp_length, MB_CUR_MAX);
459 #  endif
460 			}
461 		      else
462 # endif
463 			tmp_length = strlen (a.arg[dp->arg_index].a.a_string);
464 		      break;
465 
466 		    case 'p':
467 		      tmp_length =
468 			(unsigned int) (sizeof (void *) * CHAR_BIT
469 					* 0.25 /* binary -> hexadecimal */
470 				       )
471 			  + 1 /* turn floor into ceil */
472 			  + 2; /* account for leading 0x */
473 		      break;
474 
475 		    default:
476 		      abort ();
477 		    }
478 
479 		  if (tmp_length < width)
480 		    tmp_length = width;
481 
482 		  tmp_length = xsum (tmp_length, 1); /* account for trailing NUL */
483 		}
484 
485 		if (tmp_length <= sizeof (tmpbuf) / sizeof (CHAR_T))
486 		  tmp = tmpbuf;
487 		else
488 		  {
489 		    size_t tmp_memsize = xtimes (tmp_length, sizeof (CHAR_T));
490 
491 		    if (size_overflow_p (tmp_memsize))
492 		      /* Overflow, would lead to out of memory.  */
493 		      goto out_of_memory;
494 		    tmp = (CHAR_T *) malloc (tmp_memsize);
495 		    if (tmp == NULL)
496 		      /* Out of memory.  */
497 		      goto out_of_memory;
498 		  }
499 #endif
500 
501 		/* Construct the format string for calling snprintf or
502 		   sprintf.  */
503 		p = buf;
504 		*p++ = '%';
505 		if (dp->flags & FLAG_GROUP)
506 		  *p++ = '\'';
507 		if (dp->flags & FLAG_LEFT)
508 		  *p++ = '-';
509 		if (dp->flags & FLAG_SHOWSIGN)
510 		  *p++ = '+';
511 		if (dp->flags & FLAG_SPACE)
512 		  *p++ = ' ';
513 		if (dp->flags & FLAG_ALT)
514 		  *p++ = '#';
515 		if (dp->flags & FLAG_ZERO)
516 		  *p++ = '0';
517 		if (dp->width_start != dp->width_end)
518 		  {
519 		    size_t n = dp->width_end - dp->width_start;
520 		    memcpy (p, dp->width_start, n * sizeof (CHAR_T));
521 		    p += n;
522 		  }
523 		if (dp->precision_start != dp->precision_end)
524 		  {
525 		    size_t n = dp->precision_end - dp->precision_start;
526 		    memcpy (p, dp->precision_start, n * sizeof (CHAR_T));
527 		    p += n;
528 		  }
529 
530 		switch (type)
531 		  {
532 #ifdef HAVE_LONG_LONG
533 		  case TYPE_LONGLONGINT:
534 		  case TYPE_ULONGLONGINT:
535 		    *p++ = 'l';
536 		    /*FALLTHROUGH*/
537 #endif
538 		  case TYPE_LONGINT:
539 		  case TYPE_ULONGINT:
540 #ifdef HAVE_WINT_T
541 		  case TYPE_WIDE_CHAR:
542 #endif
543 #ifdef HAVE_WCHAR_T
544 		  case TYPE_WIDE_STRING:
545 #endif
546 		    *p++ = 'l';
547 		    break;
548 #ifdef HAVE_LONG_DOUBLE
549 		  case TYPE_LONGDOUBLE:
550 		    *p++ = 'L';
551 		    break;
552 #endif
553 		  default:
554 		    break;
555 		  }
556 		*p = dp->conversion;
557 #if USE_SNPRINTF
558 		p[1] = '%';
559 		p[2] = 'n';
560 		p[3] = '\0';
561 #else
562 		p[1] = '\0';
563 #endif
564 
565 		/* Construct the arguments for calling snprintf or sprintf.  */
566 		prefix_count = 0;
567 		if (dp->width_arg_index != ARG_NONE)
568 		  {
569 		    if (!(a.arg[dp->width_arg_index].type == TYPE_INT))
570 		      abort ();
571 		    prefixes[prefix_count++] = a.arg[dp->width_arg_index].a.a_int;
572 		  }
573 		if (dp->precision_arg_index != ARG_NONE)
574 		  {
575 		    if (!(a.arg[dp->precision_arg_index].type == TYPE_INT))
576 		      abort ();
577 		    prefixes[prefix_count++] = a.arg[dp->precision_arg_index].a.a_int;
578 		  }
579 
580 #if USE_SNPRINTF
581 		/* Prepare checking whether snprintf returns the count
582 		   via %n.  */
583 		ENSURE_ALLOCATION (xsum (length, 1));
584 		result[length] = '\0';
585 #endif
586 
587 		for (;;)
588 		  {
589 		    size_t maxlen;
590 		    int count;
591 		    int retcount;
592 
593 		    maxlen = allocated - length;
594 		    count = -1;
595 		    retcount = 0;
596 
597 #if USE_SNPRINTF
598 # define SNPRINTF_BUF(arg) \
599 		    switch (prefix_count)				    \
600 		      {							    \
601 		      case 0:						    \
602 			retcount = SNPRINTF (result + length, maxlen, buf,  \
603 					     arg, &count);		    \
604 			break;						    \
605 		      case 1:						    \
606 			retcount = SNPRINTF (result + length, maxlen, buf,  \
607 					     prefixes[0], arg, &count);	    \
608 			break;						    \
609 		      case 2:						    \
610 			retcount = SNPRINTF (result + length, maxlen, buf,  \
611 					     prefixes[0], prefixes[1], arg, \
612 					     &count);			    \
613 			break;						    \
614 		      default:						    \
615 			abort ();					    \
616 		      }
617 #else
618 # define SNPRINTF_BUF(arg) \
619 		    switch (prefix_count)				    \
620 		      {							    \
621 		      case 0:						    \
622 			count = sprintf (tmp, buf, arg);		    \
623 			break;						    \
624 		      case 1:						    \
625 			count = sprintf (tmp, buf, prefixes[0], arg);	    \
626 			break;						    \
627 		      case 2:						    \
628 			count = sprintf (tmp, buf, prefixes[0], prefixes[1],\
629 					 arg);				    \
630 			break;						    \
631 		      default:						    \
632 			abort ();					    \
633 		      }
634 #endif
635 
636 		    switch (type)
637 		      {
638 		      case TYPE_SCHAR:
639 			{
640 			  int arg = a.arg[dp->arg_index].a.a_schar;
641 			  SNPRINTF_BUF (arg);
642 			}
643 			break;
644 		      case TYPE_UCHAR:
645 			{
646 			  unsigned int arg = a.arg[dp->arg_index].a.a_uchar;
647 			  SNPRINTF_BUF (arg);
648 			}
649 			break;
650 		      case TYPE_SHORT:
651 			{
652 			  int arg = a.arg[dp->arg_index].a.a_short;
653 			  SNPRINTF_BUF (arg);
654 			}
655 			break;
656 		      case TYPE_USHORT:
657 			{
658 			  unsigned int arg = a.arg[dp->arg_index].a.a_ushort;
659 			  SNPRINTF_BUF (arg);
660 			}
661 			break;
662 		      case TYPE_INT:
663 			{
664 			  int arg = a.arg[dp->arg_index].a.a_int;
665 			  SNPRINTF_BUF (arg);
666 			}
667 			break;
668 		      case TYPE_UINT:
669 			{
670 			  unsigned int arg = a.arg[dp->arg_index].a.a_uint;
671 			  SNPRINTF_BUF (arg);
672 			}
673 			break;
674 		      case TYPE_LONGINT:
675 			{
676 			  long int arg = a.arg[dp->arg_index].a.a_longint;
677 			  SNPRINTF_BUF (arg);
678 			}
679 			break;
680 		      case TYPE_ULONGINT:
681 			{
682 			  unsigned long int arg = a.arg[dp->arg_index].a.a_ulongint;
683 			  SNPRINTF_BUF (arg);
684 			}
685 			break;
686 #ifdef HAVE_LONG_LONG
687 		      case TYPE_LONGLONGINT:
688 			{
689 			  long long int arg = a.arg[dp->arg_index].a.a_longlongint;
690 			  SNPRINTF_BUF (arg);
691 			}
692 			break;
693 		      case TYPE_ULONGLONGINT:
694 			{
695 			  unsigned long long int arg = a.arg[dp->arg_index].a.a_ulonglongint;
696 			  SNPRINTF_BUF (arg);
697 			}
698 			break;
699 #endif
700 		      case TYPE_DOUBLE:
701 			{
702 			  double arg = a.arg[dp->arg_index].a.a_double;
703 			  SNPRINTF_BUF (arg);
704 			}
705 			break;
706 #ifdef HAVE_LONG_DOUBLE
707 		      case TYPE_LONGDOUBLE:
708 			{
709 			  long double arg = a.arg[dp->arg_index].a.a_longdouble;
710 			  SNPRINTF_BUF (arg);
711 			}
712 			break;
713 #endif
714 		      case TYPE_CHAR:
715 			{
716 			  int arg = a.arg[dp->arg_index].a.a_char;
717 			  SNPRINTF_BUF (arg);
718 			}
719 			break;
720 #ifdef HAVE_WINT_T
721 		      case TYPE_WIDE_CHAR:
722 			{
723 			  wint_t arg = a.arg[dp->arg_index].a.a_wide_char;
724 			  SNPRINTF_BUF (arg);
725 			}
726 			break;
727 #endif
728 		      case TYPE_STRING:
729 			{
730 			  const char *arg = a.arg[dp->arg_index].a.a_string;
731 			  SNPRINTF_BUF (arg);
732 			}
733 			break;
734 #ifdef HAVE_WCHAR_T
735 		      case TYPE_WIDE_STRING:
736 			{
737 			  const wchar_t *arg = a.arg[dp->arg_index].a.a_wide_string;
738 			  SNPRINTF_BUF (arg);
739 			}
740 			break;
741 #endif
742 		      case TYPE_POINTER:
743 			{
744 			  void *arg = a.arg[dp->arg_index].a.a_pointer;
745 			  SNPRINTF_BUF (arg);
746 			}
747 			break;
748 		      default:
749 			abort ();
750 		      }
751 
752 #if USE_SNPRINTF
753 		    /* Portability: Not all implementations of snprintf()
754 		       are ISO C 99 compliant.  Determine the number of
755 		       bytes that snprintf() has produced or would have
756 		       produced.  */
757 		    if (count >= 0)
758 		      {
759 			/* Verify that snprintf() has NUL-terminated its
760 			   result.  */
761 			if (count < maxlen && result[length + count] != '\0')
762 			  abort ();
763 			/* Portability hack.  */
764 			if (retcount > count)
765 			  count = retcount;
766 		      }
767 		    else
768 		      {
769 			/* snprintf() doesn't understand the '%n'
770 			   directive.  */
771 			if (p[1] != '\0')
772 			  {
773 			    /* Don't use the '%n' directive; instead, look
774 			       at the snprintf() return value.  */
775 			    p[1] = '\0';
776 			    continue;
777 			  }
778 			else
779 			  {
780 			    /* Look at the snprintf() return value.  */
781 			    if (retcount < 0)
782 			      {
783 				/* HP-UX 10.20 snprintf() is doubly deficient:
784 				   It doesn't understand the '%n' directive,
785 				   *and* it returns -1 (rather than the length
786 				   that would have been required) when the
787 				   buffer is too small.  */
788 				size_t bigger_need =
789 				  xsum (xtimes (allocated, 2), 12);
790 				ENSURE_ALLOCATION (bigger_need);
791 				continue;
792 			      }
793 			    else
794 			      count = retcount;
795 			  }
796 		      }
797 #endif
798 
799 		    /* Attempt to handle failure.  */
800 		    if (count < 0)
801 		      {
802 			if (!(result == resultbuf || result == NULL))
803 			  free (result);
804 			if (buf_malloced != NULL)
805 			  free (buf_malloced);
806 			CLEANUP ();
807 			errno = EINVAL;
808 			return NULL;
809 		      }
810 
811 #if !USE_SNPRINTF
812 		    if (count >= tmp_length)
813 		      /* tmp_length was incorrectly calculated - fix the
814 			 code above!  */
815 		      abort ();
816 #endif
817 
818 		    /* Make room for the result.  */
819 		    if (count >= maxlen)
820 		      {
821 			/* Need at least count bytes.  But allocate
822 			   proportionally, to avoid looping eternally if
823 			   snprintf() reports a too small count.  */
824 			size_t n =
825 			  xmax (xsum (length, count), xtimes (allocated, 2));
826 
827 			ENSURE_ALLOCATION (n);
828 #if USE_SNPRINTF
829 			continue;
830 #endif
831 		      }
832 
833 #if USE_SNPRINTF
834 		    /* The snprintf() result did fit.  */
835 #else
836 		    /* Append the sprintf() result.  */
837 		    memcpy (result + length, tmp, count * sizeof (CHAR_T));
838 		    if (tmp != tmpbuf)
839 		      free (tmp);
840 #endif
841 
842 		    length += count;
843 		    break;
844 		  }
845 	      }
846 	  }
847       }
848 
849     /* Add the final NUL.  */
850     ENSURE_ALLOCATION (xsum (length, 1));
851     result[length] = '\0';
852 
853     if (result != resultbuf && length + 1 < allocated)
854       {
855 	/* Shrink the allocated memory if possible.  */
856 	CHAR_T *memory;
857 
858 	memory = (CHAR_T *) realloc (result, (length + 1) * sizeof (CHAR_T));
859 	if (memory != NULL)
860 	  result = memory;
861       }
862 
863     if (buf_malloced != NULL)
864       free (buf_malloced);
865     CLEANUP ();
866     *lengthp = length;
867     return result;
868 
869   out_of_memory:
870     if (!(result == resultbuf || result == NULL))
871       free (result);
872     if (buf_malloced != NULL)
873       free (buf_malloced);
874   out_of_memory_1:
875     CLEANUP ();
876     errno = ENOMEM;
877     return NULL;
878   }
879 }
880 
881 #undef SNPRINTF
882 #undef USE_SNPRINTF
883 #undef PRINTF_PARSE
884 #undef DIRECTIVES
885 #undef DIRECTIVE
886 #undef CHAR_T
887 #undef VASNPRINTF
888