1 /* vsprintf with automatic memory allocation.
2 Copyright (C) 1999, 2002-2003 Free Software Foundation, Inc.
3
4 This program is free software; you can redistribute it and/or modify it
5 under the terms of the GNU Library General Public License as published
6 by the Free Software Foundation; either version 2, or (at your option)
7 any later version.
8
9 This program is distributed in the hope that it will be useful,
10 but WITHOUT ANY WARRANTY; without even the implied warranty of
11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 Library General Public License for more details.
13
14 You should have received a copy of the GNU Library General Public
15 License along with this program; if not, write to the Free Software
16 Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307,
17 USA. */
18
19 /* Tell glibc's <stdio.h> to provide a prototype for snprintf().
20 This must come before <config.h> because <config.h> may include
21 <features.h>, and once <features.h> has been included, it's too late. */
22 #ifndef _GNU_SOURCE
23 # define _GNU_SOURCE 1
24 #endif
25
26 #ifdef HAVE_CONFIG_H
27 # include <config.h>
28 #endif
29 #ifndef IN_LIBINTL
30 # include <alloca.h>
31 #endif
32
33 /* Specification. */
34 #if WIDE_CHAR_VERSION
35 # include "vasnwprintf.h"
36 #else
37 # include "vasnprintf.h"
38 #endif
39
40 #include <stdio.h> /* snprintf(), sprintf() */
41 #include <stdlib.h> /* abort(), malloc(), realloc(), free() */
42 #include <string.h> /* memcpy(), strlen() */
43 #include <errno.h> /* errno */
44 #include <limits.h> /* CHAR_BIT */
45 #include <float.h> /* DBL_MAX_EXP, LDBL_MAX_EXP */
46 #if WIDE_CHAR_VERSION
47 # include "wprintf-parse.h"
48 #else
49 # include "printf-parse.h"
50 #endif
51
52 /* Checked size_t computations. */
53 #include "xsize.h"
54
55 #ifdef HAVE_WCHAR_T
56 # ifdef HAVE_WCSLEN
57 # define local_wcslen wcslen
58 # else
59 /* Solaris 2.5.1 has wcslen() in a separate library libw.so. To avoid
60 a dependency towards this library, here is a local substitute.
61 Define this substitute only once, even if this file is included
62 twice in the same compilation unit. */
63 # ifndef local_wcslen_defined
64 # define local_wcslen_defined 1
65 static size_t
local_wcslen(const wchar_t * s)66 local_wcslen (const wchar_t *s)
67 {
68 const wchar_t *ptr;
69
70 for (ptr = s; *ptr != (wchar_t) 0; ptr++)
71 ;
72 return ptr - s;
73 }
74 # endif
75 # endif
76 #endif
77
78 #if WIDE_CHAR_VERSION
79 # define VASNPRINTF vasnwprintf
80 # define CHAR_T wchar_t
81 # define DIRECTIVE wchar_t_directive
82 # define DIRECTIVES wchar_t_directives
83 # define PRINTF_PARSE wprintf_parse
84 # define USE_SNPRINTF 1
85 # if HAVE_DECL__SNWPRINTF
86 /* On Windows, the function swprintf() has a different signature than
87 on Unix; we use the _snwprintf() function instead. */
88 # define SNPRINTF _snwprintf
89 # else
90 /* Unix. */
91 # define SNPRINTF swprintf
92 # endif
93 #else
94 # define VASNPRINTF vasnprintf
95 # define CHAR_T char
96 # define DIRECTIVE char_directive
97 # define DIRECTIVES char_directives
98 # define PRINTF_PARSE printf_parse
99 # define USE_SNPRINTF (HAVE_DECL__SNPRINTF || HAVE_SNPRINTF)
100 # if HAVE_DECL__SNPRINTF
101 /* Windows. */
102 # define SNPRINTF _snprintf
103 # else
104 /* Unix. */
105 # define SNPRINTF snprintf
106 # endif
107 #endif
108
109 CHAR_T *
VASNPRINTF(CHAR_T * resultbuf,size_t * lengthp,const CHAR_T * format,va_list args)110 VASNPRINTF (CHAR_T *resultbuf, size_t *lengthp, const CHAR_T *format, va_list args)
111 {
112 DIRECTIVES d;
113 arguments a;
114
115 if (PRINTF_PARSE (format, &d, &a) < 0)
116 {
117 errno = EINVAL;
118 return NULL;
119 }
120
121 #define CLEANUP() \
122 free (d.dir); \
123 if (a.arg) \
124 free (a.arg);
125
126 if (printf_fetchargs (args, &a) < 0)
127 {
128 CLEANUP ();
129 errno = EINVAL;
130 return NULL;
131 }
132
133 {
134 size_t buf_neededlength;
135 CHAR_T *buf;
136 CHAR_T *buf_malloced;
137 const CHAR_T *cp;
138 size_t i;
139 DIRECTIVE *dp;
140 /* Output string accumulator. */
141 CHAR_T *result;
142 size_t allocated;
143 size_t length;
144
145 /* Allocate a small buffer that will hold a directive passed to
146 sprintf or snprintf. */
147 buf_neededlength =
148 xsum4 (7, d.max_width_length, d.max_precision_length, 6);
149 #if HAVE_ALLOCA
150 if (buf_neededlength < 4000 / sizeof (CHAR_T))
151 {
152 buf = (CHAR_T *) alloca (buf_neededlength * sizeof (CHAR_T));
153 buf_malloced = NULL;
154 }
155 else
156 #endif
157 {
158 size_t buf_memsize = xtimes (buf_neededlength, sizeof (CHAR_T));
159 if (size_overflow_p (buf_memsize))
160 goto out_of_memory_1;
161 buf = (CHAR_T *) malloc (buf_memsize);
162 if (buf == NULL)
163 goto out_of_memory_1;
164 buf_malloced = buf;
165 }
166
167 if (resultbuf != NULL)
168 {
169 result = resultbuf;
170 allocated = *lengthp;
171 }
172 else
173 {
174 result = NULL;
175 allocated = 0;
176 }
177 length = 0;
178 /* Invariants:
179 result is either == resultbuf or == NULL or malloc-allocated.
180 If length > 0, then result != NULL. */
181
182 /* Ensures that allocated >= needed. Aborts through a jump to
183 out_of_memory if needed is SIZE_MAX or otherwise too big. */
184 #define ENSURE_ALLOCATION(needed) \
185 if ((needed) > allocated) \
186 { \
187 size_t memory_size; \
188 CHAR_T *memory; \
189 \
190 allocated = (allocated > 0 ? xtimes (allocated, 2) : 12); \
191 if ((needed) > allocated) \
192 allocated = (needed); \
193 memory_size = xtimes (allocated, sizeof (CHAR_T)); \
194 if (size_overflow_p (memory_size)) \
195 goto out_of_memory; \
196 if (result == resultbuf || result == NULL) \
197 memory = (CHAR_T *) malloc (memory_size); \
198 else \
199 memory = (CHAR_T *) realloc (result, memory_size); \
200 if (memory == NULL) \
201 goto out_of_memory; \
202 if (result == resultbuf && length > 0) \
203 memcpy (memory, result, length * sizeof (CHAR_T)); \
204 result = memory; \
205 }
206
207 for (cp = format, i = 0, dp = &d.dir[0]; ; cp = dp->dir_end, i++, dp++)
208 {
209 if (cp != dp->dir_start)
210 {
211 size_t n = dp->dir_start - cp;
212 size_t augmented_length = xsum (length, n);
213
214 ENSURE_ALLOCATION (augmented_length);
215 memcpy (result + length, cp, n * sizeof (CHAR_T));
216 length = augmented_length;
217 }
218 if (i == d.count)
219 break;
220
221 /* Execute a single directive. */
222 if (dp->conversion == '%')
223 {
224 size_t augmented_length;
225
226 if (!(dp->arg_index == ARG_NONE))
227 abort ();
228 augmented_length = xsum (length, 1);
229 ENSURE_ALLOCATION (augmented_length);
230 result[length] = '%';
231 length = augmented_length;
232 }
233 else
234 {
235 if (!(dp->arg_index != ARG_NONE))
236 abort ();
237
238 if (dp->conversion == 'n')
239 {
240 switch (a.arg[dp->arg_index].type)
241 {
242 case TYPE_COUNT_SCHAR_POINTER:
243 *a.arg[dp->arg_index].a.a_count_schar_pointer = length;
244 break;
245 case TYPE_COUNT_SHORT_POINTER:
246 *a.arg[dp->arg_index].a.a_count_short_pointer = length;
247 break;
248 case TYPE_COUNT_INT_POINTER:
249 *a.arg[dp->arg_index].a.a_count_int_pointer = length;
250 break;
251 case TYPE_COUNT_LONGINT_POINTER:
252 *a.arg[dp->arg_index].a.a_count_longint_pointer = length;
253 break;
254 #ifdef HAVE_LONG_LONG
255 case TYPE_COUNT_LONGLONGINT_POINTER:
256 *a.arg[dp->arg_index].a.a_count_longlongint_pointer = length;
257 break;
258 #endif
259 default:
260 abort ();
261 }
262 }
263 else
264 {
265 arg_type type = a.arg[dp->arg_index].type;
266 CHAR_T *p;
267 unsigned int prefix_count;
268 int prefixes[2];
269 #if !USE_SNPRINTF
270 size_t tmp_length;
271 CHAR_T tmpbuf[700];
272 CHAR_T *tmp;
273
274 /* Allocate a temporary buffer of sufficient size for calling
275 sprintf. */
276 {
277 size_t width;
278 size_t precision;
279
280 width = 0;
281 if (dp->width_start != dp->width_end)
282 {
283 if (dp->width_arg_index != ARG_NONE)
284 {
285 int arg;
286
287 if (!(a.arg[dp->width_arg_index].type == TYPE_INT))
288 abort ();
289 arg = a.arg[dp->width_arg_index].a.a_int;
290 width = (arg < 0 ? (unsigned int) (-arg) : arg);
291 }
292 else
293 {
294 const CHAR_T *digitp = dp->width_start;
295
296 do
297 width = xsum (xtimes (width, 10), *digitp++ - '0');
298 while (digitp != dp->width_end);
299 }
300 }
301
302 precision = 6;
303 if (dp->precision_start != dp->precision_end)
304 {
305 if (dp->precision_arg_index != ARG_NONE)
306 {
307 int arg;
308
309 if (!(a.arg[dp->precision_arg_index].type == TYPE_INT))
310 abort ();
311 arg = a.arg[dp->precision_arg_index].a.a_int;
312 precision = (arg < 0 ? 0 : arg);
313 }
314 else
315 {
316 const CHAR_T *digitp = dp->precision_start + 1;
317
318 precision = 0;
319 do
320 precision = xsum (xtimes (precision, 10), *digitp++ - '0');
321 while (digitp != dp->precision_end);
322 }
323 }
324
325 switch (dp->conversion)
326 {
327
328 case 'd': case 'i': case 'u':
329 # ifdef HAVE_LONG_LONG
330 if (type == TYPE_LONGLONGINT || type == TYPE_ULONGLONGINT)
331 tmp_length =
332 (unsigned int) (sizeof (unsigned long long) * CHAR_BIT
333 * 0.30103 /* binary -> decimal */
334 * 2 /* estimate for FLAG_GROUP */
335 )
336 + 1 /* turn floor into ceil */
337 + 1; /* account for leading sign */
338 else
339 # endif
340 if (type == TYPE_LONGINT || type == TYPE_ULONGINT)
341 tmp_length =
342 (unsigned int) (sizeof (unsigned long) * CHAR_BIT
343 * 0.30103 /* binary -> decimal */
344 * 2 /* estimate for FLAG_GROUP */
345 )
346 + 1 /* turn floor into ceil */
347 + 1; /* account for leading sign */
348 else
349 tmp_length =
350 (unsigned int) (sizeof (unsigned int) * CHAR_BIT
351 * 0.30103 /* binary -> decimal */
352 * 2 /* estimate for FLAG_GROUP */
353 )
354 + 1 /* turn floor into ceil */
355 + 1; /* account for leading sign */
356 break;
357
358 case 'o':
359 # ifdef HAVE_LONG_LONG
360 if (type == TYPE_LONGLONGINT || type == TYPE_ULONGLONGINT)
361 tmp_length =
362 (unsigned int) (sizeof (unsigned long long) * CHAR_BIT
363 * 0.333334 /* binary -> octal */
364 )
365 + 1 /* turn floor into ceil */
366 + 1; /* account for leading sign */
367 else
368 # endif
369 if (type == TYPE_LONGINT || type == TYPE_ULONGINT)
370 tmp_length =
371 (unsigned int) (sizeof (unsigned long) * CHAR_BIT
372 * 0.333334 /* binary -> octal */
373 )
374 + 1 /* turn floor into ceil */
375 + 1; /* account for leading sign */
376 else
377 tmp_length =
378 (unsigned int) (sizeof (unsigned int) * CHAR_BIT
379 * 0.333334 /* binary -> octal */
380 )
381 + 1 /* turn floor into ceil */
382 + 1; /* account for leading sign */
383 break;
384
385 case 'x': case 'X':
386 # ifdef HAVE_LONG_LONG
387 if (type == TYPE_LONGLONGINT || type == TYPE_ULONGLONGINT)
388 tmp_length =
389 (unsigned int) (sizeof (unsigned long long) * CHAR_BIT
390 * 0.25 /* binary -> hexadecimal */
391 )
392 + 1 /* turn floor into ceil */
393 + 2; /* account for leading sign or alternate form */
394 else
395 # endif
396 if (type == TYPE_LONGINT || type == TYPE_ULONGINT)
397 tmp_length =
398 (unsigned int) (sizeof (unsigned long) * CHAR_BIT
399 * 0.25 /* binary -> hexadecimal */
400 )
401 + 1 /* turn floor into ceil */
402 + 2; /* account for leading sign or alternate form */
403 else
404 tmp_length =
405 (unsigned int) (sizeof (unsigned int) * CHAR_BIT
406 * 0.25 /* binary -> hexadecimal */
407 )
408 + 1 /* turn floor into ceil */
409 + 2; /* account for leading sign or alternate form */
410 break;
411
412 case 'f': case 'F':
413 # ifdef HAVE_LONG_DOUBLE
414 if (type == TYPE_LONGDOUBLE)
415 tmp_length =
416 (unsigned int) (LDBL_MAX_EXP
417 * 0.30103 /* binary -> decimal */
418 * 2 /* estimate for FLAG_GROUP */
419 )
420 + 1 /* turn floor into ceil */
421 + 10; /* sign, decimal point etc. */
422 else
423 # endif
424 tmp_length =
425 (unsigned int) (DBL_MAX_EXP
426 * 0.30103 /* binary -> decimal */
427 * 2 /* estimate for FLAG_GROUP */
428 )
429 + 1 /* turn floor into ceil */
430 + 10; /* sign, decimal point etc. */
431 tmp_length = xsum (tmp_length, precision);
432 break;
433
434 case 'e': case 'E': case 'g': case 'G':
435 case 'a': case 'A':
436 tmp_length =
437 12; /* sign, decimal point, exponent etc. */
438 tmp_length = xsum (tmp_length, precision);
439 break;
440
441 case 'c':
442 # if defined HAVE_WINT_T && !WIDE_CHAR_VERSION
443 if (type == TYPE_WIDE_CHAR)
444 tmp_length = MB_CUR_MAX;
445 else
446 # endif
447 tmp_length = 1;
448 break;
449
450 case 's':
451 # ifdef HAVE_WCHAR_T
452 if (type == TYPE_WIDE_STRING)
453 {
454 tmp_length =
455 local_wcslen (a.arg[dp->arg_index].a.a_wide_string);
456
457 # if !WIDE_CHAR_VERSION
458 tmp_length = xtimes (tmp_length, MB_CUR_MAX);
459 # endif
460 }
461 else
462 # endif
463 tmp_length = strlen (a.arg[dp->arg_index].a.a_string);
464 break;
465
466 case 'p':
467 tmp_length =
468 (unsigned int) (sizeof (void *) * CHAR_BIT
469 * 0.25 /* binary -> hexadecimal */
470 )
471 + 1 /* turn floor into ceil */
472 + 2; /* account for leading 0x */
473 break;
474
475 default:
476 abort ();
477 }
478
479 if (tmp_length < width)
480 tmp_length = width;
481
482 tmp_length = xsum (tmp_length, 1); /* account for trailing NUL */
483 }
484
485 if (tmp_length <= sizeof (tmpbuf) / sizeof (CHAR_T))
486 tmp = tmpbuf;
487 else
488 {
489 size_t tmp_memsize = xtimes (tmp_length, sizeof (CHAR_T));
490
491 if (size_overflow_p (tmp_memsize))
492 /* Overflow, would lead to out of memory. */
493 goto out_of_memory;
494 tmp = (CHAR_T *) malloc (tmp_memsize);
495 if (tmp == NULL)
496 /* Out of memory. */
497 goto out_of_memory;
498 }
499 #endif
500
501 /* Construct the format string for calling snprintf or
502 sprintf. */
503 p = buf;
504 *p++ = '%';
505 if (dp->flags & FLAG_GROUP)
506 *p++ = '\'';
507 if (dp->flags & FLAG_LEFT)
508 *p++ = '-';
509 if (dp->flags & FLAG_SHOWSIGN)
510 *p++ = '+';
511 if (dp->flags & FLAG_SPACE)
512 *p++ = ' ';
513 if (dp->flags & FLAG_ALT)
514 *p++ = '#';
515 if (dp->flags & FLAG_ZERO)
516 *p++ = '0';
517 if (dp->width_start != dp->width_end)
518 {
519 size_t n = dp->width_end - dp->width_start;
520 memcpy (p, dp->width_start, n * sizeof (CHAR_T));
521 p += n;
522 }
523 if (dp->precision_start != dp->precision_end)
524 {
525 size_t n = dp->precision_end - dp->precision_start;
526 memcpy (p, dp->precision_start, n * sizeof (CHAR_T));
527 p += n;
528 }
529
530 switch (type)
531 {
532 #ifdef HAVE_LONG_LONG
533 case TYPE_LONGLONGINT:
534 case TYPE_ULONGLONGINT:
535 *p++ = 'l';
536 /*FALLTHROUGH*/
537 #endif
538 case TYPE_LONGINT:
539 case TYPE_ULONGINT:
540 #ifdef HAVE_WINT_T
541 case TYPE_WIDE_CHAR:
542 #endif
543 #ifdef HAVE_WCHAR_T
544 case TYPE_WIDE_STRING:
545 #endif
546 *p++ = 'l';
547 break;
548 #ifdef HAVE_LONG_DOUBLE
549 case TYPE_LONGDOUBLE:
550 *p++ = 'L';
551 break;
552 #endif
553 default:
554 break;
555 }
556 *p = dp->conversion;
557 #if USE_SNPRINTF
558 p[1] = '%';
559 p[2] = 'n';
560 p[3] = '\0';
561 #else
562 p[1] = '\0';
563 #endif
564
565 /* Construct the arguments for calling snprintf or sprintf. */
566 prefix_count = 0;
567 if (dp->width_arg_index != ARG_NONE)
568 {
569 if (!(a.arg[dp->width_arg_index].type == TYPE_INT))
570 abort ();
571 prefixes[prefix_count++] = a.arg[dp->width_arg_index].a.a_int;
572 }
573 if (dp->precision_arg_index != ARG_NONE)
574 {
575 if (!(a.arg[dp->precision_arg_index].type == TYPE_INT))
576 abort ();
577 prefixes[prefix_count++] = a.arg[dp->precision_arg_index].a.a_int;
578 }
579
580 #if USE_SNPRINTF
581 /* Prepare checking whether snprintf returns the count
582 via %n. */
583 ENSURE_ALLOCATION (xsum (length, 1));
584 result[length] = '\0';
585 #endif
586
587 for (;;)
588 {
589 size_t maxlen;
590 int count;
591 int retcount;
592
593 maxlen = allocated - length;
594 count = -1;
595 retcount = 0;
596
597 #if USE_SNPRINTF
598 # define SNPRINTF_BUF(arg) \
599 switch (prefix_count) \
600 { \
601 case 0: \
602 retcount = SNPRINTF (result + length, maxlen, buf, \
603 arg, &count); \
604 break; \
605 case 1: \
606 retcount = SNPRINTF (result + length, maxlen, buf, \
607 prefixes[0], arg, &count); \
608 break; \
609 case 2: \
610 retcount = SNPRINTF (result + length, maxlen, buf, \
611 prefixes[0], prefixes[1], arg, \
612 &count); \
613 break; \
614 default: \
615 abort (); \
616 }
617 #else
618 # define SNPRINTF_BUF(arg) \
619 switch (prefix_count) \
620 { \
621 case 0: \
622 count = sprintf (tmp, buf, arg); \
623 break; \
624 case 1: \
625 count = sprintf (tmp, buf, prefixes[0], arg); \
626 break; \
627 case 2: \
628 count = sprintf (tmp, buf, prefixes[0], prefixes[1],\
629 arg); \
630 break; \
631 default: \
632 abort (); \
633 }
634 #endif
635
636 switch (type)
637 {
638 case TYPE_SCHAR:
639 {
640 int arg = a.arg[dp->arg_index].a.a_schar;
641 SNPRINTF_BUF (arg);
642 }
643 break;
644 case TYPE_UCHAR:
645 {
646 unsigned int arg = a.arg[dp->arg_index].a.a_uchar;
647 SNPRINTF_BUF (arg);
648 }
649 break;
650 case TYPE_SHORT:
651 {
652 int arg = a.arg[dp->arg_index].a.a_short;
653 SNPRINTF_BUF (arg);
654 }
655 break;
656 case TYPE_USHORT:
657 {
658 unsigned int arg = a.arg[dp->arg_index].a.a_ushort;
659 SNPRINTF_BUF (arg);
660 }
661 break;
662 case TYPE_INT:
663 {
664 int arg = a.arg[dp->arg_index].a.a_int;
665 SNPRINTF_BUF (arg);
666 }
667 break;
668 case TYPE_UINT:
669 {
670 unsigned int arg = a.arg[dp->arg_index].a.a_uint;
671 SNPRINTF_BUF (arg);
672 }
673 break;
674 case TYPE_LONGINT:
675 {
676 long int arg = a.arg[dp->arg_index].a.a_longint;
677 SNPRINTF_BUF (arg);
678 }
679 break;
680 case TYPE_ULONGINT:
681 {
682 unsigned long int arg = a.arg[dp->arg_index].a.a_ulongint;
683 SNPRINTF_BUF (arg);
684 }
685 break;
686 #ifdef HAVE_LONG_LONG
687 case TYPE_LONGLONGINT:
688 {
689 long long int arg = a.arg[dp->arg_index].a.a_longlongint;
690 SNPRINTF_BUF (arg);
691 }
692 break;
693 case TYPE_ULONGLONGINT:
694 {
695 unsigned long long int arg = a.arg[dp->arg_index].a.a_ulonglongint;
696 SNPRINTF_BUF (arg);
697 }
698 break;
699 #endif
700 case TYPE_DOUBLE:
701 {
702 double arg = a.arg[dp->arg_index].a.a_double;
703 SNPRINTF_BUF (arg);
704 }
705 break;
706 #ifdef HAVE_LONG_DOUBLE
707 case TYPE_LONGDOUBLE:
708 {
709 long double arg = a.arg[dp->arg_index].a.a_longdouble;
710 SNPRINTF_BUF (arg);
711 }
712 break;
713 #endif
714 case TYPE_CHAR:
715 {
716 int arg = a.arg[dp->arg_index].a.a_char;
717 SNPRINTF_BUF (arg);
718 }
719 break;
720 #ifdef HAVE_WINT_T
721 case TYPE_WIDE_CHAR:
722 {
723 wint_t arg = a.arg[dp->arg_index].a.a_wide_char;
724 SNPRINTF_BUF (arg);
725 }
726 break;
727 #endif
728 case TYPE_STRING:
729 {
730 const char *arg = a.arg[dp->arg_index].a.a_string;
731 SNPRINTF_BUF (arg);
732 }
733 break;
734 #ifdef HAVE_WCHAR_T
735 case TYPE_WIDE_STRING:
736 {
737 const wchar_t *arg = a.arg[dp->arg_index].a.a_wide_string;
738 SNPRINTF_BUF (arg);
739 }
740 break;
741 #endif
742 case TYPE_POINTER:
743 {
744 void *arg = a.arg[dp->arg_index].a.a_pointer;
745 SNPRINTF_BUF (arg);
746 }
747 break;
748 default:
749 abort ();
750 }
751
752 #if USE_SNPRINTF
753 /* Portability: Not all implementations of snprintf()
754 are ISO C 99 compliant. Determine the number of
755 bytes that snprintf() has produced or would have
756 produced. */
757 if (count >= 0)
758 {
759 /* Verify that snprintf() has NUL-terminated its
760 result. */
761 if (count < maxlen && result[length + count] != '\0')
762 abort ();
763 /* Portability hack. */
764 if (retcount > count)
765 count = retcount;
766 }
767 else
768 {
769 /* snprintf() doesn't understand the '%n'
770 directive. */
771 if (p[1] != '\0')
772 {
773 /* Don't use the '%n' directive; instead, look
774 at the snprintf() return value. */
775 p[1] = '\0';
776 continue;
777 }
778 else
779 {
780 /* Look at the snprintf() return value. */
781 if (retcount < 0)
782 {
783 /* HP-UX 10.20 snprintf() is doubly deficient:
784 It doesn't understand the '%n' directive,
785 *and* it returns -1 (rather than the length
786 that would have been required) when the
787 buffer is too small. */
788 size_t bigger_need =
789 xsum (xtimes (allocated, 2), 12);
790 ENSURE_ALLOCATION (bigger_need);
791 continue;
792 }
793 else
794 count = retcount;
795 }
796 }
797 #endif
798
799 /* Attempt to handle failure. */
800 if (count < 0)
801 {
802 if (!(result == resultbuf || result == NULL))
803 free (result);
804 if (buf_malloced != NULL)
805 free (buf_malloced);
806 CLEANUP ();
807 errno = EINVAL;
808 return NULL;
809 }
810
811 #if !USE_SNPRINTF
812 if (count >= tmp_length)
813 /* tmp_length was incorrectly calculated - fix the
814 code above! */
815 abort ();
816 #endif
817
818 /* Make room for the result. */
819 if (count >= maxlen)
820 {
821 /* Need at least count bytes. But allocate
822 proportionally, to avoid looping eternally if
823 snprintf() reports a too small count. */
824 size_t n =
825 xmax (xsum (length, count), xtimes (allocated, 2));
826
827 ENSURE_ALLOCATION (n);
828 #if USE_SNPRINTF
829 continue;
830 #endif
831 }
832
833 #if USE_SNPRINTF
834 /* The snprintf() result did fit. */
835 #else
836 /* Append the sprintf() result. */
837 memcpy (result + length, tmp, count * sizeof (CHAR_T));
838 if (tmp != tmpbuf)
839 free (tmp);
840 #endif
841
842 length += count;
843 break;
844 }
845 }
846 }
847 }
848
849 /* Add the final NUL. */
850 ENSURE_ALLOCATION (xsum (length, 1));
851 result[length] = '\0';
852
853 if (result != resultbuf && length + 1 < allocated)
854 {
855 /* Shrink the allocated memory if possible. */
856 CHAR_T *memory;
857
858 memory = (CHAR_T *) realloc (result, (length + 1) * sizeof (CHAR_T));
859 if (memory != NULL)
860 result = memory;
861 }
862
863 if (buf_malloced != NULL)
864 free (buf_malloced);
865 CLEANUP ();
866 *lengthp = length;
867 return result;
868
869 out_of_memory:
870 if (!(result == resultbuf || result == NULL))
871 free (result);
872 if (buf_malloced != NULL)
873 free (buf_malloced);
874 out_of_memory_1:
875 CLEANUP ();
876 errno = ENOMEM;
877 return NULL;
878 }
879 }
880
881 #undef SNPRINTF
882 #undef USE_SNPRINTF
883 #undef PRINTF_PARSE
884 #undef DIRECTIVES
885 #undef DIRECTIVE
886 #undef CHAR_T
887 #undef VASNPRINTF
888