105436638acc7c010349a69c3395f1a57c642dc62Ying Wang/* Formatted output to strings.
205436638acc7c010349a69c3395f1a57c642dc62Ying Wang   Copyright (C) 2004, 2006-2012 Free Software Foundation, Inc.
305436638acc7c010349a69c3395f1a57c642dc62Ying Wang
405436638acc7c010349a69c3395f1a57c642dc62Ying Wang   This program is free software: you can redistribute it and/or modify
505436638acc7c010349a69c3395f1a57c642dc62Ying Wang   it under the terms of the GNU General Public License as published by
605436638acc7c010349a69c3395f1a57c642dc62Ying Wang   the Free Software Foundation; either version 3 of the License, or
705436638acc7c010349a69c3395f1a57c642dc62Ying Wang   (at your option) any later version.
805436638acc7c010349a69c3395f1a57c642dc62Ying Wang
905436638acc7c010349a69c3395f1a57c642dc62Ying Wang   This program is distributed in the hope that it will be useful,
1005436638acc7c010349a69c3395f1a57c642dc62Ying Wang   but WITHOUT ANY WARRANTY; without even the implied warranty of
1105436638acc7c010349a69c3395f1a57c642dc62Ying Wang   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
1205436638acc7c010349a69c3395f1a57c642dc62Ying Wang   GNU General Public License for more details.
1305436638acc7c010349a69c3395f1a57c642dc62Ying Wang
1405436638acc7c010349a69c3395f1a57c642dc62Ying Wang   You should have received a copy of the GNU General Public License
1505436638acc7c010349a69c3395f1a57c642dc62Ying Wang   along with this program.  If not, see <http://www.gnu.org/licenses/>.  */
1605436638acc7c010349a69c3395f1a57c642dc62Ying Wang
1705436638acc7c010349a69c3395f1a57c642dc62Ying Wang#if 1
1805436638acc7c010349a69c3395f1a57c642dc62Ying Wang# include <config.h>
1905436638acc7c010349a69c3395f1a57c642dc62Ying Wang#endif
2005436638acc7c010349a69c3395f1a57c642dc62Ying Wang
2105436638acc7c010349a69c3395f1a57c642dc62Ying Wang/* Specification.  */
2205436638acc7c010349a69c3395f1a57c642dc62Ying Wang#include <stdio.h>
2305436638acc7c010349a69c3395f1a57c642dc62Ying Wang
2405436638acc7c010349a69c3395f1a57c642dc62Ying Wang#include <errno.h>
2505436638acc7c010349a69c3395f1a57c642dc62Ying Wang#include <limits.h>
2605436638acc7c010349a69c3395f1a57c642dc62Ying Wang#include <stdarg.h>
2705436638acc7c010349a69c3395f1a57c642dc62Ying Wang#include <stdint.h>
2805436638acc7c010349a69c3395f1a57c642dc62Ying Wang#include <stdlib.h>
2905436638acc7c010349a69c3395f1a57c642dc62Ying Wang
3005436638acc7c010349a69c3395f1a57c642dc62Ying Wang#include "vasnprintf.h"
3105436638acc7c010349a69c3395f1a57c642dc62Ying Wang
3205436638acc7c010349a69c3395f1a57c642dc62Ying Wang#ifndef SIZE_MAX
3305436638acc7c010349a69c3395f1a57c642dc62Ying Wang# define SIZE_MAX ((size_t) -1)
3405436638acc7c010349a69c3395f1a57c642dc62Ying Wang#endif
3505436638acc7c010349a69c3395f1a57c642dc62Ying Wang
3605436638acc7c010349a69c3395f1a57c642dc62Ying Wang/* Print formatted output to string STR.
3705436638acc7c010349a69c3395f1a57c642dc62Ying Wang   Return string length of formatted string.  On error, return a negative
3805436638acc7c010349a69c3395f1a57c642dc62Ying Wang   value.  */
3905436638acc7c010349a69c3395f1a57c642dc62Ying Wangint
4005436638acc7c010349a69c3395f1a57c642dc62Ying Wangvsprintf (char *str, const char *format, va_list args)
4105436638acc7c010349a69c3395f1a57c642dc62Ying Wang{
4205436638acc7c010349a69c3395f1a57c642dc62Ying Wang  char *output;
4305436638acc7c010349a69c3395f1a57c642dc62Ying Wang  size_t len;
4405436638acc7c010349a69c3395f1a57c642dc62Ying Wang  size_t lenbuf;
4505436638acc7c010349a69c3395f1a57c642dc62Ying Wang
4605436638acc7c010349a69c3395f1a57c642dc62Ying Wang  /* vasnprintf fails with EOVERFLOW when the buffer size argument is larger
4705436638acc7c010349a69c3395f1a57c642dc62Ying Wang     than INT_MAX (if that fits into a 'size_t' at all).
4805436638acc7c010349a69c3395f1a57c642dc62Ying Wang     Also note that glibc's iconv fails with E2BIG when we pass a length that
4905436638acc7c010349a69c3395f1a57c642dc62Ying Wang     is so large that str + lenbuf wraps around, i.e.
5005436638acc7c010349a69c3395f1a57c642dc62Ying Wang     (uintptr_t) (str + lenbuf) < (uintptr_t) str.
5105436638acc7c010349a69c3395f1a57c642dc62Ying Wang     Therefore set lenbuf = min (SIZE_MAX, INT_MAX, - (uintptr_t) str - 1).  */
5205436638acc7c010349a69c3395f1a57c642dc62Ying Wang  lenbuf = (SIZE_MAX < INT_MAX ? SIZE_MAX : INT_MAX);
5305436638acc7c010349a69c3395f1a57c642dc62Ying Wang  if (lenbuf > ~ (uintptr_t) str)
5405436638acc7c010349a69c3395f1a57c642dc62Ying Wang    lenbuf = ~ (uintptr_t) str;
5505436638acc7c010349a69c3395f1a57c642dc62Ying Wang
5605436638acc7c010349a69c3395f1a57c642dc62Ying Wang  output = vasnprintf (str, &lenbuf, format, args);
5705436638acc7c010349a69c3395f1a57c642dc62Ying Wang  len = lenbuf;
5805436638acc7c010349a69c3395f1a57c642dc62Ying Wang
5905436638acc7c010349a69c3395f1a57c642dc62Ying Wang  if (!output)
6005436638acc7c010349a69c3395f1a57c642dc62Ying Wang    return -1;
6105436638acc7c010349a69c3395f1a57c642dc62Ying Wang
6205436638acc7c010349a69c3395f1a57c642dc62Ying Wang  if (output != str)
6305436638acc7c010349a69c3395f1a57c642dc62Ying Wang    {
6405436638acc7c010349a69c3395f1a57c642dc62Ying Wang      /* len is near SIZE_MAX.  */
6505436638acc7c010349a69c3395f1a57c642dc62Ying Wang      free (output);
6605436638acc7c010349a69c3395f1a57c642dc62Ying Wang      errno = EOVERFLOW;
6705436638acc7c010349a69c3395f1a57c642dc62Ying Wang      return -1;
6805436638acc7c010349a69c3395f1a57c642dc62Ying Wang    }
6905436638acc7c010349a69c3395f1a57c642dc62Ying Wang
7005436638acc7c010349a69c3395f1a57c642dc62Ying Wang  if (len > INT_MAX)
7105436638acc7c010349a69c3395f1a57c642dc62Ying Wang    {
7205436638acc7c010349a69c3395f1a57c642dc62Ying Wang      errno = EOVERFLOW;
7305436638acc7c010349a69c3395f1a57c642dc62Ying Wang      return -1;
7405436638acc7c010349a69c3395f1a57c642dc62Ying Wang    }
7505436638acc7c010349a69c3395f1a57c642dc62Ying Wang
7605436638acc7c010349a69c3395f1a57c642dc62Ying Wang  return len;
7705436638acc7c010349a69c3395f1a57c642dc62Ying Wang}
78