Coverage Report

Created: 2026-09-01 06:58

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/curl/lib/mprintf.c
Line
Count
Source
1
/***************************************************************************
2
 *                                  _   _ ____  _
3
 *  Project                     ___| | | |  _ \| |
4
 *                             / __| | | | |_) | |
5
 *                            | (__| |_| |  _ <| |___
6
 *                             \___|\___/|_| \_\_____|
7
 *
8
 * Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
9
 *
10
 * This software is licensed as described in the file COPYING, which
11
 * you should have received as part of this distribution. The terms
12
 * are also available at https://curl.se/docs/copyright.html.
13
 *
14
 * You may opt to use, copy, modify, merge, publish, distribute and/or sell
15
 * copies of the Software, and permit persons to whom the Software is
16
 * furnished to do so, under the terms of the COPYING file.
17
 *
18
 * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
19
 * KIND, either express or implied.
20
 *
21
 * SPDX-License-Identifier: curl
22
 *
23
 ***************************************************************************/
24
#include "curl_setup.h"
25
26
#include "curlx/dynbuf.h"
27
#include "curl_printf.h"
28
#include "curlx/strparse.h"
29
#include "curlx/snprintf.h"  /* for curlx_win32_snprintf() */
30
31
0
#define BUFFSIZE 326 /* buffer for long-to-str and float-to-str calcs, should
32
                        fit negative DBL_MAX (317 letters) */
33
0
#define MAX_PARAMETERS 128 /* number of input arguments */
34
0
#define MAX_SEGMENTS   128 /* number of output segments */
35
36
/* Lower-case digits. */
37
const unsigned char Curl_ldigits[] = "0123456789abcdef";
38
39
/* Upper-case digits. */
40
const unsigned char Curl_udigits[] = "0123456789ABCDEF";
41
42
#define OUTCHAR(x)                        \
43
0
  do {                                    \
44
0
    if(stream((unsigned char)(x), userp)) \
45
0
      return TRUE;                        \
46
0
    (*donep)++;                           \
47
0
  } while(0)
48
49
/* Data type to read from the arglist */
50
typedef enum {
51
  MTYPE_STRING,
52
  MTYPE_PTR,
53
  MTYPE_INTPTR,
54
  MTYPE_INT,
55
  MTYPE_LONG,
56
  MTYPE_LONGLONG,
57
  MTYPE_INTU,
58
  MTYPE_LONGU,
59
  MTYPE_LONGLONGU,
60
  MTYPE_DOUBLE,
61
  MTYPE_LONGDOUBLE,
62
  MTYPE_WIDTH,
63
  MTYPE_PRECISION
64
} FormatType;
65
66
/* conversion and display flags */
67
enum {
68
  FLAGS_SPACE      = 1 << 0,
69
  FLAGS_SHOWSIGN   = 1 << 1,
70
  FLAGS_LEFT       = 1 << 2,
71
  FLAGS_ALT        = 1 << 3,
72
  FLAGS_SHORT      = 1 << 4,
73
  FLAGS_LONG       = 1 << 5,
74
  FLAGS_LONGLONG   = 1 << 6,
75
  FLAGS_LONGDOUBLE = 1 << 7,
76
  FLAGS_PAD_NIL    = 1 << 8,
77
  FLAGS_UNSIGNED   = 1 << 9,
78
  FLAGS_OCTAL      = 1 << 10,
79
  FLAGS_HEX        = 1 << 11,
80
  FLAGS_UPPER      = 1 << 12,
81
  FLAGS_WIDTH      = 1 << 13, /* '*' or '*<num>$' used */
82
  FLAGS_WIDTHPARAM = 1 << 14, /* width PARAMETER was specified */
83
  FLAGS_PREC       = 1 << 15, /* precision was specified */
84
  FLAGS_PRECPARAM  = 1 << 16, /* precision PARAMETER was specified */
85
  FLAGS_CHAR       = 1 << 17, /* %c story */
86
  FLAGS_FLOATE     = 1 << 18, /* %e or %E */
87
  FLAGS_FLOATG     = 1 << 19, /* %g or %G */
88
  FLAGS_SUBSTR     = 1 << 20  /* no input, only substring */
89
};
90
91
enum {
92
  DOLLAR_UNKNOWN,
93
  DOLLAR_NOPE,
94
  DOLLAR_USE
95
};
96
97
/*
98
 * Describes an input va_arg type and hold its value.
99
 */
100
struct va_input {
101
  FormatType type; /* FormatType */
102
  union {
103
    const char *str;
104
    void *ptr;
105
    int64_t nums; /* signed */
106
    uint64_t numu; /* unsigned */
107
    double dnum;
108
  } val;
109
};
110
111
/*
112
 * Describes an output segment.
113
 */
114
struct outsegment {
115
  int width;     /* width OR width parameter number */
116
  int precision; /* precision OR precision parameter number */
117
  unsigned int flags;
118
  unsigned int input; /* input argument array index */
119
  const char *start; /* format string start to output */
120
  size_t outlen;     /* number of bytes from the format string to output */
121
};
122
123
struct nsprintf {
124
  char *buffer;
125
  size_t length;
126
  size_t max;
127
};
128
129
struct asprintf {
130
  struct dynbuf *b;
131
  char merr;
132
};
133
134
/* the provided input number is 1-based but this returns the number 0-based.
135
 *
136
 * returns -1 if no valid number was provided.
137
 */
138
static int dollarstring(const char *p, const char **end)
139
0
{
140
0
  curl_off_t num;
141
0
  if(curlx_str_number(&p, &num, MAX_PARAMETERS) ||
142
0
     curlx_str_single(&p, '$') || !num)
143
0
    return -1;
144
0
  *end = p;
145
0
  return (int)num - 1;
146
0
}
147
148
0
#define is_arg_used(x, y)   ((x)[(y) / 8] & (1 << ((y) & 7)))
149
0
#define mark_arg_used(x, y) ((x)[(y) / 8] |= (unsigned char)(1 << ((y) & 7)))
150
151
/*
152
 * Parse the format string.
153
 *
154
 * Create two arrays. One describes the inputs, one describes the outputs.
155
 *
156
 * Returns zero on success.
157
 */
158
159
0
#define PFMT_OK          0
160
0
#define PFMT_DOLLAR      1 /* bad dollar for main param */
161
0
#define PFMT_DOLLARWIDTH 2 /* bad dollar use for width */
162
0
#define PFMT_DOLLARPREC  3 /* bad dollar use for precision */
163
0
#define PFMT_MANYARGS    4 /* too many input arguments used */
164
0
#define PFMT_PREC        5 /* precision overflow */
165
0
#define PFMT_PRECMIX     6 /* bad mix of precision specifiers */
166
0
#define PFMT_WIDTH       7 /* width overflow */
167
0
#define PFMT_INPUTGAP    8 /* gap in arguments */
168
0
#define PFMT_WIDTHARG    9 /* attempted to use same arg twice, for width */
169
0
#define PFMT_PRECARG    10 /* attempted to use same arg twice, for prec */
170
0
#define PFMT_MANYSEGS   11 /* maxed out output segments */
171
172
static int parse_flags(const char **fmtp, unsigned int *flagsp, int use_dollar,
173
                       int *precp, int *widthp)
174
0
{
175
0
  const char *fmt = *fmtp;
176
0
  bool loopit = TRUE;
177
0
  unsigned int flags = 0;
178
0
  int width = 0;
179
0
  int precision = 0;
180
181
  /* Handle the flags */
182
0
  do {
183
0
    switch(*fmt++) {
184
0
    case ' ':
185
0
      flags |= FLAGS_SPACE;
186
0
      break;
187
0
    case '+':
188
0
      flags |= FLAGS_SHOWSIGN;
189
0
      break;
190
0
    case '-':
191
0
      flags |= FLAGS_LEFT;
192
0
      flags &= ~(unsigned int)FLAGS_PAD_NIL;
193
0
      break;
194
0
    case '#':
195
0
      flags |= FLAGS_ALT;
196
0
      break;
197
0
    case '.':
198
0
      if('*' == *fmt) {
199
        /* The precision is picked from a specified parameter */
200
0
        flags |= FLAGS_PRECPARAM;
201
0
        fmt++;
202
203
0
        if(use_dollar == DOLLAR_USE) {
204
0
          precision = dollarstring(fmt, &fmt);
205
0
          if(precision < 0)
206
            /* illegal combo */
207
0
            return PFMT_DOLLARPREC;
208
0
        }
209
0
        else
210
          /* get it from the next argument */
211
0
          precision = -1;
212
0
      }
213
0
      else {
214
0
        bool is_neg;
215
0
        curl_off_t num;
216
0
        flags |= FLAGS_PREC;
217
0
        is_neg = ('-' == *fmt);
218
0
        if(is_neg)
219
0
          fmt++;
220
0
        if(curlx_str_number(&fmt, &num, INT_MAX))
221
0
          return PFMT_PREC;
222
0
        precision = (int)num;
223
0
        if(is_neg)
224
0
          precision = -precision;
225
0
      }
226
0
      if((flags & (FLAGS_PREC | FLAGS_PRECPARAM)) ==
227
0
         (FLAGS_PREC | FLAGS_PRECPARAM))
228
        /* it is not permitted to use both kinds of precision for the same
229
           argument */
230
0
        return PFMT_PRECMIX;
231
0
      break;
232
0
    case 'h':
233
0
      flags |= FLAGS_SHORT;
234
0
      break;
235
#ifdef _WIN32
236
    case 'I':
237
      /* Non-ANSI integer extensions I32 I64 */
238
      if((fmt[0] == '3') && (fmt[1] == '2')) {
239
        flags |= FLAGS_LONG;
240
        fmt += 2;
241
      }
242
      else if((fmt[0] == '6') && (fmt[1] == '4')) {
243
        flags |= FLAGS_LONGLONG;
244
        fmt += 2;
245
      }
246
      else {
247
#if SIZEOF_CURL_OFF_T > SIZEOF_LONG
248
        flags |= FLAGS_LONGLONG;
249
#else
250
        flags |= FLAGS_LONG;
251
#endif
252
      }
253
      break;
254
#endif /* _WIN32 */
255
0
    case 'l':
256
0
      if(flags & FLAGS_LONG)
257
0
        flags |= FLAGS_LONGLONG;
258
0
      else
259
0
        flags |= FLAGS_LONG;
260
0
      break;
261
0
    case 'L':
262
0
      flags |= FLAGS_LONGDOUBLE;
263
0
      break;
264
0
    case 'q':
265
0
      flags |= FLAGS_LONGLONG;
266
0
      break;
267
0
    case 'z':
268
      /* the code below generates a warning if -Wunreachable-code is
269
         used */
270
#if SIZEOF_SIZE_T > SIZEOF_LONG
271
      flags |= FLAGS_LONGLONG;
272
#else
273
0
      flags |= FLAGS_LONG;
274
0
#endif
275
0
      break;
276
0
    case 'O':
277
#if SIZEOF_CURL_OFF_T > SIZEOF_LONG
278
      flags |= FLAGS_LONGLONG;
279
#else
280
0
      flags |= FLAGS_LONG;
281
0
#endif
282
0
      break;
283
0
    case '0':
284
0
      if(!(flags & FLAGS_LEFT))
285
0
        flags |= FLAGS_PAD_NIL;
286
0
      FALLTHROUGH();
287
0
    case '1':
288
0
    case '2':
289
0
    case '3':
290
0
    case '4':
291
0
    case '5':
292
0
    case '6':
293
0
    case '7':
294
0
    case '8':
295
0
    case '9': {
296
0
      curl_off_t num;
297
0
      flags |= FLAGS_WIDTH;
298
0
      fmt--;
299
0
      if(curlx_str_number(&fmt, &num, INT_MAX))
300
0
        return PFMT_WIDTH;
301
0
      width = (int)num;
302
0
      break;
303
0
    }
304
0
    case '*':  /* read width from argument list */
305
0
      flags |= FLAGS_WIDTHPARAM;
306
0
      if(use_dollar == DOLLAR_USE) {
307
0
        width = dollarstring(fmt, &fmt);
308
0
        if(width < 0)
309
          /* illegal combo */
310
0
          return PFMT_DOLLARWIDTH;
311
0
      }
312
0
      else
313
        /* pick from the next argument */
314
0
        width = -1;
315
0
      break;
316
0
    default:
317
0
      loopit = FALSE;
318
0
      fmt--;
319
0
      break;
320
0
    } /* switch */
321
0
  } while(loopit); /* do */
322
0
  *flagsp = flags;
323
0
  *precp = precision;
324
0
  *widthp = width;
325
0
  *fmtp = fmt;
326
0
  return PFMT_OK;
327
0
}
328
329
static bool parse_conversion(const char f, unsigned int *flagp,
330
                             FormatType *typep)
331
0
{
332
0
  unsigned int flags = *flagp;
333
0
  FormatType type;
334
0
  switch(f) {
335
0
  case 'S':
336
0
    flags |= FLAGS_ALT;
337
0
    type = MTYPE_STRING;
338
0
    break;
339
0
  case 's':
340
0
    type = MTYPE_STRING;
341
0
    break;
342
0
  case 'n':
343
0
    type = MTYPE_INTPTR;
344
0
    break;
345
0
  case 'p':
346
0
    type = MTYPE_PTR;
347
0
    break;
348
0
  case 'd':
349
0
  case 'i':
350
0
    if(flags & FLAGS_LONGLONG)
351
0
      type = MTYPE_LONGLONG;
352
0
    else if(flags & FLAGS_LONG)
353
0
      type = MTYPE_LONG;
354
0
    else
355
0
      type = MTYPE_INT;
356
0
    break;
357
0
  case 'u':
358
0
    if(flags & FLAGS_LONGLONG)
359
0
      type = MTYPE_LONGLONGU;
360
0
    else if(flags & FLAGS_LONG)
361
0
      type = MTYPE_LONGU;
362
0
    else
363
0
      type = MTYPE_INTU;
364
0
    flags |= FLAGS_UNSIGNED;
365
0
    break;
366
0
  case 'o':
367
0
    if(flags & FLAGS_LONGLONG)
368
0
      type = MTYPE_LONGLONGU;
369
0
    else if(flags & FLAGS_LONG)
370
0
      type = MTYPE_LONGU;
371
0
    else
372
0
      type = MTYPE_INTU;
373
0
    flags |= FLAGS_OCTAL | FLAGS_UNSIGNED;
374
0
    break;
375
0
  case 'x':
376
0
    if(flags & FLAGS_LONGLONG)
377
0
      type = MTYPE_LONGLONGU;
378
0
    else if(flags & FLAGS_LONG)
379
0
      type = MTYPE_LONGU;
380
0
    else
381
0
      type = MTYPE_INTU;
382
0
    flags |= FLAGS_HEX | FLAGS_UNSIGNED;
383
0
    break;
384
0
  case 'X':
385
0
    if(flags & FLAGS_LONGLONG)
386
0
      type = MTYPE_LONGLONGU;
387
0
    else if(flags & FLAGS_LONG)
388
0
      type = MTYPE_LONGU;
389
0
    else
390
0
      type = MTYPE_INTU;
391
0
    flags |= FLAGS_HEX | FLAGS_UPPER | FLAGS_UNSIGNED;
392
0
    break;
393
0
  case 'c':
394
0
    type = MTYPE_INT;
395
0
    flags |= FLAGS_CHAR;
396
0
    break;
397
0
  case 'f':
398
0
    type = flags & FLAGS_LONGDOUBLE ? MTYPE_LONGDOUBLE : MTYPE_DOUBLE;
399
0
    break;
400
0
  case 'F':
401
0
    type = flags & FLAGS_LONGDOUBLE ? MTYPE_LONGDOUBLE : MTYPE_DOUBLE;
402
0
    flags |= FLAGS_UPPER;
403
0
    break;
404
0
  case 'e':
405
0
    type = flags & FLAGS_LONGDOUBLE ? MTYPE_LONGDOUBLE : MTYPE_DOUBLE;
406
0
    flags |= FLAGS_FLOATE;
407
0
    break;
408
0
  case 'E':
409
0
    type = flags & FLAGS_LONGDOUBLE ? MTYPE_LONGDOUBLE : MTYPE_DOUBLE;
410
0
    flags |= FLAGS_FLOATE | FLAGS_UPPER;
411
0
    break;
412
0
  case 'g':
413
0
    type = flags & FLAGS_LONGDOUBLE ? MTYPE_LONGDOUBLE : MTYPE_DOUBLE;
414
0
    flags |= FLAGS_FLOATG;
415
0
    break;
416
0
  case 'G':
417
0
    type = flags & FLAGS_LONGDOUBLE ? MTYPE_LONGDOUBLE : MTYPE_DOUBLE;
418
0
    flags |= FLAGS_FLOATG | FLAGS_UPPER;
419
0
    break;
420
0
  default:
421
    /* invalid instruction, disregard and continue */
422
0
    return TRUE;
423
0
  } /* switch */
424
425
0
  *flagp |= flags;
426
0
  *typep = type;
427
0
  return FALSE;
428
0
}
429
430
static int parsefmt(const char *format,
431
                    struct outsegment *out,
432
                    struct va_input *in,
433
                    int *opieces,
434
                    int *ipieces, va_list arglist)
435
0
{
436
0
  const char *fmt = format;
437
0
  int param_num = 0;
438
0
  int max_param = -1;
439
0
  int i;
440
0
  int ocount = 0;
441
0
  unsigned char usedinput[MAX_PARAMETERS / 8];
442
0
  size_t outlen = 0;
443
0
  struct outsegment *optr;
444
0
  int use_dollar = DOLLAR_UNKNOWN;
445
0
  const char *start = fmt;
446
447
  /* clear, set a bit for each used input */
448
0
  memset(usedinput, 0, sizeof(usedinput));
449
450
0
  while(*fmt) {
451
0
    if(*fmt == '%') {
452
0
      struct va_input *iptr;
453
0
      FormatType type;
454
0
      unsigned int flags = 0;
455
0
      int width = 0;
456
0
      int precision = 0;
457
0
      int param = -1;
458
0
      int rc;
459
0
      fmt++;
460
0
      outlen = (size_t)(fmt - start - 1);
461
0
      if(*fmt == '%') {
462
        /* this means a %% that should be output only as %. Create an output
463
           segment. */
464
0
        if(outlen) {
465
0
          optr = &out[ocount++];
466
0
          if(ocount > MAX_SEGMENTS)
467
0
            return PFMT_MANYSEGS;
468
0
          optr->input = 0;
469
0
          optr->flags = FLAGS_SUBSTR;
470
0
          optr->start = start;
471
0
          optr->outlen = outlen;
472
0
        }
473
0
        start = fmt;
474
0
        fmt++;
475
0
        continue; /* while */
476
0
      }
477
478
0
      if(use_dollar != DOLLAR_NOPE) {
479
0
        param = dollarstring(fmt, &fmt);
480
0
        if(param < 0) {
481
0
          if(use_dollar == DOLLAR_USE)
482
            /* illegal combo */
483
0
            return PFMT_DOLLAR;
484
485
          /* we got no positional, get the next arg */
486
0
          param = -1;
487
0
          use_dollar = DOLLAR_NOPE;
488
0
        }
489
0
        else
490
0
          use_dollar = DOLLAR_USE;
491
0
      }
492
493
0
      rc = parse_flags(&fmt, &flags, use_dollar, &precision, &width);
494
0
      if(rc)
495
0
        return rc;
496
497
0
      if(parse_conversion(*fmt, &flags, &type))
498
0
        continue;
499
500
0
      if(flags & FLAGS_WIDTHPARAM) {
501
0
        if(width < 0)
502
0
          width = param_num++;
503
0
        else {
504
          /* if this identifies a parameter already used, this is illegal */
505
0
          if(is_arg_used(usedinput, width))
506
0
            return PFMT_WIDTHARG;
507
0
        }
508
0
        if(width >= MAX_PARAMETERS)
509
0
          return PFMT_MANYARGS;
510
0
        if(width >= max_param)
511
0
          max_param = width;
512
513
0
        in[width].type = MTYPE_WIDTH;
514
        /* mark as used */
515
0
        mark_arg_used(usedinput, width);
516
0
      }
517
518
0
      if(flags & FLAGS_PRECPARAM) {
519
0
        if(precision < 0)
520
0
          precision = param_num++;
521
0
        else {
522
          /* if this identifies a parameter already used, this is illegal */
523
0
          if(is_arg_used(usedinput, precision))
524
0
            return PFMT_PRECARG;
525
0
        }
526
0
        if(precision >= MAX_PARAMETERS)
527
0
          return PFMT_MANYARGS;
528
0
        if(precision >= max_param)
529
0
          max_param = precision;
530
531
0
        in[precision].type = MTYPE_PRECISION;
532
0
        mark_arg_used(usedinput, precision);
533
0
      }
534
535
      /* Handle the specifier */
536
0
      if(param < 0)
537
0
        param = param_num++;
538
0
      if(param >= MAX_PARAMETERS)
539
0
        return PFMT_MANYARGS;
540
0
      if(param >= max_param)
541
0
        max_param = param;
542
543
0
      iptr = &in[param];
544
0
      iptr->type = type;
545
546
      /* mark this input as used */
547
0
      mark_arg_used(usedinput, param);
548
549
0
      fmt++;
550
0
      optr = &out[ocount++];
551
0
      if(ocount > MAX_SEGMENTS)
552
0
        return PFMT_MANYSEGS;
553
0
      optr->input = (unsigned int)param;
554
0
      optr->flags = flags;
555
0
      optr->width = width;
556
0
      optr->precision = precision;
557
0
      optr->start = start;
558
0
      optr->outlen = outlen;
559
0
      start = fmt;
560
0
    }
561
0
    else
562
0
      fmt++;
563
0
  }
564
565
  /* is there a trailing piece */
566
0
  outlen = (size_t)(fmt - start);
567
0
  if(outlen) {
568
0
    optr = &out[ocount++];
569
0
    if(ocount > MAX_SEGMENTS)
570
0
      return PFMT_MANYSEGS;
571
0
    optr->input = 0;
572
0
    optr->flags = FLAGS_SUBSTR;
573
0
    optr->start = start;
574
0
    optr->outlen = outlen;
575
0
  }
576
577
  /* Read the arg list parameters into our data list */
578
0
  for(i = 0; i < max_param + 1; i++) {
579
0
    struct va_input *iptr = &in[i];
580
0
    if(!is_arg_used(usedinput, i))
581
      /* bad input */
582
0
      return PFMT_INPUTGAP;
583
584
    /* based on the type, read the correct argument */
585
0
    switch(iptr->type) {
586
0
    case MTYPE_STRING:
587
0
      iptr->val.str = va_arg(arglist, const char *);
588
0
      break;
589
590
0
    case MTYPE_INTPTR:
591
0
    case MTYPE_PTR:
592
0
      iptr->val.ptr = va_arg(arglist, void *);
593
0
      break;
594
595
0
    case MTYPE_LONGLONGU:
596
0
      iptr->val.numu = va_arg(arglist, uint64_t);
597
0
      break;
598
599
0
    case MTYPE_LONGLONG:
600
0
      iptr->val.nums = va_arg(arglist, int64_t);
601
0
      break;
602
603
0
    case MTYPE_LONGU:
604
0
      iptr->val.numu = va_arg(arglist, unsigned long);
605
0
      break;
606
607
0
    case MTYPE_LONG:
608
0
      iptr->val.nums = va_arg(arglist, long);
609
0
      break;
610
611
0
    case MTYPE_INTU:
612
0
      iptr->val.numu = va_arg(arglist, unsigned int);
613
0
      break;
614
615
0
    case MTYPE_INT:
616
0
    case MTYPE_WIDTH:
617
0
    case MTYPE_PRECISION:
618
0
      iptr->val.nums = va_arg(arglist, int);
619
0
      break;
620
621
0
    case MTYPE_DOUBLE:
622
0
      iptr->val.dnum = va_arg(arglist, double);
623
0
      break;
624
625
0
    case MTYPE_LONGDOUBLE:
626
0
      iptr->val.dnum = (double)va_arg(arglist, long double);
627
0
      break;
628
629
0
    default:
630
0
      DEBUGASSERT(NULL); /* unexpected */
631
0
      break;
632
0
    }
633
0
  }
634
0
  *ipieces = max_param + 1;
635
0
  *opieces = ocount;
636
637
0
  return PFMT_OK;
638
0
}
639
640
struct mproperty {
641
  int width;            /* Width of a field. */
642
  int prec;             /* Precision of a field. */
643
  unsigned int flags;
644
};
645
646
static bool out_double(void *userp,
647
                       int (*stream)(unsigned char, void *),
648
                       struct mproperty *p,
649
                       double dnum,
650
                       char *work, int *donep)
651
0
{
652
0
  char fmt[32] = "%";
653
0
  char *fptr = &fmt[1];
654
0
  size_t left = sizeof(fmt) - strlen(fmt);
655
0
  int flags = p->flags;
656
0
  int width = p->width;
657
0
  int prec = p->prec;
658
659
0
  if(flags & FLAGS_LEFT)
660
0
    *fptr++ = '-';
661
0
  if(flags & FLAGS_SHOWSIGN)
662
0
    *fptr++ = '+';
663
0
  if(flags & FLAGS_SPACE)
664
0
    *fptr++ = ' ';
665
0
  if(flags & FLAGS_ALT)
666
0
    *fptr++ = '#';
667
668
0
  *fptr = 0;
669
670
0
  if(width >= 0) {
671
0
    size_t dlen;
672
0
    if(width >= BUFFSIZE)
673
0
      width = BUFFSIZE - 1;
674
    /* RECURSIVE USAGE */
675
0
    dlen = (size_t)curl_msnprintf(fptr, left, "%d", width);
676
0
    fptr += dlen;
677
0
    left -= dlen;
678
0
  }
679
0
  if(prec >= 0) {
680
    /* for each digit in the integer part, we can have one less
681
       precision */
682
0
    int maxprec = BUFFSIZE - 1;
683
0
    double val = dnum;
684
0
    int len;
685
0
    if(prec > maxprec)
686
0
      prec = maxprec - 1;
687
0
    if(width > 0 && prec <= width)
688
0
      maxprec -= width;
689
0
    while(maxprec && (val >= 10.0)) {
690
0
      val /= 10;
691
0
      maxprec--;
692
0
    }
693
694
0
    if(prec > maxprec)
695
0
      prec = maxprec - 1;
696
0
    if(prec < 0)
697
0
      prec = 0;
698
    /* RECURSIVE USAGE */
699
0
    len = curl_msnprintf(fptr, left, ".%d", prec);
700
0
    fptr += len;
701
0
  }
702
0
  if(flags & FLAGS_LONG)
703
0
    *fptr++ = 'l';
704
705
0
  if(flags & FLAGS_FLOATE)
706
0
    *fptr++ = (char)((flags & FLAGS_UPPER) ? 'E' : 'e');
707
0
  else if(flags & FLAGS_FLOATG)
708
0
    *fptr++ = (char)((flags & FLAGS_UPPER) ? 'G' : 'g');
709
0
  else
710
0
    *fptr++ = (flags & FLAGS_UPPER) ? 'F' : 'f';
711
712
0
  *fptr = 0; /* and a final null-termination */
713
714
  /* NOTE NOTE NOTE!! Not all sprintf implementations return number of
715
     output characters */
716
0
#ifdef CURL_HAVE_DIAG
717
0
#pragma GCC diagnostic push
718
0
#pragma GCC diagnostic ignored "-Wformat-nonliteral"
719
0
#endif
720
#ifdef _WIN32
721
  curlx_win32_snprintf(work, BUFFSIZE, fmt, dnum);
722
#else
723
  /* !checksrc! disable BANNEDFUNC 2 */
724
0
  snprintf(work, BUFFSIZE, fmt, dnum);
725
0
#endif
726
0
#ifdef CURL_HAVE_DIAG
727
0
#pragma GCC diagnostic pop
728
0
#endif
729
0
  DEBUGASSERT(strlen(work) < BUFFSIZE);
730
0
  while(*work) {
731
0
    if(stream(*work++, userp))
732
0
      return TRUE;
733
0
    (*donep)++;
734
0
  }
735
0
  return 0;
736
0
}
737
738
static bool out_number(void *userp,
739
                       int (*stream)(unsigned char, void *),
740
                       struct mproperty *p,
741
                       uint64_t num,
742
                       int64_t nums,
743
                       char *work, int *donep)
744
0
{
745
0
  const unsigned char *digits = Curl_ldigits;
746
0
  int flags = p->flags;
747
0
  int width = p->width;
748
0
  int prec = p->prec;
749
0
  bool is_alt = flags & FLAGS_ALT;
750
0
  bool is_neg = FALSE;
751
0
  int base = 10;
752
753
  /* 'workend' points to the final buffer byte position, but with an extra
754
     byte as margin to avoid the (FALSE?) warning Coverity gives us
755
     otherwise */
756
0
  char *workend = &work[BUFFSIZE - 2];
757
0
  char *w;
758
759
0
  if(flags & FLAGS_CHAR) {
760
    /* Character. */
761
0
    if(!(flags & FLAGS_LEFT))
762
0
      while(--width > 0)
763
0
        OUTCHAR(' ');
764
0
    OUTCHAR((char)num);
765
0
    if(flags & FLAGS_LEFT)
766
0
      while(--width > 0)
767
0
        OUTCHAR(' ');
768
0
    return FALSE;
769
0
  }
770
0
  if(flags & FLAGS_OCTAL)
771
    /* Octal unsigned integer */
772
0
    base = 8;
773
774
0
  else if(flags & FLAGS_HEX) {
775
    /* Hexadecimal unsigned integer */
776
0
    digits = (flags & FLAGS_UPPER) ? Curl_udigits : Curl_ldigits;
777
0
    base = 16;
778
0
  }
779
0
  else if(flags & FLAGS_UNSIGNED)
780
    /* Decimal unsigned integer */
781
0
    ;
782
783
0
  else {
784
    /* Decimal integer. */
785
0
    is_neg = (nums < 0);
786
0
    if(is_neg) {
787
      /* signed_num might fail to hold absolute negative minimum by 1 */
788
0
      int64_t signed_num; /* Used to convert negative in positive. */
789
0
      signed_num = nums + (int64_t)1;
790
0
      signed_num = -signed_num;
791
0
      num = (uint64_t)signed_num;
792
0
      num += (uint64_t)1;
793
0
    }
794
0
  }
795
796
  /* Supply a default precision if none was given. */
797
0
  if(prec == -1)
798
0
    prec = 1;
799
800
  /* Put the number in WORK. */
801
0
  w = workend;
802
0
  DEBUGASSERT(base <= 16);
803
0
  switch(base) {
804
0
  case 10:
805
0
    while(num > 0) {
806
0
      *w-- = (char)('0' + (num % 10));
807
0
      num /= 10;
808
0
    }
809
0
    break;
810
0
  default:
811
0
    while(num > 0) {
812
0
      *w-- = digits[num % base];
813
0
      num /= base;
814
0
    }
815
0
    break;
816
0
  }
817
0
  width -= (int)(workend - w);
818
0
  prec -= (int)(workend - w);
819
820
0
  if(is_alt && base == 8 && prec <= 0) {
821
0
    *w-- = '0';
822
0
    --width;
823
0
  }
824
825
0
  if(prec > 0) {
826
0
    width -= prec;
827
0
    while(prec-- > 0 && w >= work)
828
0
      *w-- = '0';
829
0
  }
830
831
0
  if(is_alt && base == 16)
832
0
    width -= 2;
833
834
0
  if(is_neg || (flags & FLAGS_SHOWSIGN) || (flags & FLAGS_SPACE))
835
0
    --width;
836
837
0
  if(!(flags & FLAGS_LEFT) && !(flags & FLAGS_PAD_NIL))
838
0
    while(width-- > 0)
839
0
      OUTCHAR(' ');
840
841
0
  if(is_neg)
842
0
    OUTCHAR('-');
843
0
  else if(flags & FLAGS_SHOWSIGN)
844
0
    OUTCHAR('+');
845
0
  else if(flags & FLAGS_SPACE)
846
0
    OUTCHAR(' ');
847
848
0
  if(is_alt && base == 16) {
849
0
    OUTCHAR('0');
850
0
    if(flags & FLAGS_UPPER)
851
0
      OUTCHAR('X');
852
0
    else
853
0
      OUTCHAR('x');
854
0
  }
855
856
0
  if(!(flags & FLAGS_LEFT) && (flags & FLAGS_PAD_NIL))
857
0
    while(width-- > 0)
858
0
      OUTCHAR('0');
859
860
  /* Write the number. */
861
0
  while(++w <= workend) {
862
0
    OUTCHAR(*w);
863
0
  }
864
865
0
  if(flags & FLAGS_LEFT)
866
0
    while(width-- > 0)
867
0
      OUTCHAR(' ');
868
869
0
  return FALSE;
870
0
}
871
872
static const char nilstr[] = "(nil)";
873
874
static bool out_string(void *userp,
875
                       int (*stream)(unsigned char, void *),
876
                       struct mproperty *p,
877
                       const char *str,
878
                       int *donep)
879
0
{
880
0
  int flags = p->flags;
881
0
  int width = p->width;
882
0
  int prec = p->prec;
883
0
  size_t len;
884
885
0
  if(!str) {
886
    /* Write null string if there is space. */
887
0
    if(prec == -1 || prec >= (int)CURL_CSTRLEN(nilstr)) {
888
0
      str = nilstr;
889
0
      len = CURL_CSTRLEN(nilstr);
890
      /* Disable quotes around (nil) */
891
0
      flags &= ~(unsigned int)FLAGS_ALT;
892
0
    }
893
0
    else {
894
0
      str = "";
895
0
      len = 0;
896
0
    }
897
0
  }
898
0
  else if(prec != -1)
899
0
    len = (size_t)prec;
900
0
  else if(*str == '\0')
901
0
    len = 0;
902
0
  else
903
0
    len = strlen(str);
904
905
0
  width -= (len > INT_MAX) ? INT_MAX : (int)len;
906
907
0
  if(flags & FLAGS_ALT)
908
0
    OUTCHAR('"');
909
910
0
  if(!(flags & FLAGS_LEFT))
911
0
    while(width-- > 0)
912
0
      OUTCHAR(' ');
913
914
0
  for(; len && *str; len--)
915
0
    OUTCHAR(*str++);
916
0
  if(flags & FLAGS_LEFT)
917
0
    while(width-- > 0)
918
0
      OUTCHAR(' ');
919
920
0
  if(flags & FLAGS_ALT)
921
0
    OUTCHAR('"');
922
923
0
  return FALSE;
924
0
}
925
926
static bool out_pointer(void *userp,
927
                        int (*stream)(unsigned char, void *),
928
                        struct mproperty *p,
929
                        const char *ptr,
930
                        char *work,
931
                        int *donep)
932
0
{
933
  /* Generic pointer. */
934
0
  if(ptr) {
935
0
    size_t num = (size_t)ptr;
936
937
    /* If the pointer is not NULL, write it as a %#x spec. */
938
0
    p->flags |= FLAGS_HEX | FLAGS_ALT;
939
0
    if(out_number(userp, stream, p, num, 0, work, donep))
940
0
      return TRUE;
941
0
  }
942
0
  else {
943
    /* Write "(nil)" for a nil pointer. */
944
0
    const char *point;
945
0
    int width = p->width;
946
0
    int flags = p->flags;
947
948
0
    width -= (int)CURL_CSTRLEN(nilstr);
949
0
    if(flags & FLAGS_LEFT)
950
0
      while(width-- > 0)
951
0
        OUTCHAR(' ');
952
0
    for(point = nilstr; *point; ++point)
953
0
      OUTCHAR(*point);
954
0
    if(!(flags & FLAGS_LEFT))
955
0
      while(width-- > 0)
956
0
        OUTCHAR(' ');
957
0
  }
958
0
  return FALSE;
959
0
}
960
961
/*
962
 * formatf() - the general printf function.
963
 *
964
 * It calls parsefmt() to parse the format string. It populates two arrays;
965
 * one that describes the input arguments and one that describes a number of
966
 * output segments.
967
 *
968
 * On success, the input array describes the type of all arguments and their
969
 * values.
970
 *
971
 * The function then iterates over the output segments and outputs them one
972
 * by one until done. Using the appropriate input arguments (if any).
973
 *
974
 * All output is sent to the 'stream()' callback, one byte at a time.
975
 */
976
static int formatf(void *userp, /* untouched by format(), sent to the
977
                                   stream() function in the second argument */
978
                   /* function pointer called for each output character */
979
                   int (*stream)(unsigned char, void *),
980
                   const char *format, /* %-formatted string */
981
                   va_list ap_save) /* list of parameters */
982
0
{
983
0
  int done = 0;   /* number of characters written */
984
0
  int i;
985
0
  int ocount = 0; /* number of output segments */
986
0
  int icount = 0; /* number of input arguments */
987
988
0
  struct outsegment output[MAX_SEGMENTS];
989
0
  struct va_input input[MAX_PARAMETERS];
990
0
  char work[BUFFSIZE + 2];
991
992
  /* Parse the format string */
993
0
  if(parsefmt(format, output, input, &ocount, &icount, ap_save))
994
0
    return 0;
995
996
0
  for(i = 0; i < ocount; i++) {
997
0
    struct outsegment *optr = &output[i];
998
0
    struct va_input *iptr = &input[optr->input];
999
0
    struct mproperty p;
1000
0
    size_t outlen = optr->outlen;
1001
1002
0
    if(outlen) {
1003
0
      const char *str = optr->start;
1004
0
      for(; outlen && *str; outlen--) {
1005
0
        if(stream(*str++, userp))
1006
0
          return done;
1007
0
        done++;
1008
0
      }
1009
0
      if(optr->flags & FLAGS_SUBSTR)
1010
        /* this is a substring */
1011
0
        continue;
1012
0
    }
1013
1014
0
    p.flags = optr->flags;
1015
1016
    /* pick up the specified width */
1017
0
    if(p.flags & FLAGS_WIDTHPARAM) {
1018
0
      p.width = (int)input[optr->width].val.nums;
1019
0
      if(p.width < 0) {
1020
        /* "A negative field width is taken as a '-' flag followed by a
1021
           positive field width." */
1022
0
        if(p.width == INT_MIN)
1023
0
          p.width = INT_MAX;
1024
0
        else
1025
0
          p.width = -p.width;
1026
0
        p.flags |= FLAGS_LEFT;
1027
0
        p.flags &= ~(unsigned int)FLAGS_PAD_NIL;
1028
0
      }
1029
0
    }
1030
0
    else
1031
0
      p.width = optr->width;
1032
1033
    /* pick up the specified precision */
1034
0
    if(p.flags & FLAGS_PRECPARAM) {
1035
0
      p.prec = (int)input[optr->precision].val.nums;
1036
0
      if(p.prec < 0)
1037
        /* "A negative precision is taken as if the precision were
1038
           omitted." */
1039
0
        p.prec = -1;
1040
0
    }
1041
0
    else if(p.flags & FLAGS_PREC)
1042
0
      p.prec = optr->precision;
1043
0
    else
1044
0
      p.prec = -1;
1045
1046
0
    switch(iptr->type) {
1047
0
    case MTYPE_INTU:
1048
0
    case MTYPE_LONGU:
1049
0
    case MTYPE_LONGLONGU:
1050
0
      p.flags |= FLAGS_UNSIGNED;
1051
0
      if(out_number(userp, stream, &p, iptr->val.numu, 0, work, &done))
1052
0
        return done;
1053
0
      break;
1054
1055
0
    case MTYPE_INT:
1056
0
    case MTYPE_LONG:
1057
0
    case MTYPE_LONGLONG:
1058
0
      if(out_number(userp, stream, &p, iptr->val.numu,
1059
0
                    iptr->val.nums, work, &done))
1060
0
        return done;
1061
0
      break;
1062
1063
0
    case MTYPE_STRING:
1064
0
      if(out_string(userp, stream, &p, iptr->val.str, &done))
1065
0
        return done;
1066
0
      break;
1067
1068
0
    case MTYPE_PTR:
1069
0
      if(out_pointer(userp, stream, &p, iptr->val.ptr, work, &done))
1070
0
        return done;
1071
0
      break;
1072
1073
0
    case MTYPE_DOUBLE:
1074
0
    case MTYPE_LONGDOUBLE:
1075
0
      if(out_double(userp, stream, &p, iptr->val.dnum, work, &done))
1076
0
        return done;
1077
0
      break;
1078
1079
0
    case MTYPE_INTPTR:
1080
      /* Answer the count of characters written. */
1081
0
      if(p.flags & FLAGS_LONGLONG)
1082
0
        *(int64_t *)iptr->val.ptr = (int64_t)done;
1083
0
      else if(p.flags & FLAGS_LONG)
1084
0
        *(long *)iptr->val.ptr = (long)done;
1085
0
      else if(!(p.flags & FLAGS_SHORT))
1086
0
        *(int *)iptr->val.ptr = done;
1087
0
      else
1088
0
        *(short *)iptr->val.ptr = (short)done;
1089
0
      break;
1090
1091
0
    default:
1092
0
      break;
1093
0
    }
1094
0
  }
1095
0
  return done;
1096
0
}
1097
1098
/* fputc() look-alike */
1099
static int addbyter(unsigned char outc, void *f)
1100
0
{
1101
0
  struct nsprintf *infop = f;
1102
0
  if(infop->length < infop->max) {
1103
    /* only do this if we have not reached max length yet */
1104
0
    *infop->buffer++ = (char)outc; /* store */
1105
0
    infop->length++; /* we are now one byte larger */
1106
0
    return 0;     /* fputc() returns like this on success */
1107
0
  }
1108
0
  return 1;
1109
0
}
1110
1111
int curl_mvsnprintf(char *buffer, size_t maxlength, const char *format,
1112
                    va_list args)
1113
0
{
1114
0
  int retcode;
1115
0
  struct nsprintf info;
1116
1117
0
  info.buffer = buffer;
1118
0
  info.length = 0;
1119
0
  info.max = maxlength;
1120
1121
0
  retcode = formatf(&info, addbyter, format, args);
1122
0
  if(info.max) {
1123
    /* we terminate this with a zero byte */
1124
0
    if(info.max == info.length) {
1125
      /* we are at maximum, scrap the last letter */
1126
0
      info.buffer[-1] = 0;
1127
0
      DEBUGASSERT(retcode);
1128
0
      retcode--; /* do not count the nul byte */
1129
0
    }
1130
0
    else
1131
0
      info.buffer[0] = 0;
1132
0
  }
1133
0
  return retcode;
1134
0
}
1135
1136
int curl_msnprintf(char *buffer, size_t maxlength, const char *format, ...)
1137
0
{
1138
0
  int retcode;
1139
0
  va_list args; /* argument pointer */
1140
0
  va_start(args, format);
1141
0
  retcode = curl_mvsnprintf(buffer, maxlength, format, args);
1142
0
  va_end(args);
1143
0
  return retcode;
1144
0
}
1145
1146
/* fputc() look-alike */
1147
static int alloc_addbyter(unsigned char outc, void *f)
1148
0
{
1149
0
  struct asprintf *infop = f;
1150
0
  CURLcode result = curlx_dyn_addn(infop->b, &outc, 1);
1151
0
  if(result) {
1152
0
    infop->merr = result == CURLE_TOO_LARGE ? MERR_TOO_LARGE : MERR_MEM;
1153
0
    return 1; /* fail */
1154
0
  }
1155
0
  return 0;
1156
0
}
1157
1158
/* appends the formatted string, returns MERR error code */
1159
int curlx_dyn_vprintf(struct dynbuf *dyn, const char *format, va_list args)
1160
0
{
1161
0
  struct asprintf info;
1162
0
  info.b = dyn;
1163
0
  info.merr = MERR_OK;
1164
1165
0
  (void)formatf(&info, alloc_addbyter, format, args);
1166
0
  if(info.merr) {
1167
0
    curlx_dyn_free(info.b);
1168
0
    return info.merr;
1169
0
  }
1170
0
  return 0;
1171
0
}
1172
1173
char *curl_mvaprintf(const char *format, va_list args)
1174
0
{
1175
0
  struct asprintf info;
1176
0
  struct dynbuf dyn;
1177
0
  info.b = &dyn;
1178
0
  curlx_dyn_init(info.b, DYN_APRINTF);
1179
0
  info.merr = MERR_OK;
1180
1181
0
  (void)formatf(&info, alloc_addbyter, format, args);
1182
0
  if(info.merr) {
1183
0
    curlx_dyn_free(info.b);
1184
0
    return NULL;
1185
0
  }
1186
0
  if(curlx_dyn_len(info.b))
1187
0
    return curlx_dyn_ptr(info.b);
1188
0
  return curlx_strdup("");
1189
0
}
1190
1191
char *curl_maprintf(const char *format, ...)
1192
0
{
1193
0
  va_list args;
1194
0
  char *s;
1195
0
  va_start(args, format);
1196
0
  s = curl_mvaprintf(format, args);
1197
0
  va_end(args);
1198
0
  return s;
1199
0
}
1200
1201
static int storebuffer(unsigned char outc, void *f)
1202
0
{
1203
0
  char **buffer = f;
1204
0
  **buffer = (char)outc;
1205
0
  (*buffer)++;
1206
0
  return 0;
1207
0
}
1208
1209
int curl_msprintf(char *buffer, const char *format, ...)
1210
0
{
1211
0
  va_list args; /* argument pointer */
1212
0
  int retcode;
1213
0
  va_start(args, format);
1214
0
  retcode = formatf(&buffer, storebuffer, format, args);
1215
0
  va_end(args);
1216
0
  *buffer = 0; /* we terminate this with a zero byte */
1217
0
  return retcode;
1218
0
}
1219
1220
static int fputc_wrapper(unsigned char outc, void *f)
1221
0
{
1222
0
  int out = outc;
1223
0
  FILE *s = f;
1224
0
  int rc = fputc(out, s);
1225
0
  return rc == EOF;
1226
0
}
1227
1228
int curl_mprintf(const char *format, ...)
1229
0
{
1230
0
  int retcode;
1231
0
  va_list args; /* argument pointer */
1232
0
  va_start(args, format);
1233
0
  retcode = formatf(stdout, fputc_wrapper, format, args);
1234
0
  va_end(args);
1235
0
  return retcode;
1236
0
}
1237
1238
int curl_mfprintf(FILE *fd, const char *format, ...)
1239
0
{
1240
0
  int retcode;
1241
0
  va_list args; /* argument pointer */
1242
0
  va_start(args, format);
1243
0
  retcode = formatf(fd, fputc_wrapper, format, args);
1244
0
  va_end(args);
1245
0
  return retcode;
1246
0
}
1247
1248
int curl_mvsprintf(char *buffer, const char *format, va_list args)
1249
0
{
1250
0
  int retcode = formatf(&buffer, storebuffer, format, args);
1251
0
  *buffer = 0; /* we terminate this with a zero byte */
1252
0
  return retcode;
1253
0
}
1254
1255
int curl_mvprintf(const char *format, va_list args)
1256
0
{
1257
0
  return formatf(stdout, fputc_wrapper, format, args);
1258
0
}
1259
1260
int curl_mvfprintf(FILE *fd, const char *format, va_list args)
1261
0
{
1262
0
  return formatf(fd, fputc_wrapper, format, args);
1263
0
}