romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-25 01:33:31 +03:00
Code Issues Projects Releases Packages Wiki Activity

mprintf: fix integer handling in float precision

Browse source 
In the double output function when an extremely large width and
precision is set that reaches the libcurl maximum (325), the handling of
the precision part would do wrong which could lead to bad output.

Also: work-around for single-byte buffer snprintf overflow with mingw.

Extend test 557 to verify.

Coverity CID 1638751.

Closes #15988
This commit is contained in:
Daniel Stenberg 2025-01-13 13:24:31 +01:00
parent 97d278fd76
commit 7e32f65687
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
2 changed files with 59 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

42
tests/libtest/lib557.c
View file

@ -1207,6 +1207,46 @@ static int test_pos_arguments(void)
return errors;
}
static int test_width_precision(void)
{
/* 325 is max precision (and width) for a double */
char larger[1024];
#define SPACE60 " "
#define SPACE300 SPACE60 SPACE60 SPACE60 SPACE60 SPACE60
#define OK325 SPACE300 " 0"
int rc;
int errors = 0;
rc = curl_msnprintf(larger, sizeof(larger), "%325.325f", 0.1);
if(rc != 325)
errors++;
errors += string_check(larger, OK325);
rc = curl_msnprintf(larger, sizeof(larger), "%326.326f", 0.1);
if(rc != 325)
errors++;
errors += string_check(larger, OK325);
rc = curl_msnprintf(larger, sizeof(larger), "%1000.1000f", 0.1);
if(rc != 325)
errors++;
errors += string_check(larger, OK325);
rc = curl_msnprintf(larger, sizeof(larger), "%324.324f", 0.1);
if(rc != 324)
errors++;
rc = curl_msnprintf(larger, sizeof(larger), "%324.0f", 0.1);
if(rc != 324)
errors++;
rc = curl_msnprintf(larger, sizeof(larger), "%0.324f", 0.1);
if(rc != 325)
errors++;
return errors;
}
static int test_weird_arguments(void)
{
int errors = 0;
@ -1320,6 +1360,8 @@ static int test_weird_arguments(void)
errors += string_check(buf, "");
errors += test_width_precision();
if(errors)
printf("Some curl_mprintf() weird arguments tests failed!\n");