# HG changeset patch
# User Richard M. Stallman <rms@gnu.org>
# Date 808102484 0
# Node ID 3917c5d131d3c456b7f3eb11b5025dc3d1a4c2e8
# Parent  cc26e7c955cc2d85da88b6eb42b84332d0c41cf7
(Fformat): Limit minlen to avoid stack overflow.

diff -r cc26e7c955cc -r 3917c5d131d3 src/editfns.c
--- a/src/editfns.c	Fri Aug 11 00:42:28 1995 +0000
+++ b/src/editfns.c	Fri Aug 11 00:54:44 1995 +0000
@@ -1800,10 +1800,9 @@
 
 	/* Process a numeric arg and skip it.  */
 	minlen = atoi (format);
-	if (minlen > 0)
-	  total += minlen;
-	else
-	  total -= minlen;
+	if (minlen < 0)
+	  minlen = - minlen;
+
 	while ((*format >= '0' && *format <= '9')
 	       || *format == '-' || *format == ' ' || *format == '.')
 	  format++;
@@ -1811,7 +1810,7 @@
 	if (*format == '%')
 	  format++;
 	else if (++n >= nargs)
-	  error ("not enough arguments for format string");
+	  error ("Not enough arguments for format string");
 	else if (*format == 'S')
 	  {
 	    /* For `S', prin1 the argument and then treat like a string.  */
@@ -1831,6 +1830,10 @@
 	    if (*format != 's' && *format != 'S')
 	      error ("format specifier doesn't match argument type");
 	    total += XSTRING (args[n])->size;
+	    /* We have to put an arbitrary limit on minlen
+	       since otherwise it could make alloca fail.  */
+	    if (minlen < XSTRING (args[n])->size + 1000)
+	      total += minlen;
 	  }
 	/* Would get MPV otherwise, since Lisp_Int's `point' to low memory.  */
 	else if (INTEGERP (args[n]) && *format != 's')
@@ -1844,6 +1847,10 @@
 	      args[n] = Ffloat (args[n]);
 #endif
 	    total += 30;
+	    /* We have to put an arbitrary limit on minlen
+	       since otherwise it could make alloca fail.  */
+	    if (minlen < 1000)
+	      total += minlen;
 	  }
 #ifdef LISP_FLOAT_TYPE
 	else if (FLOATP (args[n]) && *format != 's')
@@ -1851,6 +1858,10 @@
 	    if (! (*format == 'e' || *format == 'f' || *format == 'g'))
 	      args[n] = Ftruncate (args[n]);
 	    total += 30;
+	    /* We have to put an arbitrary limit on minlen
+	       since otherwise it could make alloca fail.  */
+	    if (minlen < 1000)
+	      total += minlen;
 	  }
 #endif
 	else