/* $Id: snprintf.c,v 1.9 2008/01/20 14:02:00 holger Exp $ */

/*

 * Copyright (c) 1995 Patrick Powell.

 *

 * This code is based on code written by Patrick Powell <papowell@astart.com>.

 * It may be used for any purpose as long as this notice remains intact on all

 * source code distributions.

 */

/*

 * Copyright (c) 2008 Holger Weiss.

 *

 * This version of the code is maintained by Holger Weiss <holger@jhweiss.de>.

 * My changes to the code may freely be used, modified and/or redistributed for

 * any purpose.  It would be nice if additions and fixes to this file (including

 * trivial code cleanups) would be sent back in order to let me include them in

 * the version available at <http://www.jhweiss.de/software/snprintf.html>.

 * However, this is not a requirement for using or redistributing (possibly

 * modified) versions of this file, nor is leaving this notice intact mandatory.

 */

/*

 * History

 *

 * 2008-01-20 Holger Weiss <holger@jhweiss.de> for C99-snprintf 1.1:

 *

 * 	Fixed the detection of infinite floating point values on IRIX (and

 * 	possibly other systems) and applied another few minor cleanups.

 *

 * 2008-01-06 Holger Weiss <holger@jhweiss.de> for C99-snprintf 1.0:

 *

 * 	Added a lot of new features, fixed many bugs, and incorporated various

 * 	improvements done by Andrew Tridgell <tridge@samba.org>, Russ Allbery

 * 	<rra@stanford.edu>, Hrvoje Niksic <hniksic@xemacs.org>, Damien Miller

 * 	<djm@mindrot.org>, and others for the Samba, INN, Wget, and OpenSSH

 * 	projects.  The additions include: support the "e", "E", "g", "G", and

 * 	"F" conversion specifiers (and use conversion style "f" or "F" for the

 * 	still unsupported "a" and "A" specifiers); support the "hh", "ll", "j",

 * 	"t", and "z" length modifiers; support the "#" flag and the (non-C99)

 * 	"'" flag; use localeconv(3) (if available) to get both the current

 * 	locale's decimal point character and the separator between groups of

 * 	digits; fix the handling of various corner cases of field width and

 * 	precision specifications; fix various floating point conversion bugs;

 * 	handle infinite and NaN floating point values; don't attempt to write to

 * 	the output buffer (which may be NULL) if a size of zero was specified;

 * 	check for integer overflow of the field width, precision, and return

 * 	values and during the floating point conversion; use the OUTCHAR() macro

 * 	instead of a function for better performance; provide asprintf(3) and

 * 	vasprintf(3) functions; add new test cases.  The replacement functions

 * 	have been renamed to use an "rpl_" prefix, the function calls in the

 * 	main project (and in this file) must be redefined accordingly for each

 * 	replacement function which is needed (by using Autoconf or other means).

 * 	Various other minor improvements have been applied and the coding style

 * 	was cleaned up for consistency.

 *

 * 2007-07-23 Holger Weiss <holger@jhweiss.de> for Mutt 1.5.13:

 *

 * 	C99 compliant snprintf(3) and vsnprintf(3) functions return the number

 * 	of characters that would have been written to a sufficiently sized

 * 	buffer (excluding the '\0').  The original code simply returned the

 * 	length of the resulting output string, so that's been fixed.

 *

 * 1998-03-05 Michael Elkins <me@mutt.org> for Mutt 0.90.8:

 *

 * 	The original code assumed that both snprintf(3) and vsnprintf(3) were

 * 	missing.  Some systems only have snprintf(3) but not vsnprintf(3), so

 * 	the code is now broken down under HAVE_SNPRINTF and HAVE_VSNPRINTF.

 *

 * 1998-01-27 Thomas Roessler <roessler@does-not-exist.org> for Mutt 0.89i:

 *

 * 	The PGP code was using unsigned hexadecimal formats.  Unfortunately,

 * 	unsigned formats simply didn't work.

 *

 * 1997-10-22 Brandon Long <blong@fiction.net> for Mutt 0.87.1:

 *

 * 	Ok, added some minimal floating point support, which means this probably

 * 	requires libm on most operating systems.  Don't yet support the exponent

 * 	(e,E) and sigfig (g,G).  Also, fmtint() was pretty badly broken, it just

 * 	wasn't being exercised in ways which showed it, so that's been fixed.

 * 	Also, formatted the code to Mutt conventions, and removed dead code left

 * 	over from the original.  Also, there is now a builtin-test, run with:

 * 	gcc -DTEST_SNPRINTF -o snprintf snprintf.c -lm && ./snprintf

 *

 * 2996-09-15 Brandon Long <blong@fiction.net> for Mutt 0.43:

 *

 * 	This was ugly.  It is still ugly.  I opted out of floating point

 * 	numbers, but the formatter understands just about everything from the

 * 	normal C string format, at least as far as I can tell from the Solaris

 * 	2.5 printf(3S) man page.

 */

/*

 * ToDo

 *

 * - Add wide character support.

 * - Add support for "%a" and "%A" conversions.

 * - Create test routines which predefine the expected results.  Our test cases

 *   usually expose bugs in system implementations rather than in ours :-)

 */

/*

 * Usage

 *

 * 1) The following preprocessor macros should be defined to 1 if the feature or

 *    file in question is available on the target system (by using Autoconf or

 *    other means), though basic functionality should be available as long as

 *    HAVE_STDARG_H and HAVE_STDLIB_H are defined correctly:

 *

 *    	HAVE_VSNPRINTF

 *    	HAVE_SNPRINTF

 *    	HAVE_VASPRINTF

 *    	HAVE_ASPRINTF

 *    	HAVE_STDARG_H

 *    	HAVE_STDDEF_H

 *    	HAVE_STDINT_H

 *    	HAVE_STDLIB_H

 *    	HAVE_INTTYPES_H

 *    	HAVE_LOCALE_H

 *    	HAVE_LOCALECONV

 *    	HAVE_LCONV_DECIMAL_POINT

 *    	HAVE_LCONV_THOUSANDS_SEP

 *    	HAVE_LONG_DOUBLE

 *    	HAVE_LONG_LONG_INT

 *    	HAVE_UNSIGNED_LONG_LONG_INT

 *    	HAVE_INTMAX_T

 *    	HAVE_UINTMAX_T

 *    	HAVE_UINTPTR_T

 *    	HAVE_PTRDIFF_T

 *    	HAVE_VA_COPY

 *    	HAVE___VA_COPY

 *

 * 2) The calls to the functions which should be replaced must be redefined

 *    throughout the project files (by using Autoconf or other means):

 *

 *    	#define vsnprintf rpl_vsnprintf

 *    	#define snprintf rpl_snprintf

 *    	#define vasprintf rpl_vasprintf

 *    	#define asprintf rpl_asprintf

 *

 * 3) The required replacement functions should be declared in some header file

 *    included throughout the project files:

 *

 *    	#if HAVE_CONFIG_H

 *    	#include <config.h>

 *    	#endif

 *    	#if HAVE_STDARG_H

 *    	#include <stdarg.h>

 *    	#if !HAVE_VSNPRINTF

 *    	int rpl_vsnprintf(char *, size_t, const char *, va_list);

 *    	#endif

 *    	#if !HAVE_SNPRINTF

 *    	int rpl_snprintf(char *, size_t, const char *, ...);

 *    	#endif

 *    	#if !HAVE_VASPRINTF

 *    	int rpl_vasprintf(char **, const char *, va_list);

 *    	#endif

 *    	#if !HAVE_ASPRINTF

 *    	int rpl_asprintf(char **, const char *, ...);

 *    	#endif

 *    	#endif

 *

 * Autoconf macros for handling step 1 and step 2 are available at

 * <http://www.jhweiss.de/software/snprintf.html>.

 */

#if HAVE_CONFIG_H

#include <config.h>

#endif	/* HAVE_CONFIG_H */

#if TEST_SNPRINTF

#include <math.h>	/* For pow(3), NAN, and INFINITY. */

#include <string.h>	/* For strcmp(3). */

#if defined(__NetBSD__) || \

    defined(__FreeBSD__) || \

    defined(__OpenBSD__) || \

    defined(__NeXT__) || \

    defined(__bsd__)

#define OS_BSD 1

#elif defined(sgi) || defined(__sgi)

#ifndef __c99

#define __c99	/* Force C99 mode to get <stdint.h> included on IRIX 6.5.30. */

#endif	/* !defined(__c99) */

#define OS_IRIX 1

#define OS_SYSV 1

#elif defined(__svr4__)

#define OS_SYSV 1

#elif defined(__linux__)

#define OS_LINUX 1

#endif	/* defined(__NetBSD__) || defined(__FreeBSD__) || [...] */

#if HAVE_CONFIG_H	/* Undefine definitions possibly done in config.h. */

#ifdef HAVE_SNPRINTF

#undef HAVE_SNPRINTF

#endif	/* defined(HAVE_SNPRINTF) */

#ifdef HAVE_VSNPRINTF

#undef HAVE_VSNPRINTF

#endif	/* defined(HAVE_VSNPRINTF) */

#ifdef snprintf

#undef snprintf

#endif	/* defined(snprintf) */

#ifdef vsnprintf

#undef vsnprintf

#endif	/* defined(vsnprintf) */

#else	/* By default, we assume a modern system for testing. */

#ifndef HAVE_STDARG_H

#define HAVE_STDARG_H 1

#endif	/* HAVE_STDARG_H */

#ifndef HAVE_STDDEF_H

#define HAVE_STDDEF_H 1

#endif	/* HAVE_STDDEF_H */

#ifndef HAVE_STDINT_H

#define HAVE_STDINT_H 1

#endif	/* HAVE_STDINT_H */

#ifndef HAVE_STDLIB_H

#define HAVE_STDLIB_H 1

#endif	/* HAVE_STDLIB_H */

#ifndef HAVE_INTTYPES_H

#define HAVE_INTTYPES_H 1

#endif	/* HAVE_INTTYPES_H */

#ifndef HAVE_LOCALE_H

#define HAVE_LOCALE_H 1

#endif	/* HAVE_LOCALE_H */

#ifndef HAVE_LOCALECONV

#define HAVE_LOCALECONV 1

#endif	/* !defined(HAVE_LOCALECONV) */

#ifndef HAVE_LCONV_DECIMAL_POINT

#define HAVE_LCONV_DECIMAL_POINT 1

#endif	/* HAVE_LCONV_DECIMAL_POINT */

#ifndef HAVE_LCONV_THOUSANDS_SEP

#define HAVE_LCONV_THOUSANDS_SEP 1

#endif	/* HAVE_LCONV_THOUSANDS_SEP */

#ifndef HAVE_LONG_DOUBLE

#define HAVE_LONG_DOUBLE 1

#endif	/* !defined(HAVE_LONG_DOUBLE) */

#ifndef HAVE_LONG_LONG_INT

#define HAVE_LONG_LONG_INT 1

#endif	/* !defined(HAVE_LONG_LONG_INT) */

#ifndef HAVE_UNSIGNED_LONG_LONG_INT

#define HAVE_UNSIGNED_LONG_LONG_INT 1

#endif	/* !defined(HAVE_UNSIGNED_LONG_LONG_INT) */

#ifndef HAVE_INTMAX_T

#define HAVE_INTMAX_T 1

#endif	/* !defined(HAVE_INTMAX_T) */

#ifndef HAVE_UINTMAX_T

#define HAVE_UINTMAX_T 1

#endif	/* !defined(HAVE_UINTMAX_T) */

#ifndef HAVE_UINTPTR_T

#define HAVE_UINTPTR_T 1

#endif	/* !defined(HAVE_UINTPTR_T) */

#ifndef HAVE_PTRDIFF_T

#define HAVE_PTRDIFF_T 1

#endif	/* !defined(HAVE_PTRDIFF_T) */

#ifndef HAVE_VA_COPY

#define HAVE_VA_COPY 1

#endif	/* !defined(HAVE_VA_COPY) */

#ifndef HAVE___VA_COPY

#define HAVE___VA_COPY 1

#endif	/* !defined(HAVE___VA_COPY) */

#endif	/* HAVE_CONFIG_H */

#define snprintf rpl_snprintf

#define vsnprintf rpl_vsnprintf

#endif	/* TEST_SNPRINTF */

#if !HAVE_SNPRINTF || !HAVE_VSNPRINTF

#include <stdio.h>	/* For NULL, size_t, vsnprintf(3), and vasprintf(3). */

#ifdef VA_START

#undef VA_START

#endif	/* defined(VA_START) */

#ifdef VA_SHIFT

#undef VA_SHIFT

#endif	/* defined(VA_SHIFT) */

#if HAVE_STDARG_H

#include <stdarg.h>

#define VA_START(ap, last) va_start(ap, last)

#define VA_SHIFT(ap, value, type) /* No-op for ANSI C. */

#else	/* Assume <varargs.h> is available. */

#include <varargs.h>

#define VA_START(ap, last) va_start(ap)	/* "last" is ignored. */

#define VA_SHIFT(ap, value, type) value = va_arg(ap, type)

#endif	/* HAVE_STDARG_H */

#if !HAVE_VSNPRINTF

#include <errno.h>	/* For ERANGE and errno. */

#include <limits.h>	/* For *_MAX. */

#if HAVE_INTTYPES_H

#include <inttypes.h>	/* For intmax_t (if not defined in <stdint.h>). */

#endif	/* HAVE_INTTYPES_H */

#if HAVE_LOCALE_H

#include <locale.h>	/* For localeconv(3). */

#endif	/* HAVE_LOCALE_H */

#if HAVE_STDDEF_H

#include <stddef.h>	/* For ptrdiff_t. */

#endif	/* HAVE_STDDEF_H */

#if HAVE_STDINT_H

#include <stdint.h>	/* For intmax_t. */

#endif	/* HAVE_STDINT_H */

/* Support for unsigned long long int.  We may also need ULLONG_MAX. */

#ifndef ULONG_MAX	/* We may need ULONG_MAX as a fallback. */

#ifdef UINT_MAX

#define ULONG_MAX UINT_MAX

#else

#define ULONG_MAX INT_MAX

#endif	/* defined(UINT_MAX) */

#endif	/* !defined(ULONG_MAX) */

#ifdef ULLONG

#undef ULLONG

#endif	/* defined(ULLONG) */

#if HAVE_UNSIGNED_LONG_LONG_INT

#define ULLONG unsigned long long int

#ifndef ULLONG_MAX

#define ULLONG_MAX ULONG_MAX

#endif	/* !defined(ULLONG_MAX) */

#else

#define ULLONG unsigned long int

#ifdef ULLONG_MAX

#undef ULLONG_MAX

#endif	/* defined(ULLONG_MAX) */

#define ULLONG_MAX ULONG_MAX

#endif	/* HAVE_LONG_LONG_INT */

/* Support for uintmax_t.  We also need UINTMAX_MAX. */

#ifdef UINTMAX_T

#undef UINTMAX_T

#endif	/* defined(UINTMAX_T) */

#if defined(HAVE_UINTMAX_T) || defined(uintmax_t)

#define UINTMAX_T uintmax_t

#ifndef UINTMAX_MAX

#define UINTMAX_MAX ULLONG_MAX

#endif	/* !defined(UINTMAX_MAX) */

#else

#define UINTMAX_T ULLONG

#ifdef UINTMAX_MAX

#undef UINTMAX_MAX

#endif	/* defined(UINTMAX_MAX) */

#define UINTMAX_MAX ULLONG_MAX

#endif	/* HAVE_UINTMAX_T || defined(uintmax_t) */

/* Support for long double. */

#ifndef LDOUBLE

#if HAVE_LONG_DOUBLE

#define LDOUBLE long double

#else

#define LDOUBLE double

#endif	/* HAVE_LONG_DOUBLE */

#endif	/* !defined(LDOUBLE) */

/* Support for long long int. */

#ifndef LLONG

#if HAVE_LONG_LONG_INT

#define LLONG long long int

#else

#define LLONG long int

#endif	/* HAVE_LONG_LONG_INT */

#endif	/* !defined(LLONG) */

/* Support for intmax_t. */

#ifndef INTMAX_T

#if defined(HAVE_INTMAX_T) || defined(intmax_t)

#define INTMAX_T intmax_t

#else

#define INTMAX_T LLONG

#endif	/* HAVE_INTMAX_T || defined(intmax_t) */

#endif	/* !defined(INTMAX_T) */

/* Support for uintptr_t. */

#ifndef UINTPTR_T

#if defined(HAVE_UINTPTR_T) || defined(uintptr_t)

#define UINTPTR_T uintptr_t

#else

#define UINTPTR_T unsigned long int

#endif	/* HAVE_UINTPTR_T || defined(uintptr_t) */

#endif	/* !defined(UINTPTR_T) */

/* Support for ptrdiff_t. */

#ifndef PTRDIFF_T

#if defined(HAVE_PTRDIFF_T) || defined(ptrdiff_t)

#define PTRDIFF_T ptrdiff_t

#else

#define PTRDIFF_T long int

#endif	/* HAVE_PTRDIFF_T || defined(ptrdiff_t) */

#endif	/* !defined(PTRDIFF_T) */

/*

 * We need an unsigned integer type corresponding to ptrdiff_t (cf. C99:

 * 7.19.6.1, 7).  However, we'll simply use PTRDIFF_T and convert it to an

 * unsigned type if necessary.  This should work just fine in practice.

 */

#ifndef UPTRDIFF_T

#define UPTRDIFF_T PTRDIFF_T

#endif	/* !defined(UPTRDIFF_T) */

/*

 * We need a signed integer type corresponding to size_t (cf. C99: 7.19.6.1, 7).

 * However, we'll simply use size_t and convert it to a signed type if

 * necessary.  This should work just fine in practice.

 */

#ifndef SSIZE_T

#define SSIZE_T size_t

#endif	/* !defined(SSIZE_T) */

/* Either ERANGE or E2BIG should be available everywhere. */

#ifndef ERANGE

#define ERANGE E2BIG

#endif	/* !defined(ERANGE) */

#ifndef EOVERFLOW

#define EOVERFLOW ERANGE

#endif	/* !defined(EOVERFLOW) */

/*

 * Buffer size to hold the octal string representation of UINT128_MAX without

 * nul-termination ("3777777777777777777777777777777777777777777").

 */

#ifdef MAX_CONVERT_LENGTH

#undef MAX_CONVERT_LENGTH

#endif	/* defined(MAX_CONVERT_LENGTH) */

#define MAX_CONVERT_LENGTH      43

/* Format read states. */

#define PRINT_S_DEFAULT         0

#define PRINT_S_FLAGS           1

#define PRINT_S_WIDTH           2

#define PRINT_S_DOT             3

#define PRINT_S_PRECISION       4

#define PRINT_S_MOD             5

#define PRINT_S_CONV            6

/* Format flags. */

#define PRINT_F_MINUS           (1 << 0)

#define PRINT_F_PLUS            (1 << 1)

#define PRINT_F_SPACE           (1 << 2)

#define PRINT_F_NUM             (1 << 3)

#define PRINT_F_ZERO            (1 << 4)

#define PRINT_F_QUOTE           (1 << 5)

#define PRINT_F_UP              (1 << 6)

#define PRINT_F_UNSIGNED        (1 << 7)

#define PRINT_F_TYPE_G          (1 << 8)

#define PRINT_F_TYPE_E          (1 << 9)

/* Conversion flags. */

#define PRINT_C_CHAR            1

#define PRINT_C_SHORT           2

#define PRINT_C_LONG            3

/*#define PRINT_C_LLONG         4 */

#define PRINT_C_LDOUBLE         5

#define PRINT_C_SIZE            6

#define PRINT_C_PTRDIFF         7

#define PRINT_C_INTMAX          8

#ifndef MAX

#define MAX(x, y) ((x >= y) ? x : y)

#endif	/* !defined(MAX) */

#ifndef CHARTOINT

#define CHARTOINT(ch) (ch - '0')

#endif	/* !defined(CHARTOINT) */

#ifndef ISDIGIT

#define ISDIGIT(ch) ('0' <= (unsigned char)ch && (unsigned char)ch <= '9')

#endif	/* !defined(ISDIGIT) */

#ifndef ISNAN

#define ISNAN(x) (x != x)

#endif	/* !defined(ISNAN) */

#ifndef ISINF

#define ISINF(x) (x != 0.0 && x + x == x)

#endif	/* !defined(ISINF) */

#ifdef OUTCHAR

#undef OUTCHAR

#endif	/* defined(OUTCHAR) */

#define OUTCHAR(str, len, size, ch)                                          \

do {                                                                         \

	if (len + 1 < size)                                                  \

		str[len] = ch;                                               \

	(len)++;                                                             \

} while (/* CONSTCOND */ 0)

static void fmtstr(char *, size_t *, size_t, const char *, int, int, int);

static void fmtint(char *, size_t *, size_t, INTMAX_T, int, int, int, int);

static void fmtflt(char *, size_t *, size_t, LDOUBLE, int, int, int, int *);

static void printsep(char *, size_t *, size_t);

static int getnumsep(int);

static int getexponent(LDOUBLE);

static int convert(UINTMAX_T, char *, size_t, int, int);

static UINTMAX_T cast(LDOUBLE);

static UINTMAX_T myround(LDOUBLE);

static LDOUBLE mypow10(int);

extern int errno;

int

rpl_vsnprintf(char *str, size_t size, const char *format, va_list args)

{

	LDOUBLE fvalue;

	INTMAX_T value;

	unsigned char cvalue;

	const char *strvalue;

	INTMAX_T *intmaxptr;

	PTRDIFF_T *ptrdiffptr;

	SSIZE_T *sizeptr;

	/* Disabling, as long long is not supported in C90.

	LLONG *llongptr;

	*/

	long int *longptr;

	int *intptr;

	short int *shortptr;

	signed char *charptr;

	size_t len = 0;

	int overflow = 0;

	int base = 0;

	int cflags = 0;

	int flags = 0;

	int width = 0;

	int precision = -1;

	int state = PRINT_S_DEFAULT;

	char ch = *format++;

	/*

	 * C99 says: "If `n' is zero, nothing is written, and `s' may be a null

	 * pointer." (7.19.6.5, 2)  We're forgiving and allow a NULL pointer

	 * even if a size larger than zero was specified.  At least NetBSD's

	 * snprintf(3) does the same, as well as other versions of this file.

	 * (Though some of these versions will write to a non-NULL buffer even

	 * if a size of zero was specified, which violates the standard.)

	 */

	if (str == NULL && size != 0)

		size = 0;

	while (ch != '\0')

		switch (state) {

		case PRINT_S_DEFAULT:

			if (ch == '%')

				state = PRINT_S_FLAGS;

			else

				OUTCHAR(str, len, size, ch);

			ch = *format++;

			break;

		case PRINT_S_FLAGS:

			switch (ch) {

			case '-':

				flags |= PRINT_F_MINUS;

				ch = *format++;

				break;

			case '+':

				flags |= PRINT_F_PLUS;

				ch = *format++;

				break;

			case ' ':

				flags |= PRINT_F_SPACE;

				ch = *format++;

				break;

			case '#':

				flags |= PRINT_F_NUM;

				ch = *format++;

				break;

			case '0':

				flags |= PRINT_F_ZERO;

				ch = *format++;

				break;

			case '\'':	/* SUSv2 flag (not in C99). */

				flags |= PRINT_F_QUOTE;

				ch = *format++;

				break;

			default:

				state = PRINT_S_WIDTH;

				break;

			}

			break;

		case PRINT_S_WIDTH:

			if (ISDIGIT(ch)) {

				ch = CHARTOINT(ch);

				if (width > (INT_MAX - ch) / 10) {

					overflow = 1;

					goto out;

				}

				width = 10 * width + ch;

				ch = *format++;

			} else if (ch == '*') {

				/*

				 * C99 says: "A negative field width argument is

				 * taken as a `-' flag followed by a positive

				 * field width." (7.19.6.1, 5)

				 */

				if ((width = va_arg(args, int)) < 0) {

					flags |= PRINT_F_MINUS;

					width = -width;

				}

				ch = *format++;

				state = PRINT_S_DOT;

			} else

				state = PRINT_S_DOT;

			break;

		case PRINT_S_DOT:

			if (ch == '.') {

				state = PRINT_S_PRECISION;

				ch = *format++;

			} else

				state = PRINT_S_MOD;

			break;

		case PRINT_S_PRECISION:

			if (precision == -1)

				precision = 0;

			if (ISDIGIT(ch)) {

				ch = CHARTOINT(ch);

				if (precision > (INT_MAX - ch) / 10) {

					overflow = 1;

					goto out;

				}

				precision = 10 * precision + ch;

				ch = *format++;

			} else if (ch == '*') {

				/*

				 * C99 says: "A negative precision argument is

				 * taken as if the precision were omitted."

				 * (7.19.6.1, 5)

				 */

				if ((precision = va_arg(args, int)) < 0)

					precision = -1;

				ch = *format++;

				state = PRINT_S_MOD;

			} else

				state = PRINT_S_MOD;

			break;

		case PRINT_S_MOD:

			switch (ch) {

			case 'h':

				ch = *format++;

				if (ch == 'h') {	/* It's a char. */

					ch = *format++;

					cflags = PRINT_C_CHAR;

				} else

					cflags = PRINT_C_SHORT;

				break;

			case 'l':

				ch = *format++;

				/*

				if (ch == 'l') }

					ch = *format++;

					cflags = PRINT_C_LLONG;

				} else */

					cflags = PRINT_C_LONG;

				break;

			case 'L':

				cflags = PRINT_C_LDOUBLE;

				ch = *format++;

				break;

			case 'j':

				cflags = PRINT_C_INTMAX;

				ch = *format++;

				break;

			case 't':

				cflags = PRINT_C_PTRDIFF;

				ch = *format++;

				break;

			case 'z':

				cflags = PRINT_C_SIZE;

				ch = *format++;

				break;

			default:

				/* Lenght modifier is invalid */

				break;

			}

			state = PRINT_S_CONV;

			break;

		case PRINT_S_CONV:

			switch (ch) {

			case 'd':

				/* FALLTHROUGH */

			case 'i':

				switch (cflags) {

				case PRINT_C_CHAR:

					value = (signed char)va_arg(args, int);

					break;

				case PRINT_C_SHORT:

					value = (short int)va_arg(args, int);

					break;

				case PRINT_C_LONG:

					value = va_arg(args, long int);

					break;

				/*

				case PRINT_C_LLONG:

					value = va_arg(args, LLONG);

					break;

				*/

				case PRINT_C_SIZE:

					value = va_arg(args, SSIZE_T);

					break;

				case PRINT_C_INTMAX:

					value = va_arg(args, INTMAX_T);

					break;

				case PRINT_C_PTRDIFF:

					value = va_arg(args, PTRDIFF_T);

					break;

				default:

					value = va_arg(args, int);

					break;

				}

				fmtint(str, &len, size, value, 10, width,

				    precision, flags);

				break;

			case 'X':

				flags |= PRINT_F_UP;

				/* FALLTHROUGH */

			case 'x':

				base = 16;

				/* FALLTHROUGH */

			case 'o':

				if (base == 0)

					base = 8;

				/* FALLTHROUGH */

			case 'u':

				if (base == 0)

					base = 10;

				flags |= PRINT_F_UNSIGNED;

				switch (cflags) {

				case PRINT_C_CHAR:

					value = (unsigned char)va_arg(args,

					    unsigned int);

					break;

				case PRINT_C_SHORT:

					value = (unsigned short int)va_arg(args,

					    unsigned int);

					break;

				case PRINT_C_LONG:

					value = va_arg(args, unsigned long int);

					break;

				/*

				case PRINT_C_LLONG:

					value = va_arg(args, ULLONG);

					break;

				*/

				case PRINT_C_SIZE:

					value = va_arg(args, size_t);

					break;

				case PRINT_C_INTMAX:

					value = va_arg(args, UINTMAX_T);

					break;

				case PRINT_C_PTRDIFF:

					value = va_arg(args, UPTRDIFF_T);

					break;

				default:

					value = va_arg(args, unsigned int);

					break;

				}

				fmtint(str, &len, size, value, base, width,

				    precision, flags);

				break;

			case 'A':

				/* Not yet supported, we'll use "%F". */

				/* FALLTHROUGH */

			case 'F':

				flags |= PRINT_F_UP;

			case 'a':

				/* Not yet supported, we'll use "%f". */

				/* FALLTHROUGH */

			case 'f':

				if (cflags == PRINT_C_LDOUBLE)

					fvalue = va_arg(args, LDOUBLE);

				else

					fvalue = va_arg(args, double);

				fmtflt(str, &len, size, fvalue, width,

				    precision, flags, &overflow);

				if (overflow)

					goto out;

				break;

			case 'E':

				flags |= PRINT_F_UP;

				/* FALLTHROUGH */

			case 'e':

				flags |= PRINT_F_TYPE_E;

				if (cflags == PRINT_C_LDOUBLE)

					fvalue = va_arg(args, LDOUBLE);

				else

					fvalue = va_arg(args, double);

				fmtflt(str, &len, size, fvalue, width,

				    precision, flags, &overflow);

				if (overflow)

					goto out;

				break;

			case 'G':

				flags |= PRINT_F_UP;

				/* FALLTHROUGH */

			case 'g':

				flags |= PRINT_F_TYPE_G;

				if (cflags == PRINT_C_LDOUBLE)

					fvalue = va_arg(args, LDOUBLE);

				else

					fvalue = va_arg(args, double);

				/*

				 * If the precision is zero, it is treated as

				 * one (cf. C99: 7.19.6.1, 8).

				 */

				if (precision == 0)

					precision = 1;

				fmtflt(str, &len, size, fvalue, width,

				    precision, flags, &overflow);

				if (overflow)

					goto out;

				break;

			case 'c':

				cvalue = va_arg(args, int);

				OUTCHAR(str, len, size, cvalue);

				break;

			case 's':

				strvalue = va_arg(args, char *);

				fmtstr(str, &len, size, strvalue, width,

				    precision, flags);

				break;

			case 'p':

				/*

				 * C99 says: "The value of the pointer is

				 * converted to a sequence of printing

				 * characters, in an implementation-defined

				 * manner." (C99: 7.19.6.1, 8)

				 */

				if ((strvalue = (const char *)va_arg(args, void *)) == NULL)

					/*

					 * We use the glibc format.  BSD prints

					 * "0x0", SysV "0".

					 */

					fmtstr(str, &len, size, "(nil)", width,

					    -1, flags);

				else {

					/*

					 * We use the BSD/glibc format.  SysV

					 * omits the "0x" prefix (which we emit

					 * using the PRINT_F_NUM flag).

					 */

					flags |= PRINT_F_NUM;

					flags |= PRINT_F_UNSIGNED;

					fmtint(str, &len, size,

					    (UINTPTR_T)strvalue, 16, width,

					    precision, flags);

				}

				break;

			case 'n':

				switch (cflags) {

				case PRINT_C_CHAR:

					charptr = va_arg(args, signed char *);

					*charptr = len;

					break;

				case PRINT_C_SHORT:

					shortptr = va_arg(args, short int *);

					*shortptr = len;

					break;

				case PRINT_C_LONG:

					longptr = va_arg(args, long int *);

					*longptr = len;

					break;

				/*

				case PRINT_C_LLONG:

					llongptr = va_arg(args, LLONG *);

					*llongptr = len;

					break;

				*/

				case PRINT_C_SIZE:

					/*

					 * C99 says that with the "z" length

					 * modifier, "a following `n' conversion

					 * specifier applies to a pointer to a

					 * signed integer type corresponding to

					 * size_t argument." (7.19.6.1, 7)

					 */

					sizeptr = va_arg(args, SSIZE_T *);

					*sizeptr = len;

					break;

				case PRINT_C_INTMAX:

					intmaxptr = va_arg(args, INTMAX_T *);

					*intmaxptr = len;

					break;

				case PRINT_C_PTRDIFF:

					ptrdiffptr = va_arg(args, PTRDIFF_T *);

					*ptrdiffptr = len;

					break;

				default:

					intptr = va_arg(args, int *);

					*intptr = len;

					break;

				}

				break;

			case '%':	/* Print a "%" character verbatim. */

				OUTCHAR(str, len, size, ch);