Prevent crash in GMPy_MPFR_Format()

See #522 (comment)
aleaxit · Oct 23, 2024 · c57fd1e · c57fd1e
1 parent 17fb42d
commit c57fd1e
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/gmpy2_format.c b/src/gmpy2_format.c
@@ -319,6 +319,10 @@ GMPy_MPFR_Format(PyObject *self, PyObject *args)
     *(p3) = '\00';
 
     buflen = mpfr_asprintf(&buffer, mpfrfmt, MPFR(self));
+    if (buflen == -1) {
+        RUNTIME_ERROR("Number of characters written exceeds the INT_MAX");
+        return NULL;
+    }
 
     /* If there isn't a decimal point in the output and the output
      * only consists of digits, then append .0 */