tree aabaeecd55240d1c74177f1eefa7e702f1f1e3ce
parent 3d959092da4d48a9fd5f10f68faea808897c4282
author Andre Przywara <andre.przywara@arm.com> 1643048170 +0000
committer Andre Przywara <andre.przywara@arm.com> 1644510812 +0000

fix(libc): limit snprintf radix value

In our unsigned_num_print() function we first print the integer into a
local buffer, then put this through alignment and padding and output the
result. For this we use a local buffer, sized by the maximum possible
length of the largest possible number.

However this assumes that the radix is not smaller than 10, which is
indeed the smallest value we pass into this static function at the
moment. To prevent accidents in the future, should we add support for
other radices, add an assert to enforce our assumption.

Unfortunately this cannot be a static assert (CASSERT), since the
compiler is not smart enough to see that the argument is always coming
from a literal.

Change-Id: Ic204462600d9f4c281d899cf9f2c698a0a33a874
Signed-off-by: Andre Przywara <andre.przywara@arm.com>