From ae18169d7a49c4c54016ec0b96b352236cbae598 Mon Sep 17 00:00:00 2001
From: Michael R Sweet <msweet@msweet.org>
Date: Tue, 28 May 2024 19:46:08 -0400
Subject: [PATCH] Fix infinite loop if the format buffer is too small.

---
 cups/string.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/cups/string.c b/cups/string.c
index 4d5e09172d..615caadf02 100644
--- a/cups/string.c
+++ b/cups/string.c
@@ -480,6 +480,8 @@ cupsFormatStringv(
 
       if (bufptr < bufend)
         *bufptr++ = *format++;
+      else
+        format ++;
     }
   }
 
-- 
2.47.2