date: cap format width to i32::MAX to prevent OOM

Author: sylvestre

src/uu/date/src/format_modifiers.rs

@@ -145,7 +145,12 @@ fn format_with_modifiers(
         // Check if this specifier has modifiers
         if !flags.is_empty() || !width_str.is_empty() {
             // Apply modifiers to the formatted value
-            let width: usize = width_str.parse().unwrap_or(0);
+            // Cap width to i32::MAX to match GNU behavior, which uses int for width.
+            // Without this cap, very large widths (e.g., %8888888888r) cause OOM.
+            let width: usize = width_str
+                .parse::<usize>()
+                .unwrap_or(0)
+                .min(i32::MAX as usize);
             let explicit_width = !width_str.is_empty();
             let modified = apply_modifiers(&formatted, flags, width, spec, explicit_width);
             result.push_str(&modified);
@@ -710,4 +715,13 @@ mod tests {
             "GNU: %_C should produce '19', not '  19' (default width is 2, not 4)"
         );
     }
+
+    #[test]
+    fn test_large_width_capped_to_i32_max() {
+        // Regression test: widths exceeding i32::MAX caused OOM.
+        // GNU caps width to int (i32), so %8888888888r should use width i32::MAX.
+        let value = "12:00:00 AM";
+        let result = apply_modifiers(value, "", i32::MAX as usize, "r", true);
+        assert_eq!(result.len(), i32::MAX as usize);
+    }
 }

tests/by-util/test_date.rs

@@ -758,6 +758,26 @@ fn test_date_overflow() {
         .stderr_contains("invalid date");
 }
 
+#[test]
+fn test_date_format_large_width_no_oom() {
+    // Regression: very large width like %8888888888r caused OOM.
+    // GNU caps width to i32::MAX; verify we don't crash.
+    // Use a moderate width with a fixed date to check the code path works.
+    new_ucmd!()
+        .arg("-d")
+        .arg("2024-01-01")
+        .arg("+%300S")
+        .succeeds()
+        .stdout_is(format!("{}\n", format_args!("{:0>300}", "00")));
+
+    // Original fuzzer input: verify it doesn't OOM/crash.
+    new_ucmd!()
+        .arg("-d")
+        .arg("2024-01-01")
+        .arg("+r++%++8888888888r+%")
+        .succeeds();
+}
+
 #[test]
 fn test_date_parse_from_format() {
     const FILE: &str = "file-with-dates";