[Bug 35964] New: gdip_format_string can segfault if format is NULL