[Bug 35964] gdip_format_string can segfault if format is NULL