bug: format string vulnerability in fmt.printf/sprintf/format — runtime format strings flow unsanitised to C printf, plus C compiler -Wformat warnings leak through to end users