sprintf() in insecure manner (may subject to buffer overflow, like xmindpath in magicpoint). If you really care, I can mark them BROKEN until they are confirmed to be safe.