rem: snprintf(fmt, sizeof(fmt), "%%%is \"%%%i[^\"]\" %%lu", sizeof(user) - 1, PATH_MAX); sscanf(&buf[3], fmt, user, file, &offset);
add: sscanf(&buf[3], stringf("%%%is \"%%%i[^\"]\" %%lu", sizeof(user) - 1, PATH_MAX), user, file, &offset);
context: static void on_upload_read(int fd, input_id input, void *udata){	TCPC *con = (TCPC *) udata;	Share *share;	char buf[PATH_MAX + 256], file[PATH_MAX + 1] = {0}, user[64] = {0};	char fmt[32];	int bytes;	uint32_t offset = 0;	if ((bytes = tcp_recv(con, (uint8_t *) buf, sizeof(buf) - 1)) <= 0)		return;	buf[bytes] = 0;	if (!strcmp(buf, "GET"))		return;	input_remove(input);	snprintf(fmt, sizeof(fmt), "%%%is \"%%%i[^\"]\" %%lu",	         sizeof(user) - 1, PATH_MAX);	sscanf(&buf[3], fmt, user, file, &offset);		if (!(share = OPN->share_lookup(OPN, SHARE_LOOKUP_HPATH, file))) {		tcp_close(con);		return;	}	switch (OPN->upload_auth(OPN, net_ip_str(con->host), share, NULL)) {		case UPLOAD_AUTH_ALLOW:			opn_upload_start(user, share, offset, con);			break;		case UPLOAD_AUTH_NOTSHARED:			tcp_writestr(con, OPN_MSG_FILENOTSHARED);			tcp_close(con);			break;		case UPLOAD_AUTH_STALE:			tcp_writestr(con, OPN_MSG_INVALIDREQUEST);			tcp_close(con);		case UPLOAD_AUTH_MAX:		case UPLOAD_AUTH_MAX_PERUSER:			/* FIXME, maybe			 */			break;		default:			tcp_close(con);			break;	}}