/* f() is intended to format the printing of an integer
   with user supplied formatting information, but it is unsafe... */
#include <stdio.h>

void f(char *number_string, int item)
{
  char buffer[100];
  sprintf(buffer, "%%%si\n", number_string);
  printf(buffer, item);
}

int main()
{
  f("030", 1000);
  f("%%i%s", 999);
  return 0;
}