> It's not clear to me that losing standards conformance to make
> admittedly-broken programs somewhat more secure is either a good
> thing, or in keeping with the principle of least surprise.

the same argument could be used against the introduction of
snprintf(); applications *should* know how much space they'll need in
advance.

%n turns an otherwise "safe" interface into an interface as dangerous
as gets().

					- Bill