sscanf() to prevent overflow