extra safety in fprintf check