Is there any reason not to use the sanitized string only from here on out?  While it seems unlikely that any bizarre input will confuse sscanf(), explicit sanitization avoids any doubt.