- Check for output truncation in strcatf().
- SQL escape user input in TiVo command processing.