'?X' extended directive, fixed an unsafe 'snprintf' call, allowed for
injection (5)

Signed-off-by: nixnodes <code@nixnodes.net>