vsscanf: fix sscanf("2+2", "%d%d")