scanf format checking: include the buffer length in the fix-it for %s.

Patch by Zach Davis!