CVE-2015-1472: wscanf allocates too little memory