ref-filter: drop sprintf and strcpy calls