* various places: audit use of printf-like functions, including   errx?, warnx?, setproctitle, and syslog.  if we pass user-supplied   variable alone to these functions, they can be hosed by malicious   %-format string.  from openbsd.
* various places: audit use of printf-like functions, including
  errx?, warnx?, setproctitle, and syslog.  if we pass user-supplied
  variable alone to these functions, they can be hosed by malicious
  %-format string.  from openbsd.

MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame