Modify to use vulnerable function 'sscanf'