[Bug 2892] New: wcmd uses unsafe vsprintf