[Bug 2892] wcmd uses unsafe vsprintf