There is an open radar to implement better scanf checking as a Sema warning. However, a bit of redundancy is fine in this case.

llvm-svn: 144964

The checker is responsible for defining attack surface and adding taint to symbols.

llvm-svn: 144825