This is more of a C question than C++. In a C++ library you would probably make the format function type safe. But both Clang and gcc have annotations you can

This is more of a C question than C++. In a C++ library you would probably make the format function type safe. But both Clang and gcc have annotations you can add to functions using format strings so they are type-checked