util.h: gcc printf format attribute