C++: exclude printf implementation internals from uncontrolled format string sinks

C++: exclude printf implementation internals from uncontrolled format string sinks #10937