The menu system uses descriptions stored as xml so they can be modified without recompiling, rather than having them hard-coded into the program.  When the code was initially written, we did not use a real xml library, so the parsing was done with sscanf and related functions, which makes the code less robust and secure than it could be.

Now we link to libxml2, but it is not yet uniformly used.  For this task, go through all xml-related code and make sure it uses proper library routines.