[Stephen Griffin (stephenegriffin)]

Summary

• Replace flagged wprintf calls with wprintf_s, including format-checking macros.
• Rename the custom binary parser rewind method to rewindToStart to eliminate false positives.
• No analyzer suppressions or workflow changes. Leave mapistub SDK-header cleanup separate.
• Remove nine pre-existing live-MAPI integration tests from the native unit-test project. Replace them with six mocked stream/property tests using existing fake MAPI entry points; retain existing mocked error-path coverage.
• Mocked tests verify our wrapper/stream logic, not Outlook codec correctness or real MSG persistence.

Validation

• Debug_Unicode x64 and Win32 solution builds passed.
• Full native suites: 482/482 passed on each architecture, zero failures or skips.
• Actual CLI help output unchanged by CRT replacements.
• DevSkim 1.0.100 DS154189: 485 to zero first-party findings. Seven findings remain in initialized mapistub SDK headers; no suppression added.
• clang-format 17 and whitespace checks passed.
• mapistub checked current at 8e4d4bffacab68dc34425a4cf5888e926b21d2c0.

[github-actions]

Test Results

    8 files  ± 0      8 suites  ±0   59s ⏱️ +8s
  482 tests + 6    482 ✅ + 6  0 💤 ±0  0 ❌ ±0 
3 856 runs  +48  3 856 ✅ +48  0 💤 ±0  0 ❌ ±0 

Results for commit 9d743f2. ± Comparison against base commit e4fbdad.