Note #931, SCANF.C, line 189: Both sides have side-effects [MISRA-C:2004 1.2 REQ]

The message is reported for the expression below:

*s++ == *format++

The expression is safe because 's' and 'format' do not point to the same address.