The libc.prx that titles ship (PPSA05916, PPSA07923) stores every NaN a
floating conversion reads as the positive default quiet NaN, whatever
its sign or payload: -nan gives 0x7fc00000 for %f, 0x7ff8000000000000
for %lf and 0x7fff:c000000000000000 for %Lf. The host scanners keep the
sign. The sscanf_s scanner now rewrites a stored NaN, ten bytes for %Lf.
Co-Authored-By: Claude Opus 5.5 <[email protected]>