Sanitize vcoreid from untrusted sources