The sscanf issue was not obvious: it looks linear. And should be, on a better sscanf implementation.

The duplicate checking on the other hand is a classic "accidentally quadratic" case that is obvious.