add comment about lack of _chsize_s()