+ fix security issue (do not run uncontrolled format string)