format string vulnerability protection bypass in libsafe

Not all of possible converion flags are processed...