--- src/util.c.orig	Sun Nov 14 15:48:13 2004
+++ src/util.c	Sun Nov 14 15:48:22 2004
@@ -273,7 +273,7 @@
 			case 'S': /* check and turn into 's' */
 				ss = va_arg(p, char *);
 				if (!is_shell_safe(ss, (s[1] == 'Q')))
-					return NOT_SAFE;
+					return my_strdup(NOT_SAFE);
 				len += strlen(ss);
 				s[1] = 's';
 				break;