Ray Chason - 2012-04-04

The expected string is "% a piece of food (corpse)". Note that it begins with "%<spaces>a". In C99 this is a valid printf formatter (if your printf isn't picky about the space character appearing more than once), and formats a floating point number as hex, in the way that the bug description shows.

The bug occurs in win/curses/cursmesg.c in two lines where an arbitrary string is passed as the format string to mvwprintw. These should be calls to mvwaddstr.