The "spam" ACL condition code contained a sscanf() call with a %s