--- log_accum.pl	2008-05-15 18:27:38.000000000 +0000
+++ ../log_accum.pl	2009-03-29 19:51:03.000000000 +0000
@@ -802,7 +802,10 @@
     $dir = "." if $dir eq "";
 
     my $format = "\t%-";
-    $format .= sprintf "%d", length ($dir) > 15 ? length ($dir) : 15;
+    my $len_format = sprintf "%d", length ($dir) > 15 ? length ($dir) : 15;
+    # untaint len_format (because of $dir)
+    $len_format = $& if ($len_format =~ /^\d+$/);
+    $format .= $len_format;
     $format .= "s%s ";
 
     $lines[0] = sprintf $format, $dir, ":";