Be safer about "%" in message formats

* lisp/calc/calc-store.el (calc-copy-special-constant):
* lisp/net/rcirc.el (rcirc-handler-PART, rcirc-handler-KICK):
* lisp/org/org-agenda.el (org-agenda):
* lisp/org/org-clock.el (org-clock-out, org-clock-display):
* lisp/org/org.el (org-refile):
* lisp/progmodes/ada-xref.el (ada-goto-declaration):
* lisp/progmodes/idlwave.el (idlwave-scan-library-catalogs):
Don’t trust arbitrary strings to not contain "%" or "`" in
(message (concat STRING1 STRING2 ...)).

3 files changed, 20 insertions, 18 deletions

diff --git a/lisp/org/org-agenda.el b/lisp/org/org-agenda.el
index e416f5f062a..23ee8d71e66 100644
--- a/lisp/org/org-agenda.el
+++ b/lisp/org/org-agenda.el
@@ -2882,13 +2882,12 @@ Pressing `<' twice means to restrict to the current subtree or region
              (let* ((m (org-agenda-get-any-marker))
                     (note (and m (org-entry-get m "THEFLAGGINGNOTE"))))
                (when note
-                 (message (concat
-                           "FLAGGING-NOTE ([?] for more info): "
-                           (org-add-props
-                               (replace-regexp-in-string
-                                "\\\\n" "//"
-                                (copy-sequence note))
-                               nil 'face 'org-warning)))))))
+                 (message "FLAGGING-NOTE ([?] for more info): %s"
+                          (org-add-props
+                           (replace-regexp-in-string
+                            "\\\\n" "//"
+                            (copy-sequence note))
+                           nil 'face 'org-warning))))))
          t t))
        ((equal org-keys "#") (call-interactively 'org-agenda-list-stuck-projects))
        ((equal org-keys "/") (call-interactively 'org-occur-in-agenda-files))
diff --git a/lisp/org/org-clock.el b/lisp/org/org-clock.el
index 34b694d4879..62c7cd92d12 100644
--- a/lisp/org/org-clock.el
+++ b/lisp/org/org-clock.el
@@ -1622,9 +1622,10 @@ to, overriding the existing value of `org-clock-out-switch-to-state'."
                                                 "\\>"))))
                   (org-todo org-clock-out-switch-to-state))))))
           (force-mode-line-update)
-          (message (concat "Clock stopped at %s after "
-                           (org-duration-from-minutes (+ (* 60 h) m)) "%s")
-                   te (if remove " => LINE REMOVED" ""))
+          (message (if remove
+                       "Clock stopped at %s after %s => LINE REMOVED"
+                     "Clock stopped at %s after %s")
+                   te (org-duration-from-minutes (+ (* 60 h) m)))
           (run-hooks 'org-clock-out-hook)
           (unless (org-clocking-p)
             (setq org-clock-current-task nil)))))))
@@ -1925,13 +1926,14 @@ Use `\\[org-clock-remove-overlays]' to remove the subtree times."
                     nil 'local))))
     (let* ((h (/ org-clock-file-total-minutes 60))
            (m (- org-clock-file-total-minutes (* 60 h))))
-      (message (concat (format "Total file time%s: "
-                               (cond (todayp " for today")
-                                     (customp " (custom)")
-                                     (t "")))
-                       (org-duration-from-minutes
-                        org-clock-file-total-minutes)
-                       " (%d hours and %d minutes)")
+      (message (cond
+                (todayp
+                 "Total file time for today: %s (%d hours and %d minutes)")
+                (customp
+                 "Total file time (custom): %s (%d hours and %d minutes)")
+                (t
+                 "Total file time: %s (%d hours and %d minutes)"))
+               (org-duration-from-minutes org-clock-file-total-minutes)
                h m))))
 
 (defvar-local org-clock-overlays nil)
diff --git a/lisp/org/org.el b/lisp/org/org.el
index 3a434d12dfd..e3c78ae90d4 100644
--- a/lisp/org/org.el
+++ b/lisp/org/org.el
@@ -11878,7 +11878,8 @@ prefix argument (`C-u C-u C-u C-c C-w')."
             (when (featurep 'org-inlinetask)
               (org-inlinetask-remove-END-maybe))
             (setq org-markers-to-move nil)
-            (message (concat actionmsg " to \"%s\" in file %s: done") (car it) file)))))))
+            (message "%s to \"%s\" in file %s: done" actionmsg
+                     (car it) file)))))))
 
 (defun org-refile-goto-last-stored ()
   "Go to the location where the last refile was stored."