revert format()'s behavior of crashing on error