--- cdparanoia-III-10.2/main.c.orig	2009-02-15 12:56:13.000000000 +0000
+++ cdparanoia-III-10.2/main.c	2009-02-15 12:56:47.000000000 +0000
@@ -588,10 +588,10 @@
 	    buffer[aheadposition+19]='>';
 	}
    
-	fprintf(stderr,buffer);
+	fprintf(stderr,"%s",buffer);
        
 	if (logfile != NULL && function==-1) {
-	  fprintf(logfile,buffer+1);
+	  fprintf(logfile,"%s",buffer+1);
 	  fprintf(logfile,"\n\n");
 	  fflush(logfile);
 	}