--- mozilla/js/src/xpconnect/shell/xpcshell.cpp.str	2008-12-31 09:50:25.000000000 -0500
+++ mozilla/js/src/xpconnect/shell/xpcshell.cpp	2008-12-31 09:50:47.000000000 -0500
@@ -542,7 +542,7 @@
 #endif
     {
         char line[256];
-        fprintf(gOutFile, prompt);
+        fprintf(gOutFile, "%s", prompt);
         fflush(gOutFile);
         if (!fgets(line, sizeof line, file))
             return JS_FALSE;
--- mozilla/gfx/src/ps/nsType1.cpp.str	2008-12-31 10:01:14.000000000 -0500
+++ mozilla/gfx/src/ps/nsType1.cpp	2008-12-31 10:01:36.000000000 -0500
@@ -708,7 +708,7 @@
   const static char sixtyFourZeros[] =  
       "0000000000000000000000000000000000000000000000000000000000000000\n";
   for (i = 0; i < 8; i++) 
-    fprintf(aFile, sixtyFourZeros);
+    fprintf(aFile, "%s", sixtyFourZeros);
 
   fprintf(aFile, "cleartomark\n%%%%EndResource\n"); 
 
--- mozilla/widget/src/gtk2/nsFilePicker.cpp.str	2008-12-31 10:07:33.000000000 -0500
+++ mozilla/widget/src/gtk2/nsFilePicker.cpp	2008-12-31 10:07:50.000000000 -0500
@@ -480,6 +480,7 @@
                                   GTK_DIALOG_DESTROY_WITH_PARENT,
                                   GTK_MESSAGE_QUESTION,
                                   GTK_BUTTONS_YES_NO,
+				  "%s",
                                   NS_ConvertUTF16toUTF8(message).get());
   gtk_window_set_title(GTK_WINDOW(dialog), NS_ConvertUTF16toUTF8(title).get());
   if (parent_window && parent_window->group) {