--- src/libmirage/mirage-error.c~	2009-07-26 01:01:03.000000000 +0200
+++ src/libmirage/mirage-error.c	2009-12-03 13:58:13.000000000 +0100
@@ -135,13 +135,13 @@
     gint i;
     for (i = 0; i < G_N_ELEMENTS(errors); i++) {
         if (errors[i].errcode == errcode) {
-            g_set_error(error, MIRAGE_ERROR, errors[i].errcode, errors[i].errstring);
+            g_set_error(error, MIRAGE_ERROR, errors[i].errcode, "%s", errors[i].errstring);
             return;
         }
     }
     
     /* Generic error */
-    g_set_error(error, MIRAGE_ERROR, errors[i-1].errcode, errors[i-1].errstring);
+    g_set_error(error, MIRAGE_ERROR, errors[i-1].errcode, "%s", errors[i-1].errstring);
     
     return;
 }
--- src/parsers/image-mds/image-mds-parser.c~	2009-07-26 01:00:34.000000000 +0200
+++ src/parsers/image-mds/image-mds-parser.c	2009-12-03 13:59:43.000000000 +0100
@@ -90,7 +90,7 @@
         /* Use MDS filename and replace its extension with the one of the data file */
         bin_filename = g_strdup(mds_filename);
         len = strlen(bin_filename);
-        sprintf(bin_filename+len-3, ext);
+        sprintf(bin_filename+len-3, "%s", ext);
     } else {
         bin_filename = g_strdup(declared_filename);
     }