diff -p -up alsaplayer-0.99.80/interface/gtk2/gtk_interface.cpp.strfmt alsaplayer-0.99.80/interface/gtk2/gtk_interface.cpp
--- alsaplayer-0.99.80/interface/gtk2/gtk_interface.cpp.strfmt	2007-10-29 20:49:48.000000000 +0100
+++ alsaplayer-0.99.80/interface/gtk2/gtk_interface.cpp	2009-06-16 16:57:41.000000000 +0200
@@ -248,7 +248,7 @@ void ap_message_error(GtkWidget *parent,
 
 	md = gtk_message_dialog_new(GTK_WINDOW(parent), GTK_DIALOG_DESTROY_WITH_PARENT, GTK_MESSAGE_ERROR, GTK_BUTTONS_CLOSE, _("Error !"));
 		
-	gtk_message_dialog_format_secondary_text(GTK_MESSAGE_DIALOG(md), message);
+	gtk_message_dialog_format_secondary_text(GTK_MESSAGE_DIALOG(md), "%s", message);
 	
 	g_signal_connect(G_OBJECT(md), "delete-event", G_CALLBACK(ap_message_delete), NULL);
 	g_signal_connect(G_OBJECT(md), "response", G_CALLBACK(ap_message_delete), NULL);
@@ -262,7 +262,7 @@ void ap_message_warning(GtkWidget *paren
 	
 	md = gtk_message_dialog_new(GTK_WINDOW(parent), GTK_DIALOG_DESTROY_WITH_PARENT, GTK_MESSAGE_WARNING, GTK_BUTTONS_CLOSE, _("Warning !"));
 	
-	gtk_message_dialog_format_secondary_text(GTK_MESSAGE_DIALOG(md), message);
+	gtk_message_dialog_format_secondary_text(GTK_MESSAGE_DIALOG(md), "%s", message);
 
 	g_signal_connect(G_OBJECT(md), "delete-event", G_CALLBACK(ap_message_delete), NULL);	
 	g_signal_connect(G_OBJECT(md), "response", G_CALLBACK(ap_message_delete), NULL);
@@ -276,7 +276,7 @@ gboolean ap_message_question(GtkWidget *
 	
 	md = gtk_message_dialog_new(GTK_WINDOW(parent), (GtkDialogFlags) (GTK_DIALOG_MODAL|GTK_DIALOG_DESTROY_WITH_PARENT), GTK_MESSAGE_QUESTION, GTK_BUTTONS_YES_NO, _("Excuse me !"));
 	
-	gtk_message_dialog_format_secondary_text(GTK_MESSAGE_DIALOG(md), message);	
+	gtk_message_dialog_format_secondary_text(GTK_MESSAGE_DIALOG(md), "%s", message);	
 
 	g_signal_connect(G_OBJECT(md), "delete-event", G_CALLBACK(ap_message_delete), NULL);
 	
diff -p -up alsaplayer-0.99.80/libalsaplayer/message.c.strfmt alsaplayer-0.99.80/libalsaplayer/message.c
--- alsaplayer-0.99.80/libalsaplayer/message.c.strfmt	2009-06-16 16:58:36.000000000 +0200
+++ alsaplayer-0.99.80/libalsaplayer/message.c	2009-06-16 17:00:19.000000000 +0200
@@ -381,7 +381,7 @@ int ap_find_session(char *session_name, 
 
 	pwd = getpwuid(geteuid());
 
-	sprintf(username, pwd == NULL ? "anonymous" : pwd->pw_name);
+	sprintf(username, "%s", pwd == NULL ? "anonymous" : pwd->pw_name);
 
 	sprintf(test_path, "alsaplayer_%s_", username);