--- comm-1.9.2/mozilla/js/src/xpconnect/shell/xpcshell.cpp.str	2010-06-10 22:23:04.000000000 +0200
+++ comm-1.9.2/mozilla/js/src/xpconnect/shell/xpcshell.cpp	2010-07-22 09:29:44.000000000 +0200
@@ -267,7 +267,7 @@
 #endif
     {
         char line[256];
-        fprintf(gOutFile, prompt);
+        fprintf(gOutFile, "%s", prompt);
         fflush(gOutFile);
         if (!fgets(line, sizeof line, file))
             return JS_FALSE;
--- comm-1.9.2/mozilla/js/src/xpconnect/tests/TestXPC.cpp.str	2010-06-10 22:23:05.000000000 +0200
+++ comm-1.9.2/mozilla/js/src/xpconnect/tests/TestXPC.cpp	2010-07-22 10:25:10.000000000 +0200
@@ -130,7 +130,7 @@
 static void
 my_ErrorReporter(JSContext *cx, const char *message, JSErrorReport *report)
 {
-    printf(message);
+    printf("%s", message);
 }
 
 /***************************************************************************/
@@ -304,7 +304,7 @@
 EvaluateScript(JSContext* jscontext, JSObject* glob, MySecMan* sm, MySecMan::Mode mode, const char* msg, const char* t, jsval &rval)
 {
     sm->SetMode(mode);
-    printf(msg);
+    printf("%s",msg);
     JSAutoRequest ar(jscontext);
     JS_EvaluateScript(jscontext, glob, t, strlen(t), "builtin", 1, &rval);
 }
@@ -607,7 +607,7 @@
             rv = e->ToString(&str);
             if(NS_SUCCEEDED(rv) && str)
             {
-                printf(str);
+                printf("%s", str);
                 printf("\n");
                 nsMemory::Free(str);
 
--- comm-1.9.2/mozilla/js/src/xpconnect/tests/components/xpctest_echo.cpp.str	2010-06-10 22:23:05.000000000 +0200
+++ comm-1.9.2/mozilla/js/src/xpconnect/tests/components/xpctest_echo.cpp	2010-07-22 09:29:44.000000000 +0200
@@ -483,7 +483,7 @@
         else if (JSVAL_IS_VOID(argv[i]))
             type = "void";
 
-        printf(type);
+        printf("%s", type);
 
         if(i < argc-1)
             printf(", ");
--- comm-1.9.2/mozilla/widget/src/gtk2/nsFilePicker.cpp.str	2010-06-10 22:23:54.000000000 +0200
+++ comm-1.9.2/mozilla/widget/src/gtk2/nsFilePicker.cpp	2010-07-22 09:29:44.000000000 +0200
@@ -407,6 +407,7 @@
                                   GTK_DIALOG_DESTROY_WITH_PARENT,
                                   GTK_MESSAGE_QUESTION,
                                   GTK_BUTTONS_YES_NO,
+				  "%s",
                                   NS_ConvertUTF16toUTF8(message).get());
   gtk_window_set_title(GTK_WINDOW(dialog), NS_ConvertUTF16toUTF8(title).get());
   if (parent_window && parent_window->group) {
--- comm-1.9.2/mozilla/xpcom/base/nsTraceRefcntImpl.cpp.str	2010-06-10 22:23:55.000000000 +0200
+++ comm-1.9.2/mozilla/xpcom/base/nsTraceRefcntImpl.cpp	2010-07-22 09:29:44.000000000 +0200
@@ -872,7 +872,7 @@
 
   NS_DescribeCodeAddress(aPC, &details);
   NS_FormatCodeAddressDetails(aPC, &details, buf, sizeof(buf));
-  fprintf(stream, buf);
+  fprintf(stream, "%s", buf);
 }
 
 }