--- isdn4k-utils-CVS-2010-05-01-patched/isdnlog/isdnlog/asn1_address.c	2006-01-15 10:08:55.000000000 -0500
+++ isdn4k-utils-CVS-2010-05-01-patched.new/isdnlog/isdnlog/asn1_address.c	2014-01-28 16:59:10.588350961 -0500
@@ -160,7 +160,7 @@
 	XSEQUENCE_1(ParsePartyNumber, ASN1_NOT_TAGGED, ASN1_NOT_TAGGED, partyNumber);
 	XSEQUENCE_OPT_1(ParsePartySubaddress, ASN1_NOT_TAGGED, ASN1_NOT_TAGGED, partySubaddress);
 
-	str += sprintf(str, partyNumber);
+	str += sprintf(str, "%s", partyNumber);
 	if (strlen(partySubaddress))
 		str += sprintf(str, ".%s", partySubaddress);
 
@@ -191,13 +191,13 @@
 	
 	switch (publicTypeOfNumber) {
 	case 0: break; // unknown
-	case 1: str += sprintf(str, countryprefix); break;
-	case 2: str += sprintf(str, areaprefix); break;
+	case 1: str += sprintf(str, "%s", countryprefix); break;
+	case 2: str += sprintf(str, "%s", areaprefix); break;
 	case 3: str += sprintf(str, "(network)"); break;
 	case 4: str += sprintf(str, "(MSN)"); break;
 	case 6: str += sprintf(str, "(abbrev)"); break;
 	}
-	str += sprintf(str, numberDigits);
+	str += sprintf(str, "%s", numberDigits);
 
 	return p - beg;
 }
@@ -219,7 +219,7 @@
 	case 4: str += sprintf(str, "(local)"); break;
 	case 6: str += sprintf(str, "(abbrev)"); break;
 	}
-	str += sprintf(str, numberDigits);
+	str += sprintf(str, "%s", numberDigits);
 
 	return p - beg;
 }
--- isdn4k-utils-CVS-2010-05-01-patched/isdnlog/isdnrep/isdnbill.c	2009-10-20 05:07:28.000000000 -0400
+++ isdn4k-utils-CVS-2010-05-01-patched.new/isdnlog/isdnrep/isdnbill.c	2014-01-28 17:16:00.533957441 -0500
@@ -271,8 +271,7 @@
   memset(s, c, len);
   s[len] = 0;
 
-  printf(s);
-  printf("\n");
+  printf("%s\n", s);
 } /* strich */