--- src/input.c~	2008-12-20 10:53:33.000000000 -0600
+++ src/input.c	2014-02-10 12:40:11.453063333 -0600
@@ -1053,7 +1053,7 @@
 
 			msg = calibrate_joystick_name (0);
 
-			textprintf_centre_ex (screen, font, 320, 170, -1, -1, msg);
+			textprintf_centre_ex (screen, font, 320, 170, -1, -1, "%s", msg);
 			textprintf_centre_ex (screen, font, 320, 200, -1, -1, "AND PRESS SPACE");
 
 			do
--- src/menu.c~	2010-03-05 15:39:32.000000000 -0600
+++ src/menu.c	2014-02-10 12:46:45.951074196 -0600
@@ -632,7 +632,7 @@
 	rectfill (display, 210, 200, 430, 250, COL_OUTLINE);
 	rect (display, 211, 201, 429, 249, COL_COL1);
 
-	textprintf_centre_ex (display, font, 320, 222, -1, -1, ktext);
+	textprintf_centre_ex (display, font, 320, 222, -1, -1, "%s", ktext);
 
 	vsync ();
 	blit (display, screen, 0, 0, 0, 0, 640, 480);
--- src/stuff.c~	2008-12-19 16:33:26.000000000 -0600
+++ src/stuff.c	2014-02-10 12:53:22.942085128 -0600
@@ -199,7 +199,7 @@
 void error_message_out (const char *errm)
 {
 	set_gfx_mode (GFX_TEXT, 0, 0, 0, 0);
-	allegro_message (errm);
+	allegro_message ("%s", errm);
 	exit (1);
 }