Index: b/lib/psgen.c

===================================================================

--- a/lib/psgen.c

+++ b/lib/psgen.c

@@ -232,7 +232,7 @@

     default:

       *buf = '\0';

       ps_escape_char (job, cp[i], buf);

-      output (jdiv, (char *) buf);

+      output (jdiv, "%s", (char *) buf);

       break;

     }

   }

Index: b/lib/output.c

===================================================================

--- a/lib/output.c

+++ b/lib/output.c

@@ -525,7 +525,7 @@

 		     expand_user_string (job, FIRST_FILE (job),

 					 (const uchar *) "Expand: requirement",

 					 (const uchar *) token));

-	output (dest, expansion);

+	output (dest, "%s", expansion);

 	continue;

       }

Index: b/lib/parseppd.y

===================================================================

--- a/lib/parseppd.y

+++ b/lib/parseppd.y

@@ -154,7 +154,7 @@

 void

 yyerror (const char *msg)

 {

-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);

+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);

 }

 /*

Index: b/src/parsessh.y

===================================================================

--- a/src/parsessh.y

+++ b/src/parsessh.y

@@ -740,7 +740,7 @@

 void

 yyerror (const char *msg)

 {

-  error_at_line (1, 0, sshfilename, sshlineno, msg);

+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);

 }

 /*

Index: b/lib/parseppd.c

===================================================================

--- a/lib/parseppd.c

+++ b/lib/parseppd.c

@@ -1707,7 +1707,7 @@

 void

 yyerror (const char *msg)

 {

-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);

+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);

 }

 /*

Index: b/src/parsessh.c

===================================================================

--- a/src/parsessh.c

+++ b/src/parsessh.c

@@ -2639,7 +2639,7 @@

 void

 yyerror (const char *msg)

 {

-  error_at_line (1, 0, sshfilename, sshlineno, msg);

+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);

 }

 /*