Index: src/sendmsg.c===================================================================--- src/sendmsg.c+++ src/sendmsg.c 2010-02-24 10:24:11.000000000 +0100@@ -333,7 +333,7 @@ /* mark current tty as active for receiving */ if ((outf=rfopen(msgcf,"w"))) {- fprintf(outf,tty);+ fprintf(outf,"%s", tty); fclose(outf); }Index: src/receive.c===================================================================--- src/receive.c+++ src/receive.c 2010-02-24 10:26:50.000000000 +0100@@ -968,7 +968,7 @@ /* loop over all files in tar archive */ while (fgetl(line,pp)) { /* convert tar file name with escaped chars */- sprintf(fname,line);+ sprintf(fname, "%s", line); /* does the file already exist? */ if ((cp=strchr(fname,'\n'))) *cp=0;