--- src/ftpcmd.y.orig   Wed Oct 13 11:15:28 1999
+++ src/ftpcmd.y        Fri Jun 30 11:42:40 2000
@@ -1926,13 +1926,13 @@
       }
       if (!maxfound)
           maxlines = defmaxlines;
-       lreply(200, cmd);
+       lreply(200, "%s", cmd);
       while (fgets(buf, sizeof buf, cmdf)) {
           size_t len = strlen(buf);

           if (len > 0 && buf[len - 1] == '\n')
               buf[--len] = '\0';
-           lreply(200, buf);
+           lreply(200, "%s", buf);
           if (maxlines <= 0)
               ++lines;
           else if (++lines >= maxlines) {
--- src/ftpd.c.orig     Thu Oct 14 10:41:47 1999
+++ src/ftpd.c  Fri Jun 30 11:42:40 2000
@@ -3156,7 +3156,7 @@
       reply(230, "User %s logged in.%s", pw->pw_name, guest ?
             "  Access restrictions apply." : "");
       sprintf(proctitle, "%s: %s", remotehost, pw->pw_name);
-       setproctitle(proctitle);
+       setproctitle("%s", proctitle);
       if (logging)
           syslog(LOG_INFO, "FTP LOGIN FROM %s, %s", remoteident, pw->pw_name);
/* H* mod: if non-anonymous user, copy it to "authuser" so everyone can
@@ -5888,7 +5888,7 @@

    remotehost[sizeof(remotehost) - 1] = '\0';
    sprintf(proctitle, "%s: connected", remotehost);
-    setproctitle(proctitle);
+    setproctitle("%s", proctitle);

    wu_authenticate();
/* Create a composite source identification string, to improve the logging