--- glibc-2.16.0/sunrpc/rpc_hout.c.orig	2012-06-30 21:12:34.000000000 +0200
+++ glibc-2.16.0/sunrpc/rpc_hout.c	2012-11-05 19:35:07.650720620 +0100
@@ -579,7 +579,7 @@ pdeclaration (const char *name, declarat
 	  break;
 	}
     }
-  f_print (fout, separator);
+  f_print (fout, "%s", separator);
 }
 
 static int
--- glibc-2.16.0/sunrpc/rpc_main.c.orig	2012-11-05 19:29:09.910752451 +0100
+++ glibc-2.16.0/sunrpc/rpc_main.c	2012-11-05 19:35:49.249302261 +0100
@@ -647,7 +647,7 @@ h_output (const char *infile, const char
     }
   else if (tblflag)
     {
-      fprintf (fout, rpcgen_table_dcl);
+      fprintf (fout, "%s", rpcgen_table_dcl);
     }
 
   if (Cflag)
--- glibc-2.16.0/sunrpc/rpc_svcout.c.orig	2012-11-05 19:45:54.353824657 +0100
+++ glibc-2.16.0/sunrpc/rpc_svcout.c	2012-11-05 19:45:22.272347802 +0100
@@ -353,7 +353,7 @@ write_real_program (const definition * d
 	      f_print (fout, " (");
 	      /* arg name */
 	      if (proc->arg_num > 1)
-		f_print (fout, proc->args.argname);
+		f_print (fout, "%s", proc->args.argname);
 	      else
 		ptype (proc->args.decls->decl.prefix,
 		       proc->args.decls->decl.type, 0);