--- src/ex_cmds.c	2007-07-18 16:35:41.000000000 +0300
+++ src/ex_cmds.c	2007-07-18 16:43:44.000000000 +0300
@@ -1607,7 +1607,7 @@
     if (p != NULL)
     {
 	*buf = ' '; /* not really needed? Not with sh, ksh or bash */
-	sprintf((char *)buf + 1, (char *)opt, (char *)fname);
+	sprintf((char *)buf + 1, "%s%s", (char *)opt, (char *)fname);
     }
     else
 	sprintf((char *)buf,
@@ -6375,7 +6375,7 @@
 	    s = ((char_u **)ga.ga_data)[i];
 	    if (STRNCMP(s, "help-tags", 9) == 0)
 		/* help-tags entry was added in formatted form */
-		fprintf(fd_tags, (char *)s);
+		fprintf(fd_tags, "%s", s);
 	    else
 	    {
 		fprintf(fd_tags, "%s\t/*", s);