fix build with -Wformat-security