all: Correct format string security issues