fix some -Wformat-security warnings for gcc