diff -p -up libcroco-0.6.2/src/cr-statement.c~ libcroco-0.6.2/src/cr-statement.c
--- libcroco-0.6.2/src/cr-statement.c~	2009-02-04 10:33:45.000000000 +0100
+++ libcroco-0.6.2/src/cr-statement.c	2009-02-04 12:13:19.000000000 +0100
@@ -2611,7 +2611,7 @@ cr_statement_dump_ruleset (CRStatement c
         g_return_if_fail (a_fp && a_this);
         str = cr_statement_ruleset_to_string (a_this, a_indent);
         if (str) {
-                fprintf (a_fp, str);
+                fprintf (a_fp, "%s", str);
                 g_free (str);
                 str = NULL;
         }
@@ -2662,7 +2662,7 @@ cr_statement_dump_charset (CRStatement c
         str = cr_statement_charset_to_string (a_this,
                                               a_indent) ;
         if (str) {
-                fprintf (a_fp, str) ;
+                fprintf (a_fp, "%s", str) ;
                 g_free (str) ;
                 str = NULL ;
         }
@@ -2689,7 +2689,7 @@ cr_statement_dump_page (CRStatement cons
 
         str = cr_statement_at_page_rule_to_string (a_this, a_indent) ;
         if (str) {
-                fprintf (a_fp, str);
+                fprintf (a_fp, "%s", str);
                 g_free (str) ;
                 str = NULL ; 
         }
@@ -2715,7 +2715,7 @@ cr_statement_dump_media_rule (CRStatemen
 
         str = cr_statement_media_rule_to_string (a_this, a_indent) ;
         if (str) {
-                fprintf (a_fp, str) ;
+                fprintf (a_fp, "%s", str) ;
                 g_free (str) ;
                 str = NULL ;
         }
@@ -2741,7 +2741,7 @@ cr_statement_dump_import_rule (CRStateme
 
         str = cr_statement_import_rule_to_string (a_this, a_indent) ;
         if (str) {
-                fprintf (a_fp, str) ;
+                fprintf (a_fp, "%s", str) ;
                 g_free (str) ;
                 str = NULL ;
         }
diff -p -up libcroco-0.6.2/tests/test2-main.c~ libcroco-0.6.2/tests/test2-main.c
--- libcroco-0.6.2/tests/test2-main.c~	2009-02-04 11:25:37.000000000 +0100
+++ libcroco-0.6.2/tests/test2-main.c	2009-02-04 12:14:36.000000000 +0100
@@ -130,7 +130,7 @@ test_import_style (CRDocHandler * a_hand
                                          ((CRString *) cur->data)->stryng->len);
 
                                 if (str) {
-                                        fprintf (stdout, str);
+                                        fprintf (stdout, "%s", str);
                                         fprintf (stdout, "\n");
                                         g_free (str);
                                         str = NULL;
@@ -145,7 +145,7 @@ test_import_style (CRDocHandler * a_hand
                         guchar *str = cr_string_dup2 
                                 (a_uri_default_ns) ;
                         if (str) {
-                                fprintf (stdout, str);
+                                fprintf (stdout, "%s", str);
                                 fprintf (stdout, "\n");
                                 g_free (str);
                                 str = NULL;
@@ -270,7 +270,7 @@ test_property (CRDocHandler * a_handler,
                          a_name->stryng->len);
 
                 if (name) {
-                        fprintf (stdout, name);
+                        fprintf (stdout, "%s", name);
                 }
                 if (a_expr) {
                         fprintf (stdout, ": ");
diff -p -up libcroco-0.6.2/tests/test3-main.c~ libcroco-0.6.2/tests/test3-main.c
--- libcroco-0.6.2/tests/test3-main.c~	2009-02-04 11:25:37.000000000 +0100
+++ libcroco-0.6.2/tests/test3-main.c	2009-02-04 12:15:17.000000000 +0100
@@ -123,7 +123,7 @@ test_import_style (CRDocHandler * a_hand
                                 guchar *str =
                                         cr_string_dup2 ((CRString *) cur->data);
                                 if (str) {
-                                        fprintf (stdout, str);
+                                        fprintf (stdout, "%s", str);
                                         fprintf (stdout, "\n");
                                         g_free (str);
                                         str = NULL;
@@ -136,7 +136,7 @@ test_import_style (CRDocHandler * a_hand
                 if (a_uri_default_ns) {
                         guchar *str = cr_string_dup2 (a_uri_default_ns) ;
                         if (str) {
-                                fprintf (stdout, str);
+                                fprintf (stdout, "%s", str);
                                 fprintf (stdout, "\n");
                                 g_free (str);
                                 str = NULL;
@@ -255,7 +255,7 @@ test_property (CRDocHandler * a_handler,
         if (a_name) {
                 guchar *name = cr_string_dup2  (a_name);
                 if (name) {
-                        fprintf (stdout, name);
+                        fprintf (stdout, "%s", name);
                 }
                 if (a_expr) {
                         fprintf (stdout, ": ");