--- ./util.cpp.orig	2012-01-31 13:20:15.000000000 +0800
+++ ./util.cpp	2012-02-04 14:47:01.272126566 +0800
@@ -371,7 +371,7 @@ void box_warn(char *fmt,...)
   GtkWidget *dialog = gtk_message_dialog_new (NULL, GTK_DIALOG_MODAL,
                                    GTK_MESSAGE_ERROR,
                                    GTK_BUTTONS_CLOSE,
-                                   out);
+                                    "%s", out);
   gtk_dialog_run (GTK_DIALOG (dialog));
   gtk_widget_destroy (dialog);
 }