Petr Šabata posted a patch a few years ago to fix the build with GCC's format-string security errors enabled: https://www.spinics.net/lists/dash/msg00869.html We're still carrying that patch in Gentoo so I wanted to bring it up again. I guess it just got lost?