format string security

Fix FTBFS when building with hardening flags as used by dpkg 1.16.0.
Note that this was a *false positive* by the compiler: there was
in fact no security issue. However we will work around it anyway.

Bug-Debian: http://bugs.debian.org/643461