diff --git a/Src/menustats.c b/Src/menustats.c
index 6437847..81f9ad1 100644
--- a/Src/menustats.c
+++ b/Src/menustats.c
@@ -290,7 +290,7 @@ static int download_list() {
 
   clear();
   standout();
-  printw(ALLPINGERSURL);
+  printw("%s", ALLPINGERSURL);
   standend();
 
   mvprintw(3,0,"downloading %s...", ALLPINGERSURL);
diff --git a/Src/pgpget.c b/Src/pgpget.c
index 9ec05f8..3efa74e 100644
--- a/Src/pgpget.c
+++ b/Src/pgpget.c
@@ -442,7 +442,7 @@ static int pgp_3desdecrypt(BUFFER *in, BUFFER *out, BUFFER *key, int mdc)
     memcpy(iv, in->data + 2, 6);
     n = 0;
   }
-  des_ede3_cfb64_encrypt(in->data + 10 + mdc, out->data, in->length - 10 + mdc, &ks1,
+  des_ede3_cfb64_encrypt(in->data + 10 + mdc, out->data, in->length - 10 - mdc, &ks1,
 			 &ks2, &ks3, &iv, &n, DECRYPT);
   if (mdc) {
     if (out->length > 22) {
diff --git a/Src/rem.c b/Src/rem.c
index a2b4675..62fdd47 100644
--- a/Src/rem.c
+++ b/Src/rem.c
@@ -191,7 +191,7 @@ void logmail(char *mailbox, BUFFER *message)
       t = time(NULL);
       tc = localtime(&t);
       strftime(line, LINELEN, "From Mixmaster %a %b %d %H:%M:%S %Y\n", tc);
-      fprintf(mbox, line);
+      fprintf(mbox, "%s", line);
     }
     buf_write(message, mbox);
     fprintf(mbox, "\n\n");
diff --git a/Src/tests/test-parse_yearmonthday.c b/Src/tests/test-parse_yearmonthday.c
index 7e7cfe4..ca6dff4 100644
--- a/Src/tests/test-parse_yearmonthday.c
+++ b/Src/tests/test-parse_yearmonthday.c
@@ -1,5 +1,6 @@
 #include <stdio.h>
 #include <stdlib.h>
+#include <string.h>
 #include <time.h>
 
 #define LINELEN 128