faac: fix format security issue