This fixes two minor security problems.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>