compose.c: fix untrusted source issue