diff --git a/lib/ftp.c b/lib/ftp.c
index 74a73ac66..729d70eb1 100644
--- a/lib/ftp.c
+++ b/lib/ftp.c
@@ -442,10 +442,6 @@ CURLcode Curl_GetFTPResponse(ssize_t *nreadp, /* return number of bytes read */
   return result;
 }
 
-static const char *ftpauth[]= {
-  "SSL", "TLS", NULL
-};
-
 /*
  * Curl_ftp_connect() should do everything that is to be considered a part of
  * the connection phase.
@@ -459,6 +455,9 @@ CURLcode Curl_ftp_connect(struct connectdata *conn)
   struct FTP *ftp;
   CURLcode result;
   int ftpcode, trynum;
+  static const char * const ftpauth[]  = {
+    "SSL", "TLS", NULL
+  };
 
   ftp = (struct FTP *)malloc(sizeof(struct FTP));
   if(!ftp)
diff --git a/lib/security.c b/lib/security.c
index f34729b55..64c55b3ba 100644
--- a/lib/security.c
+++ b/lib/security.c
@@ -85,7 +85,7 @@ name_to_level(const char *name)
   return (enum protection_level)-1;
 }
 
-static const struct Curl_sec_client_mech *mechs[] = {
+static const struct Curl_sec_client_mech * const mechs[] = {
 #ifdef KRB5
   /* not supported */
 #endif
@@ -400,7 +400,7 @@ int
 Curl_sec_login(struct connectdata *conn)
 {
   int ret;
-  const struct Curl_sec_client_mech **m;
+  const struct Curl_sec_client_mech * const *m;
   ssize_t nread;
   struct SessionHandle *data=conn->data;
   int ftpcode;