$OpenBSD: patch-wcmgr_c,v 1.1 2011/01/05 08:19:18 giovanni Exp $ --- wcmgr.c.orig Mon Jan 3 11:50:52 2011 +++ wcmgr.c Mon Jan 3 11:51:29 2011 @@ -196,7 +196,7 @@ const char *ttl_age(time_t now, time_t then) mins=age/60; /* format the string */ - sprintf(our_buffer,"%02dd:%02dh:%02dm",days, hours, mins); + snprintf(our_buffer, sizeof(our_buffer), "%02dd:%02dh:%02dm",days, hours, mins); /* and return to caller */ return our_buffer; @@ -407,7 +407,7 @@ void purge_cache() /* generate output filename */ memset(out_file, 0, sizeof(out_file)); - sprintf(out_file, "%s.new", in_file); + snprintf(out_file, sizeof(out_file), "%s.new", in_file); /* open the output database (read-write) */ if ((i=out_db->open(out_db, NULL, out_file, NULL,