$OpenBSD: patch-urlmatch_c,v 1.2 2003/04/01 20:52:59 sturm Exp $
--- urlmatch.c.orig	Fri Feb 28 08:09:29 2003
+++ urlmatch.c	Sat Mar 29 18:17:03 2003
@@ -686,7 +686,7 @@ jb_err create_url_spec(struct url_spec *
          return JB_ERR_MEMORY;
       }
 
-      sprintf(rebuf, "^(%s)", url->path);
+      snprintf(rebuf, sizeof(rebuf), "^(%s)", url->path);
 
       errcode = regcomp(url->preg, rebuf,
             (REG_EXTENDED|REG_NOSUB|REG_ICASE));