ntpq.c.patch   [plain text]

--- ntpq/ntpq.c~	2006-06-06 13:17:02.000000000 -0700
+++ ntpq/ntpq.c	2008-02-06 12:12:22.000000000 -0800
@@ -3140,9 +3140,9 @@ cookedprint(
 				if (!decodeuint(value, &uval))
 				    output_raw = '?';
 				else {
-					char b[10];
+					char b[12];
 
-					(void) sprintf(b, "%03lo", uval);
+					(void) snprintf(b, sizeof(b), "%03lo", uval);
 					output(fp, name, b);
 				}
 				break;