--- ntpq/ntpq.c~ 2006-06-06 13:17:02.000000000 -0700 +++ ntpq/ntpq.c 2008-02-06 12:12:22.000000000 -0800 @@ -3140,9 +3140,9 @@ cookedprint( if (!decodeuint(value, &uval)) output_raw = '?'; else { - char b[10]; + char b[12]; - (void) sprintf(b, "%03lo", uval); + (void) snprintf(b, sizeof(b), "%03lo", uval); output(fp, name, b); } break;