--- ./whois.c.org Sun Jun 15 18:36:52 2003 +++ ./whois.c Thu Sep 4 16:06:57 2003 @@ -78,7 +78,7 @@ } if (strchr(ripeflagsp, ch)) { for (p = fstring; *p; p++); - sprintf(p--, "-%c %s ", ch, optarg); + snprintf(p--, sizeof(fstring), "-%c %s ", ch, optarg); if (ch == 't' || ch == 'v' || ch == 'q') nopar = 1; continue;