--- whois.c 2003-07-20 12:15:03.000000000 +0200 +++ whois.patch.c 2003-07-20 12:15:21.000000000 +0200 @@ -78,7 +78,7 @@ int main(int argc, char *argv[]) } if (strchr(ripeflagsp, ch)) { for (p = fstring; *p; p++); - sprintf(p--, "-%c %s ", ch, optarg); + snprintf(p--, sizeof(fstring), "-%c %s ", ch, optarg); if (ch == 't' || ch == 'v' || ch == 'q') nopar = 1; continue;