--- ntpq/ntpq.c	2009-01-08 10:05:43.000000000 +0100
+++ ntpq/ntpq.c.oden	2009-04-11 19:56:01.000000000 +0200
@@ -3185,9 +3185,9 @@ cookedprint(
 				if (!decodeuint(value, &uval))
 				    output_raw = '?';
 				else {
-					char b[10];
+					char b[12];
 
-					(void) sprintf(b, "%03lo", uval);
+					(void) snprintf(b, sizeof b, "%03lo", uval);
 					output(fp, name, b);
 				}
 				break;