--- ntpq/ntpq.c 2009-01-08 10:05:43.000000000 +0100 +++ ntpq/ntpq.c.oden 2009-04-11 19:56:01.000000000 +0200 @@ -3185,9 +3185,9 @@ cookedprint( if (!decodeuint(value, &uval)) output_raw = '?'; else { - char b[10]; + char b[12]; - (void) sprintf(b, "%03lo", uval); + (void) snprintf(b, sizeof b, "%03lo", uval); output(fp, name, b); } break;