--- ./whois.c.orig 2003-06-15 09:36:52.000000000 -0700 +++ ./whois.c 2003-08-28 14:25:17.000000000 -0700 @@ -78,7 +78,7 @@ } if (strchr(ripeflagsp, ch)) { for (p = fstring; *p; p++); - sprintf(p--, "-%c %s ", ch, optarg); + snprintf(p--, sizeof(fstring), "-%c %s ", ch, optarg); if (ch == 't' || ch == 'v' || ch == 'q') nopar = 1; continue;