Use snprintf, not sprintf for floating point conversion. While the actual

usage of sprintf here is safe, we'd rather not have the linker warnings.

1 files changed, 4 insertions, 2 deletions

diff --git a/gnu/usr.sbin/sendmail/libsm/vfprintf.c b/gnu/usr.sbin/sendmail/libsm/vfprintf.c
index ca84a5700d1..a338e2b26d7 100644
--- a/gnu/usr.sbin/sendmail/libsm/vfprintf.c
+++ b/gnu/usr.sbin/sendmail/libsm/vfprintf.c
@@ -535,9 +535,11 @@ reswitch:	switch (ch)
 				if (prec > 120)
 					prec = 120;
 				if (prec >= 0)
-					sprintf(out, fmt, width, prec, val);
+					snprintf(out, sizeof(out), fmt, width,
+					    prec, val);
 				else
-					sprintf(out, fmt, width, val);
+					snprintf(out, sizeof(out), fmt, width,
+					    val);
 				len = strlen(out);
 				PRINT(out, len);
 				FLUSH();