use snprintf

diff --git a/auth/rfc1938.c b/auth/rfc1938.c
index 64dd8f30bcbf638cd554b3a2e46e4bc4fff116ce..eaf58f04e22e7bdcb843edd4f7e51b03683f3e07 100644 (file)
--- a/auth/rfc1938.c
+++ b/auth/rfc1938.c
@@ -137,10 +137,10 @@ rfc1938_setup(pw, promptp, auth)
     }
 
     if (def_flag(I_LONG_OTP_PROMPT))
-       (void) sprintf(new_prompt, "%s\n%s", challenge, orig_prompt);
+       (void) snprintf(new_prompt, np_size, "%s\n%s", challenge, orig_prompt);
     else
-       (void) sprintf(new_prompt, "%.*s [ %s ]:", op_len, orig_prompt,
-           challenge);
+       (void) snprintf(new_prompt, np_size, "%.*s [ %s ]:", op_len,
+           orig_prompt, challenge);
 
     *promptp = new_prompt;
     return(AUTH_SUCCESS);