Replace the one use of sprintf() with snprintf()

It only acts on constant strings, so it can't actually overflow, but
this way I can assert() that it really doesn't.

diff --git a/bedstead.c b/bedstead.c
index a875585d7a0d66932497578c41fe93da86d76abe..d524564f6052c145a9c6d6d2546dc6b1d867d1d9 100644 (file)
--- a/bedstead.c
+++ b/bedstead.c
@@ -3108,8 +3108,11 @@ get_fullname(void)
 {
 #define FULLNAME_MAX 100
        static char fullname[FULLNAME_MAX];
+       int len;
 
-       sprintf(fullname, FAMILY_NAME "%s%s", weight->suffix, width->suffix);
+       len = snprintf(fullname, sizeof(fullname),
+                      FAMILY_NAME "%s%s", weight->suffix, width->suffix);
+       assert(len >= 0 && (unsigned)len < sizeof(fullname));
        return fullname;
 }