===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/msgs/Attic/msgs.c,v
retrieving revision 1.23
retrieving revision 1.24
diff -u -r1.23 -r1.24
--- src/usr.bin/msgs/Attic/msgs.c	2002/08/08 11:55:07	1.23
+++ src/usr.bin/msgs/Attic/msgs.c	2003/03/13 09:09:33	1.24
@@ -1,4 +1,4 @@
-/*	$OpenBSD: msgs.c,v 1.23 2002/08/08 11:55:07 ho Exp $	*/
+/*	$OpenBSD: msgs.c,v 1.24 2003/03/13 09:09:33 deraadt Exp $	*/
 /*	$NetBSD: msgs.c,v 1.7 1995/09/28 06:57:40 tls Exp $	*/
 
 /*-
@@ -44,7 +44,7 @@
 #if 0
 static char sccsid[] = "@(#)msgs.c	8.2 (Berkeley) 4/28/95";
 #else
-static char rcsid[] = "$OpenBSD: msgs.c,v 1.23 2002/08/08 11:55:07 ho Exp $";
+static char rcsid[] = "$OpenBSD: msgs.c,v 1.24 2003/03/13 09:09:33 deraadt Exp $";
 #endif
 #endif /* not lint */
 
@@ -145,7 +145,7 @@
 void onintr(int);
 void onsusp(int);
 int linecnt(FILE *);
-int next(char *);
+int next(char *, int);
 void ask(char *);
 void gfrsub(FILE *);
 char *nxtfld(char *);
@@ -590,7 +590,7 @@
 					break;
 				}
 				if (isdigit(*in)) {
-					msg = next(in);
+					msg = next(in, sizeof inbuf);
 					sep = in;
 					break;
 				}
@@ -742,12 +742,13 @@
 }
 
 int
-next(buf)
+next(buf, len)
 	char *buf;
+	int len;
 {
 	int i;
 	sscanf(buf, "%d", &i);
-	sprintf(buf, "Goto %d", i);
+	snprintf(buf, len, "Goto %d", i);
 	return(--i);
 }