From aa50bfde158da0ba73002a873a62edbbcd5b8260 Mon Sep 17 00:00:00 2001
From: itojun <itojun@NetBSD.org>
Date: Sun, 13 Jul 2003 09:40:20 +0000
Subject: [PATCH] use bounded string op (there still are remains)

---
 libexec/telnetd/sys_term.c | 9 +++++----
 libexec/telnetd/telnetd.c  | 8 ++++----
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/libexec/telnetd/sys_term.c b/libexec/telnetd/sys_term.c
index 861d8589eaa1..f5b2ed9b4c86 100644
--- a/libexec/telnetd/sys_term.c
+++ b/libexec/telnetd/sys_term.c
@@ -1,4 +1,4 @@
-/*	$NetBSD: sys_term.c,v 1.34 2002/08/22 07:23:27 itojun Exp $	*/
+/*	$NetBSD: sys_term.c,v 1.35 2003/07/13 09:40:20 itojun Exp $	*/
 
 /*
  * Copyright (c) 1989, 1993
@@ -38,7 +38,7 @@
 #if 0
 static char sccsid[] = "@(#)sys_term.c	8.4+1 (Berkeley) 5/30/95";
 #else
-__RCSID("$NetBSD: sys_term.c,v 1.34 2002/08/22 07:23:27 itojun Exp $");
+__RCSID("$NetBSD: sys_term.c,v 1.35 2003/07/13 09:40:20 itojun Exp $");
 #endif
 #endif /* not lint */
 
@@ -1601,8 +1601,9 @@ start_login(host, autologin, name)
 			len = strlen(name)+1;
 			write(xpty, name, len);
 			write(xpty, name, len);
-			sprintf(speed, "%s/%d", (cp = getenv("TERM")) ? cp : "",
-				(def_rspeed > 0) ? def_rspeed : 9600);
+			snprintf(speed, sizeof(speed), "%s/%d",
+			    (cp = getenv("TERM")) ? cp : "",
+			    (def_rspeed > 0) ? def_rspeed : 9600);
 			len = strlen(speed)+1;
 			write(xpty, speed, len);
 
diff --git a/libexec/telnetd/telnetd.c b/libexec/telnetd/telnetd.c
index 2e27150785aa..ab7b8e7c2748 100644
--- a/libexec/telnetd/telnetd.c
+++ b/libexec/telnetd/telnetd.c
@@ -1,4 +1,4 @@
-/*	$NetBSD: telnetd.c,v 1.37 2003/05/17 21:28:53 itojun Exp $	*/
+/*	$NetBSD: telnetd.c,v 1.38 2003/07/13 09:40:21 itojun Exp $	*/
 
 /*
  * Copyright (C) 1997 and 1998 WIDE Project.
@@ -69,7 +69,7 @@ __COPYRIGHT("@(#) Copyright (c) 1989, 1993\n\
 #if 0
 static char sccsid[] = "@(#)telnetd.c	8.4 (Berkeley) 5/30/95";
 #else
-__RCSID("$NetBSD: telnetd.c,v 1.37 2003/05/17 21:28:53 itojun Exp $");
+__RCSID("$NetBSD: telnetd.c,v 1.38 2003/07/13 09:40:21 itojun Exp $");
 #endif
 #endif /* not lint */
 
@@ -919,10 +919,10 @@ doit(who)
 	if (secflag) {
 		char slave_dev[16];
 
-		sprintf(tty_dev, "/dev/pty/%03d", ptynum);
+		snprintf(tty_dev, sizeof(tty_dev), "/dev/pty/%03d", ptynum);
 		if (setdevs(tty_dev, &dv) < 0)
 		 	fatal(net, "cannot set pty security");
-		sprintf(slave_dev, "/dev/ttyp%03d", ptynum);
+		snprintf(slave_dev, sizeof(slave_dev) "/dev/ttyp%03d", ptynum);
 		if (setdevs(slave_dev, &dv) < 0)
 		 	fatal(net, "cannot set tty security");
 	}