--- disklabel.c.orig	Tue Apr 15 07:57:53 2003
+++ disklabel.c	Tue Apr 15 08:46:26 2003
@@ -283,14 +283,16 @@
 
 	dkname = argv[0];
 	if (dkname[0] != '/') {
-		(void)sprintf(np, "%s%s%c", _PATH_DEV, dkname, 'a' + RAW_PART);
+		(void)snprintf(np, BBSIZE, "%s%s%c", _PATH_DEV, dkname, 
+		    'a' + RAW_PART);
 		specname = np;
 		np += strlen(specname) + 1;
 	} else
 		specname = dkname;
+
 	f = open(specname, op == READ ? O_RDONLY : O_RDWR);
 	if (f < 0 && errno == ENOENT && dkname[0] != '/') {
-		(void)sprintf(specname, "%s%s", _PATH_DEV, dkname);
+		(void)snprintf(specname, BBSIZE, "%s%s", _PATH_DEV, dkname);
 		np = namebuf + strlen(specname) + 1;
 		f = open(specname, op == READ ? O_RDONLY : O_RDWR);
 	}