These 3 patches do what's in the subject: use the strbuf API instead of snprintf() / sprintf(). The current risk of writing unallocated memory is low, I think, but still, the return value of these functions were not checked at several places. Miklos Vajna (3): builtin-branch: use strbuf in delete_branches() builtin-branch: use strbuf in fill_tracking_info() builtin-branch: use strbuf in rename_branch() builtin-branch.c | 65 +++++++++++++++++++++++++++-------------------------- 1 files changed, 33 insertions(+), 32 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html