1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:

--- ../vdr-1.4.6.test/eit.c     2007-03-10 14:26:23.000000000 +0100
+++ eit.c       2007-12-31 18:38:37.000000000 +0100
@@ -369,10 +369,13 @@
                                int len_short_extern = 0;

                                if (pEvent->ShortText())
-                                       len_short_intern = sprintf (buffer_short_intern, "%s", pEvent->ShortText());
+                                       len_short_intern = snprintf (buffer_short_intern, sizeof(buffer_short_intern)-1, "%s", pEvent->ShortText());

                                if (pPreviousEvent->ShortText())
-                                       len_short_extern = sprintf (buffer_short_extern, "%s",pPreviousEvent->ShortText());
+                                       len_short_extern = snprintf (buffer_short_extern, sizeof(buffer_short_extern)-1, "%s",pPreviousEvent->ShortText());
+
+                               buffer_short_intern[len_short_intern]='\0';
+                               buffer_short_extern[len_short_extern]='\0';

                                if(len_short_intern > 0)
                                {
@@ -390,11 +393,13 @@
                                        int len_title_extern = 0;

                                        if (pEvent->Description())
-                                               len_title_intern = sprintf (buffer_title_intern, "%s", pEvent->Description());
+                                               len_title_intern = snprintf (buffer_title_intern, sizeof(buffer_title_intern)-1, "%s", pEvent->Description());

                                        if (pPreviousEvent->Description())
-                                               len_title_extern = sprintf (buffer_title_extern, "%s", pPreviousEvent->Description());
+                                               len_title_extern = snprintf (buffer_title_extern, sizeof(buffer_title_extern)-1, "%s", pPreviousEvent->Description());

+                                       buffer_title_intern[ len_title_intern]='\0';
+                                       buffer_title_extern[ len_title_extern]='\0';
                                        if(len_title_intern > 0)
                                {
                                        if(len_title_extern < 1)