I don't have sources to hand. Is it even remotely plausible
to make removing sprintf and replacing with snprintf a goal?

How about for nominated subsets of the code?

Seems to me like making buffer overrun attacks non-viable
would prevent a lot of angst later on...

-George
--
George Michaelson         |  connect.com.au pty/ltd
Email: ggm@connect.com.au |  c/o AAPT,
Phone: +61 7 3834 9976    |  level 8, the Riverside Centre,
  Fax: +61 7 3834 9908    |  123 Eagle St, Brisbane QLD 4000