bitcoin/bitcoin — pull request #1777 by laanwj (2012-09-03 06:29:17+00:00)
Title: Remove last occurence of potentially insecure function sprintf

%d can return up to 11 characters. Move away from fixed buffer completely and use our own safe function strprintf.

I'm reasonably sure that this cannot be exploited due to earlier checks, but still I don't like it.