--- a/src/music/os2_m.cpp	Tue Oct 28 15:47:42 2008 +0000
+++ b/src/music/os2_m.cpp	Tue Oct 28 16:04:41 2008 +0000
@@ -27,7 +27,7 @@
 	va_list va;
 	char buf[512];
 	va_start(va, cmd);
-	vsprintf(buf, cmd, va);
+	vseprintf(buf, lastof(buf), cmd, va);
 	va_end(va);
 	return mciSendString(buf, NULL, 0, NULL, 0);
 }