--- a/gfxinit.c	Tue Nov 28 20:01:46 2006 +0000
+++ b/gfxinit.c	Tue Nov 28 20:55:16 2006 +0000
@@ -111,7 +111,7 @@
 	char buf[MAX_PATH];
 
 	// open file
-	sprintf(buf, "%s%s", _path.data_dir, file.filename);
+	snprintf(buf, lengthof(buf), "%s%s", _path.data_dir, file.filename);
 	f = fopen(buf, "rb");
 
 #if !defined(WIN32)