--- openMotif-2.2.3/clients/uil/UilDiags.c	2002-01-10 21:55:42.000000000 +0100

+++ openMotif-2.2.3/clients/uil/UilDiags.c	2005-12-12 22:09:48.000000000 +0100

@@ -293,12 +293,12 @@ void	diag_issue_diagnostic

     va_start(ap, l_start_column);

 #ifndef NO_MESSAGE_CATALOG

-    vsprintf( msg_buffer, 

+    vsnprintf( msg_buffer, 132, 

 	      catgets(uil_catd, UIL_SET1, msg_cat_table[ message_number ],

 		      diag_rz_msg_table[ message_number ].ac_text), 

 	     ap );

 #else

-    vsprintf( msg_buffer, 

+    vsnprintf( msg_buffer, 132,

 	      diag_rz_msg_table[ message_number ].ac_text, 

 	      ap );

 #endif

diff -rupN openMotif-2.2.3/clients/uil/UilSrcSrc.c openMotif-2.2.3-rc4/clients/uil/UilSrcSrc.c

--- openMotif-2.2.3/clients/uil/UilSrcSrc.c	2002-01-10 21:55:47.000000000 +0100

+++ openMotif-2.2.3/clients/uil/UilSrcSrc.c	2005-12-12 22:10:46.000000000 +0100

@@ -631,7 +631,7 @@ open_source_file( XmConst char          

     /* place the file name in the expanded_name buffer */

-    strcpy(buffer, c_file_name);

+    strncpy(buffer, c_file_name, 256);

 /*    Determine if this is the main file or an include file.  */