--- freetype-2.2.1/ft2demos-2.2.1/src/ftmulti.c	2005-11-21 15:11:33.000000000 +0100
+++ freetype-2.2.1/ft2demos-2.2.1/src/ftmulti.c	2010-07-14 22:14:22.000000000 +0200
@@ -34,7 +34,7 @@
 
 #define  MAXPTSIZE  500                 /* dtp */
 
-  char  Header[128];
+  char  Header[256];
   char* new_header = 0;
 
   const unsigned char*  Text = (unsigned char*)
@@ -795,7 +795,7 @@
           Render_All( Num, ptsize );
         }
 
-        sprintf( Header, "%s %s (file %s)",
+        sprintf( Header, "%.50s %.50s (file %.100s)",
                          face->family_name,
                          face->style_name,
                          ft_basename( argv[file] ) );
@@ -813,10 +813,10 @@
 
           for ( n = 0; n < (int)multimaster->num_axis; n++ )
           {
-            char  temp[32];
+            char  temp[100];
 
 
-            sprintf( temp, "  %s:%g",
+            sprintf( temp, "  %.50s:%g",
                            multimaster->axis[n].name,
                            design_pos[n]/65536. );
             strcat( Header, temp );
@@ -830,7 +830,7 @@
       }
       else
       {
-        sprintf( Header, "%s: not an MM font file, or could not be opened",
+        sprintf( Header, "%.100s: not an MM font file, or could not be opened",
                          ft_basename( argv[file] ) );
       }
 
--- freetype-2.2.1/ft2demos-2.2.1/src/ftstring.c	2006-01-17 07:13:40.000000000 +0100
+++ freetype-2.2.1/ft2demos-2.2.1/src/ftstring.c	2010-07-14 22:15:01.000000000 +0200
@@ -413,19 +413,19 @@
       switch ( error_code )
       {
       case FT_Err_Ok:
-        sprintf( status.header_buffer, "%s %s (file `%s')", face->family_name,
+        sprintf( status.header_buffer, "%.50s %.50s (file `%.100s')", face->family_name,
                  face->style_name, basename );
         break;
       case FT_Err_Invalid_Pixel_Size:
-        sprintf( status.header_buffer, "Invalid pixel size (file `%s')",
+        sprintf( status.header_buffer, "Invalid pixel size (file `%.100s')",
                  basename );
         break;
       case FT_Err_Invalid_PPem:
-        sprintf( status.header_buffer, "Invalid ppem value (file `%s')",
+        sprintf( status.header_buffer, "Invalid ppem value (file `%.100s')",
                  basename );
         break;
       default:
-        sprintf( status.header_buffer, "File `%s': error 0x%04x", basename,
+        sprintf( status.header_buffer, "File `%.100s': error 0x%04x", basename,
             (FT_UShort)error_code );
         break;
       }
--- freetype-2.2.1/ft2demos-2.2.1/src/ftview.c	2006-05-04 09:13:20.000000000 +0200
+++ freetype-2.2.1/ft2demos-2.2.1/src/ftview.c	2010-07-14 22:16:32.000000000 +0200
@@ -856,17 +856,17 @@ Next:
       switch ( error_code )
       {
       case FT_Err_Ok:
-        sprintf( status.header_buffer, "%s %s (file `%s')", face->family_name,
+        sprintf( status.header_buffer, "%.50s %.50s (file `%.100s')", face->family_name,
                  face->style_name, basename );
         break;
       case FT_Err_Invalid_Pixel_Size:
-        sprintf( status.header_buffer, "Invalid pixel size (file `%s')", basename );
+        sprintf( status.header_buffer, "Invalid pixel size (file `%.100s')", basename );
         break;
       case FT_Err_Invalid_PPem:
-        sprintf( status.header_buffer, "Invalid ppem value (file `%s')", basename );
+        sprintf( status.header_buffer, "Invalid ppem value (file `%.100s')", basename );
         break;
       default:
-        sprintf( status.header_buffer, "File `%s': error 0x%04x", basename,
+        sprintf( status.header_buffer, "File `%.100s': error 0x%04x", basename,
                  (FT_UShort)error_code );
         break;
       }
--- freetype-2.2.1/ft2demos-2.2.1/src/ttdebug.c	2002-06-10 23:12:19.000000000 +0200
+++ freetype-2.2.1/ft2demos-2.2.1/src/ttdebug.c	2010-07-14 22:17:59.000000000 +0200
@@ -752,7 +752,7 @@ TT_CodeRange_Tag  debug_coderange = tt_c
 
     op = exec->code[ exec->IP ];
 
-    sprintf( tempStr, "%04lx: %02hx  %s", exec->IP, op, OpStr[op] );
+    sprintf( tempStr, "%04lx: %02hx  %.50s", exec->IP, op, OpStr[op] );
 
     if ( op == 0x40 )
     {