Avoid sprintf.
diff --git a/ssl/ssl_ciph.c b/ssl/ssl_ciph.c
index 7436a50..a5b2b97 100644
--- a/ssl/ssl_ciph.c
+++ b/ssl/ssl_ciph.c
@@ -975,13 +975,14 @@
 
 	if (buf == NULL)
 		{
-		buf=Malloc(128);
+		len=128;
+		buf=Malloc(len);
 		if (buf == NULL) return("Malloc Error");
 		}
 	else if (len < 128)
 		return("Buffer too small");
 
-	sprintf(buf,format,cipher->name,ver,kx,au,enc,mac,exp);
+	BIO_snprintf(buf,len,format,cipher->name,ver,kx,au,enc,mac,exp);
 	return(buf);
 	}