- msgs[n] = typeMalloc(char, 21 + strlen(help[n].msg));
- sprintf(msgs[n], "%-20s%s", keyname(help[n].key), help[n].msg);
+ size_t need = (21 + strlen(help[n].msg));
+ msgs[n] = typeMalloc(char, need);
+ _nc_SPRINTF(msgs[n], _nc_SLIMIT(need)
+ "%-20s%s", keyname(help[n].key), help[n].msg);