Index: src/chext/StringHelpers.cpp
===================================================================
diff -u -N -r3493e9fc470285b0a0b417d50be281467a071eb7 -r4c272b19c74694c428c943011f279ec064fbd894
--- src/chext/StringHelpers.cpp	(.../StringHelpers.cpp)	(revision 3493e9fc470285b0a0b417d50be281467a071eb7)
+++ src/chext/StringHelpers.cpp	(.../StringHelpers.cpp)	(revision 4c272b19c74694c428c943011f279ec064fbd894)
@@ -21,19 +21,19 @@
 #include "StringHelpers.h"
 #include "stdio.h"
 
-LPTSTR GetSizeString(double dData, LPTSTR pszBuffer)
+LPTSTR GetSizeString(double dData, LPTSTR pszBuffer, size_t stMaxBufferSize)
 {
 	if (dData < 0.0)
 		dData=0.0;
 
 	if (dData < 1200.0)
-		_stprintf(pszBuffer, _T("%.2f %s"), dData, g_pscsShared->szSizes[0]);
+		_sntprintf(pszBuffer, stMaxBufferSize, _T("%.2f %s"), dData, g_pscsShared->szSizes[0]);
 	else if (dData < 1228800.0)
-		_stprintf(pszBuffer, _T("%.2f %s"), static_cast<double>(dData)/1024.0, g_pscsShared->szSizes[1]);
+		_sntprintf(pszBuffer, stMaxBufferSize, _T("%.2f %s"), static_cast<double>(dData)/1024.0, g_pscsShared->szSizes[1]);
 	else if (dData < 1258291200.0)
-		_stprintf(pszBuffer, _T("%.2f %s"), static_cast<double>(dData)/1048576.0, g_pscsShared->szSizes[2]);
+		_sntprintf(pszBuffer, stMaxBufferSize, _T("%.2f %s"), static_cast<double>(dData)/1048576.0, g_pscsShared->szSizes[2]);
 	else
-		_stprintf(pszBuffer, _T("%.2f %s"), static_cast<double>(dData)/1073741824.0, g_pscsShared->szSizes[3]);
+		_sntprintf(pszBuffer, stMaxBufferSize, _T("%.2f %s"), static_cast<double>(dData)/1073741824.0, g_pscsShared->szSizes[3]);
 
 	return pszBuffer;
 }