From 41ac753092e07d0cb30dd3db6bca8a5405aa4356 Mon Sep 17 00:00:00 2001
From: jcm <6864788+jcm93@users.noreply.github.com>
Date: Sat, 7 Mar 2026 11:51:27 -0600
Subject: [PATCH] shared/bpm: Replace `sprintf` usage

---
 shared/bpm/bpm.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/shared/bpm/bpm.c b/shared/bpm/bpm.c
index 21c3be9485d08c..a13f1c53c79df2 100644
--- a/shared/bpm/bpm.c
+++ b/shared/bpm/bpm.c
@@ -9,7 +9,10 @@ static void render_metrics_time(struct metrics_time *m_time)
 	 */
 	memset(&m_time->rfc3339_str, 0, sizeof(m_time->rfc3339_str));
 	strftime(m_time->rfc3339_str, sizeof(m_time->rfc3339_str), "%Y-%m-%dT%T", gmtime(&m_time->tspec.tv_sec));
-	sprintf(m_time->rfc3339_str + strlen(m_time->rfc3339_str), ".%03ldZ", m_time->tspec.tv_nsec / 1000000);
+	uint64_t current_length = strlen(m_time->rfc3339_str);
+	size_t remaining_buffer_size = sizeof(m_time->rfc3339_str) - current_length;
+	snprintf(m_time->rfc3339_str + current_length, remaining_buffer_size, ".%03ldZ",
+		 m_time->tspec.tv_nsec / 1000000);
 	m_time->valid = true;
 }