Index: generic/nsf.c
===================================================================
diff -u -N -rb916a5a392a9d352ac374912aea282b98f59c0ce -r37c87756387c17e0f2f43634c0d452a91f91c844
--- generic/nsf.c	(.../nsf.c)	(revision b916a5a392a9d352ac374912aea282b98f59c0ce)
+++ generic/nsf.c	(.../nsf.c)	(revision 37c87756387c17e0f2f43634c0d452a91f91c844)
@@ -25098,12 +25098,13 @@
   Tcl_ListObjAppendElement(interp, resultObj, Tcl_NewStringObj("length", -1));
   Tcl_ListObjAppendElement(interp, resultObj, Tcl_NewIntObj(objPtr->length));
   Tcl_ListObjAppendElement(interp, resultObj, Tcl_NewStringObj("hex", -1));
+
   if (objPtr->bytes != NULL) {
     int i;
     char buffer[24];
 
     for (i = 0; i < 10 && i < objPtr->length; i++) {
-      sprintf(buffer + i*2, "%.2x", (unsigned)(*((objPtr->bytes)+i) & 0xff));
+      snprintf(buffer + i*2, 24, "%.2x", (unsigned)(*((objPtr->bytes)+i) & 0xff));
     }
     if (objPtr->length > 10) {
       strcat(buffer, "...");