Came across this offhand remark on another mailing list:
> 2. The code for substitute versions of snprintf() and vsnprintf(),
> for systems without native versions has been replaced. nmh
> now uses the version of these routines taken from the Apache
> web server code.
Hmm. I don't know how bulletproof the snprintf/vsnprintf code we have
is, but it might be worth comparing what Apache is using to see if
theirs is better (and if they have a compatible copyright...).
regards, tom lane