sprintf() in insecure manner (may subject to buffer overflow, like xmindpath
in magicpoint).
If you really care, I can mark them BROKEN until they are confirmed to be safe.
Ugh. pkg/DESCR is an advertisement for your port, people. It seems to
me that if I was writing a port for some peice of software that I liked,
I would try to make it look nice to the rest of the world, who might never
even use it otherwise.
