Agreed that this particular ticket is not useful. Resolve it and replace it with a [CAGE] ticket with explicit instructions on converting all existing 'sprintf', 'strcat', etc calls with calls to 'snprintf', 'strlcat', etc. (Also include a list of all calls that should be converted.)
This can wait a couple of weeks until we dive into the String implementation milestone. Allison