diff -rupN a/plugins/dfinput/cfg-gtk.c b/plugins/dfinput/cfg-gtk.c
--- a/plugins/dfinput/cfg-gtk.c	2013-11-09 16:24:16.000000000 -0500
+++ b/plugins/dfinput/cfg-gtk.c	2017-05-30 08:46:57.799501874 -0400
@@ -607,7 +607,7 @@ static void PopulateDevList() {
 
 		n = SDL_NumJoysticks();
 		for (j = 0; j < n; j++) {
-			sprintf(buf, "%d: %s", j + 1, SDL_JoystickName(j));
+			snprintf(buf, sizeof(buf), "%d: %s", j + 1, SDL_JoystickName(j));
 			gtk_list_store_append(store, &iter);
 			gtk_list_store_set(store, &iter, 0, buf, -1);
 		}