Possible crash due to sprintf overrun in snd_pcm_hw_open

I'm not sure if this is a serious security issue, a theoretical one, or not a security issue at all (just a bug).

Anyway, in src/pcm/pcm_hw.c, there is a function snd_pcm_hw_open. The filename array is not large enough to fit if the "card" and "device" variables are being called with values so large that nobody but an attacker would use them.
At least this is relevant on amd64, and maybe on i386 as well, if the number is a large negative number.

The obivous fix as I see it would be to change sprintf to snprintf.

Here's the relevant code quoted:

 int snd_pcm_hw_open(snd_pcm_t **pcmp, const char *name,
      int card, int device, int subdevice,
      snd_pcm_stream_t stream, int mode,
      int mmap_emulation, int sync_ptr_ioctl)
{
 char filename[sizeof(SNDRV_FILE_PCM_STREAM_PLAYBACK) + 20];
 const char *filefmt;
/* .... */
 switch (stream) {
 case SND_PCM_STREAM_PLAYBACK:
  filefmt = SNDRV_FILE_PCM_STREAM_PLAYBACK;
  break;
 case SND_PCM_STREAM_CAPTURE:
  filefmt = SNDRV_FILE_PCM_STREAM_CAPTURE;
  break;
 default:
  SNDERR("invalid stream %d", stream);
  return -EINVAL;
 }
 sprintf(filename, filefmt, card, device);