wget [REDACTED]: sprintf into alloca buffer in [REDACTED]

In wget's HTML/CSS link conversion logic, REDACTED allocates a stack buffer using alloca() with a length computed from numdigit(timeout), a constant, and strlen(new_text). It then writes into that buffer with sprintf(). If the size calculation is wrong for any reason (integer truncation, unexpected new_text encoding, or mismatch in constants), this becomes a potential stack buffer overflow (CWE-120).