"You could go through an entire code base and replace sprintf calls with snprintf with the appropriate buffer size parameter."

Slightly more useful (in every sense) would be to write a script which did this to code automatically.