diff --git a/source/libs/monitor/src/monMain.c b/source/libs/monitor/src/monMain.c
index fd70cd29ef..c6357d9b75 100644
--- a/source/libs/monitor/src/monMain.c
+++ b/source/libs/monitor/src/monMain.c
@@ -602,7 +602,7 @@ void monSendReport(SMonInfo *pMonitor) {
   if (pCont != NULL) {
     EHttpCompFlag flag = tsMonitor.cfg.comp ? HTTP_GZIP : HTTP_FLAT;
     char          tmp[100] = {0};
-    (void)sprintf(tmp, "%" PRId64, tGenQid64(tsMonitor.dnodeId));
+    (void)snprintf(tmp, 100, "%" PRId64, tGenQid64(tsMonitor.dnodeId));
     uDebug("report cont with QID:%s", tmp);
     if (taosSendHttpReportWithQID(tsMonitor.cfg.server, tsMonUri, tsMonitor.cfg.port, pCont, strlen(pCont), flag,
                                   tmp) != 0) {
diff --git a/source/libs/transport/src/thttp.c b/source/libs/transport/src/thttp.c
index 3f04d8577c..2c050469c1 100644
--- a/source/libs/transport/src/thttp.c
+++ b/source/libs/transport/src/thttp.c
@@ -266,7 +266,10 @@ static int32_t httpCreateMsg(const char* server, const char* uri, uint16_t port,
   msg->server = taosStrdup(server);
   msg->uri = taosStrdup(uri);
   msg->cont = taosMemoryMalloc(contLen);
-  if (qid != NULL) msg->qid = taosStrdup(qid);
+  if (qid != NULL)
+    msg->qid = taosStrdup(qid);
+  else
+    msg->qid = NULL;
   if (msg->server == NULL || msg->uri == NULL || msg->cont == NULL) {
     httpDestroyMsg(msg);
     *httpMsg = NULL;