Multiple (stack-based) buffer overflows in patch canonisation code and when expanding file-names with long paths Patches taken from upstream