$OpenBSD: patch-gettext-runtime_intl_localcharset_c,v 1.3 2013/01/21 22:08:52 naddy Exp $ --- gettext-runtime/intl/localcharset.c.orig Mon Dec 24 01:33:38 2012 +++ gettext-runtime/intl/localcharset.c Wed Jan 16 23:06:10 2013 @@ -235,8 +235,9 @@ get_charset_aliases (void) free (old_res_ptr); break; } - strcpy (res_ptr + res_size - (l2 + 1) - (l1 + 1), buf1); - strcpy (res_ptr + res_size - (l2 + 1), buf2); + strlcpy (res_ptr + res_size - (l2 + 1) - (l1 + 1), buf1, + l1 + 1 + l2 + 1 + 1); + strlcpy (res_ptr + res_size - (l2 + 1), buf2, l2 + 1 + 1); } fclose (fp); if (res_size == 0)