$OpenBSD: patch-cgi_html_c,v 1.4 2008/11/18 20:00:09 okan Exp $ --- cgi/html.c.orig Thu Dec 1 05:03:09 2005 +++ cgi/html.c Mon May 8 16:54:19 2006 @@ -392,7 +392,7 @@ static NEOERR *split_and_convert (const "Unable to allocate memory to convert url"); break; } - strcpy(url, "http://"); + strlcpy(url, "http://", url_len + 1); strncat(url, src + x, parts[i].end - x - suffix); } else