fix a buffer overflow vulnerability http://www.vuxml.org/openbsd/e6b4a1ae-9404-11d9-8c05-080020fe8945.html ok naddy@