Added NetBSD fix for overflow. Probably not exploitable because it's a static.

diff --git a/lib/libterm/tgoto.c b/lib/libterm/tgoto.c
index a859ce1..d678c06 100644 (file)
--- a/lib/libterm/tgoto.c
+++ b/lib/libterm/tgoto.c
@@ -210,6 +210,6 @@ setwhich:
                        goto toohard;
                }
        }
-       strcpy(dp, added);
+       strncpy(dp, added, sizeof (result) - (dp - result) - 1);
        return (result);
 }