On Wed, 25 Sep 2019 08:10:42 +0200 Colin Leroy-Mira <colin at colino.net> wrote: > Yes, I think the fix is wrong, telling the libc it can write BUFFSIZE+4 > bytes into tmp2 that is BUFFSIZE long :) Yes, so I see now. I was too hasty and too easily satisfied that it didn't crash or warn for me. with regards Paul