strncat' last argument is the remaining size of the buffer given in the first argument, not the total buffer length. Reported-by: contact@oppida.fr via clamav #11166 Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>