$OpenBSD: patch-cgi_html_c,v 1.5 2016/04/28 15:34:14 sthen Exp $
--- cgi/html.c.orig	Fri Oct 20 00:26:35 2006
+++ cgi/html.c	Thu Apr 28 16:33:48 2016
@@ -392,7 +392,7 @@ static NEOERR *split_and_convert (const char *src, int
 		  "Unable to allocate memory to convert url");
 	      break;
 	    }
-	    strcpy(url, "http://");
+	    strlcpy(url, "http://", url_len + 1);
 	    strncat(url, src + x, parts[i].end - x - suffix);
 	  }
 	  else
