Todd C. Miller's original paper, strlcpy and strlcat, is a good read about the issues with strncpy and unbounded strcpy. https://www.sudo.ws/todd/papers/strlcp

Todd C. Miller's original paper, strlcpy and strlcat, is a good read about the issues with strncpy and unbounded strcpy. https://www.sudo.ws/todd/papers/strlcpy.html https://www.sudo.ws/todd/papers/strlcpy.html (USENIX '99) Further reading, including EXAMPLEs: http://man.openbsd.org/strlcpy http://man.openbsd.org/strlcpy http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/lib/libc/string/strlcpy.c?rev=1.15&content-type=text/plain http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/lib/... Barring quibbles about return values, strlcpy is essentially: snprintf(dst, sizeof(dst), "%s", src); A lot of people have been misled by strncpy, when what they really needed was strlcpy: https://blog.mozilla.org/nfroyd/2013/11/05/the-performance-implications-of-strncpy/ https://blog.mozilla.org/nfroyd/2013/11/05/the-performance-i...