Verifying that strlen(string) isn't too long, then allocating and copying strlen(string)+1 draws a complaint about strcpy() overflowing its output buffer. Not an issue for regular play, but could matter for config file and sysconf manipulation.
ba8076b142