On Tue, May 3, 2016 at 12:00 PM, Oliver Pinter <oliver.pinter at hardenedbsd.org> wrote: > strlcpy instead or adjust the p->vendors size? Neither. The buffer is intentionally not nul-terminated. The coverity reports are false positives. Conrad