On Thu, 2011-10-06 at 13:25 -0400, Sam Hartman wrote: > + char *copy = gssalloc_malloc(strlen(str)+1); > + if (copy) { > + strcpy(copy, str); > + } Don't use strcpy here; it gets flagged in Coverity. Remember the length and use strlcpy. http://k5wiki.kerberos.org/wiki/Coding_style/Practices#String_Handling