overflow: remove strncpy() false positives