--- argproc.c.orig	2006-10-12 13:26:40.000000000 +1000
+++ argproc.c	2021-06-10 23:30:15.000000000 +1000
@@ -309,7 +309,7 @@ $DESCRIPTOR (resultspec, "");
 		if (!had_path) {
 			char *s = strrchr (string, ']');
 			if ( s == NULL ) s = strrchr (string, ':');
-			if ( s != NULL ) strcpy (string, s+1);
+			if ( s != NULL ) memmove (string, s+1, strlen(s+1)+1);
 		}
 		/*
 		 * Be consistent with what the C RTL has already done to the rest of
--- routines.c.orig	2007-06-07 14:35:21.000000000 +1000
+++ routines.c	2021-06-10 23:37:45.000000000 +1000
@@ -757,13 +757,13 @@ extern char* absoluteFilename (const cha
 				else if (cp [0] != PATH_SEPARATOR)
 					cp = slashp;
 #endif
-				strcpy (cp, slashp + 3);
+				memmove (cp, slashp + 3, strlen(slashp + 3)+1);
 				slashp = cp;
 				continue;
 			}
 			else if (slashp [2] == PATH_SEPARATOR  ||  slashp [2] == '\0')
 			{
-				strcpy (slashp, slashp + 2);
+				memmove (slashp, slashp + 2, strlen(slashp + 2)+1);
 				continue;
 			}
 		}