Index: main/config.c =================================================================== --- main/config.c (revision 272569) +++ main/config.c (working copy) @@ -1053,16 +1053,16 @@ cur = c; /* Strip off leading and trailing "'s and <>'s */ if (*c == '"') { - /* Dequote */ - while (*c) { + char literal_include[256], *ptr; + for (ptr = literal_include; *c && ptr < literal_include + sizeof(literal_include); c++) { if (*c == '"') { - strcpy(c, c + 1); /* SAFE */ - c--; + continue; } else if (*c == '\\') { - strcpy(c, c + 1); /* SAFE */ + *ptr++ = *(c + 1); } - c++; } + *ptr = '\0'; + cur = literal_include; } else if (*c == '<') { /* C-style include */ if (*(c + strlen(c) - 1) == '>') {