--- config.c.orig 2010-06-19 11:56:37.442182216 +0200 +++ config.c 2010-06-21 23:22:46.186217492 +0200 @@ -1052,20 +1052,12 @@ cur = c; /* Strip off leading and trailing "'s and <>'s */ - if (*c == '"') { - /* Dequote */ - while (*c) { - if (*c == '"') { - strcpy(c, c + 1); /* SAFE */ - c--; - } else if (*c == '\\') { - strcpy(c, c + 1); /* SAFE */ - } - c++; - } - } else if (*c == '<') { - /* C-style include */ - if (*(c + strlen(c) - 1) == '>') { + if ((*c == '"') || (*c == '<')) { + char quote_char = *c; + if (quote_char == '<') + quote_char = '>'; + + if (*(c + strlen(c) - 1) == quote_char) { cur++; *(c + strlen(c) - 1) = '\0'; }