b49a4ffc94
On OpenBSD, the 'S' option to malloc(3) enables guard pages (among other things). This loop could have triggered this trap when reading beyond the buffer. Also, the whole "while(*ip)" construct was based on the assumption that the memory after the string is always zero-filled.