despite having checked the path length above, use strncpy here - it won't hurt to be overprotective