Check strlcpy(3) return value in pkg which.

  Since the argument is user provided, a boundary check is needed.