strncat is also on our banned functions list: https://github.com/inliniac/suricata/blob/master/qa/coccinelle/banned-functions.cocci . Please run make check.

Instead of strncat we have strlcat, a safer implementation.