Width given in format string is larger than the destination buffer.
Type mismatch between scanf format specifier (unsigned long long) and the variable type (long long).
str*cpy / strlen performance fix.

Calculating length of a string two times is unnecessary, and using strncpy width known string length can be replaced with memcpy.
Variable type fix for fgetc.

Reading a single character is fine with fgetc. But if you want to check for EOF, then you have to use 'int' as type,
and if the return value is not EOF, then it can be cast to 'char'.

Example for fail scenario before the fix: if the file contains 0xff character, then the code will interpret it as EOF.
0xff can be banned, but this should be checked in a proper way and not in the reading code.
Preventing use-after-freed possibility.

Probably the original intention was to prevent the possibility of a use-after-freed bug.
But the last strs = NULL statement has no effect, because it's just a local copy.
However, it makes sense to put a similar solution inside the loop right after the memory release.
This way if some codes try to use a previously freed array, then the array will seem to be empty.
String lib performance fix: using memcpy when the length is known.

Using strncpy(target, string, strlen(string)) equals with memcpy(target, string, strlen(string).
Both of them remove the \0 from the end. But for longer string memcpy is definitely more efficient,
because it does not have to search for string termination.

Usually the performance difference is small, and this kind of code rarely used elsewhere,
but a string handling lib should be efficient.
Type fix: 'char*' should be used for string storing instead of 'char'.
Fix for an unlikely memory leak in a unit test.

1 or 2 hosts work fine, otherwise the reserved memory should be released.
(However, using not 1 or 2 is quite hypothetical.)
strncpy fixes: wrong buffer size, lack of termination and similar errors are fixed.

There are lot of fixes here, but they are in a few main category:
1, strncpy(target, source, TARGETSIZE-1)  -> strlcpy(target, source, TARGETSIZE)
   If the target's last byte is not \0, then the string will not be terminated.
2, strncpy(target, source, TARGETSIZE) -> strlcpy(target, source, TARGETSIZE)
   If the source is longer than the target, then the string will not get NUL termination
3, combination of memset + strncpy or strncpy + buffer[last_byte]=0 -> strlcpy
   It's ugly and inefficient but at least gives correct result.

Remark: the usual string length (e.g. variable name, path) is much shorter than the buffer size (1k or 4k)
Using strncpy is quite inefficient because it always fills the rest of the array with 0s.
If you definitely need this feature, then rather use a memset + strlcpy + comment.
(E.g. // I want to fill this whole buffer with 0s, because it contained a private key previously.)
strncpy / strncat inefficiencies.

strncpy with known length can be replace with memcpy.
manual \0 + strncat is ugly, and strlcpy just does the job well.
strncpy + manual termination -> strlcpy
A few more strncpy fixes: buffer size limit, termination, etc.
Memory leak fix in 'ConfigurationDestroy'.
Introduce CF_ASSERT for debug builds.
(cherry picked from commit fcb9bb8b308443e758941e6213bc5fa6f5ee71ef)
Fix build: Remove redundant function declaration.

(cherry picked from commit 4c07869d74b7ca5126b06e9b8639c8dcd54f5df0)
Remove migration support for LMDB
(cherry picked from commit 8611970bfa33be7b3cf0724eb684833e08582850)
Remove proper files in acceptance tests initialisation.

(cherry picked from commit ce870d87c0c6c40ae7eff33797851af35c0fcb52)
Added two acceptance tests for digest copy: one if the file is there and is correct, and one if it's there but different.

(cherry picked from commit 7dca0e7c5f74dcb81575086cc0f28ade86d5b12e)
Add acceptance tests for digest copy_from with server-side connection.ip expansion.

(cherry picked from commit 9c420662fad92c03a6e96b8abad69b3f145b5962)
Just stylistic/performance changes, functionally same code.

(cherry picked from commit 804f53593a62c72d9ee9c0992b2f3b41b51e4673)
Fix the MD5 protocol command.

Enforce proper access controls. Expand shortcuts in new protocol. Expand
special variables (ip, hostname, key) as well. Implement acceptance tests
checking them.

(cherry picked from commit 96a4546c8e8c364318bc6f4468c555c4f9d1f2d3)