strncpy doesn't ensure a null terminator