--- servmsg.c.old	2007-07-31 22:45:25.000000000 +0200
+++ servmsg.c	2007-07-31 22:46:25.000000000 +0200
@@ -461,7 +461,8 @@ static int gotmsg(char *from, char *msg)
   to = newsplit(&msg);
   fixcolon(msg);
   /* Only check if flood-ctcp is active */
-  strcpy(uhost, from);
+  strncpy(uhost, from, UHOSTLEN);
+  uhost[UHOSTLEN-1] = '\0';
   nick = splitnick(&uhost);
   if (flud_ctcp_thr && detect_avalanche(msg)) {
     if (!ignoring) {