--- imap/nntpd.c	2011-10-14 10:55:51.000000000 +0000
+++ imap/nntpd.c.oden	2011-10-14 10:55:35.000000000 +0000
@@ -4168,7 +4168,8 @@ static struct wildmat *split_wildmats(ch
 	else if (*c == '@') wild[n].not = -1;	/* absolute not (feeding) */
 	else wild[n].not = 0;
 
-	strcpy(p, wild[n].not ? c + 1 : c);
+        strncpy(p, wild[n].not ? c + 1 : c, pattern+sizeof(pattern) - p);
+        pattern[sizeof(pattern)-1] = '\0';
 	wild[n++].pat = xstrdup(pattern);
     } while (c != str);
     wild[n].pat = NULL;