Do not return a buffer on the stack, mentioned by jsg a while ago.

1 files changed, 4 insertions, 2 deletions

diff --git a/cmd.c b/cmd.c
index 5d8e7209..a3a70284 100644
--- a/cmd.c
+++ b/cmd.c
@@ -1325,8 +1325,10 @@ find_home:
 		return (s->cwd);
 
 complete_path:
-	if (root[skip] == '\0')
-		return (root);
+	if (root[skip] == '\0') {
+		strlcpy(path, root, sizeof path);
+		return (path);
+	}
 	n = snprintf(path, sizeof path, "%s/%s", root, cwd + skip);
 	if (n > 0 && (size_t)n < sizeof path)
 		return (path);