I just received a report about a place in libiso9660 <https://git.savannah.gnu.org/cgit/libcdio.git/tree/lib/iso9660/iso9660_fs.c#n814> where we use strcpy() instead of strncpy().
If someone has a suggestion for how to fix, please let me know. I can send a more detailed report for those interested. Just email me.