Actually, this should be a memcpy().

We already know the exact length we just allocated, and we plan to append
 our own null terminator to the end of the copy, so this makes more sense.

src/filesystem/beos/SDL_sysfilesystem.cc

@@ -63,7 +63,7 @@ SDL_GetBasePath(void)
         return NULL;
     }
 
-    strcpy(retval, str);
+    SDL_memcpy(retval, str, len);
     retval[len] = '/';
     retval[len+1] = '\0';
     return retval;