@squirrel strcpy doesn't check that the destination is big enough to store the source string in, which can lead to buffer overruns.
The Linux man page for strcpy covers this fairly well, along with some alternatives: https://linux.die.net/man/3/strcpy