fixed buffer overflow on str