Description of problem:
Building globus-gridftp-server with _FORTIFY_SOURCE=3 exposes a problem in globus_list_cmp_alias_ent where it calls strcpy with the destination being smaller than the required size.

Version-Release number of selected component (if applicable):
globus-gridftp-server-13.24-2.fc37

How reproducible:
Always

Steps to Reproduce:
1. dnf copr enable siddhesh/fortify-source-3
2. Build globus-gridftp-server package using rpmbuild

Actual results:

FAIL: cmp_alias_ent_test                                                                                                                                                                                           
========================                                                                                                                                                                                           
                                                                                                                                                                                                                   
*** buffer overflow detected ***: terminated                                                             

Expected results:

No failure.

Additional info:

It looks like a buffer overflow in strcpy in globus_list_cmp_alias_ent.  Here's the backtrace:

#0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44                                                                                      
#1  0x00007f8899908373 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78                                                                                                         
#2  0x00007f88998b6056 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26                                                                                                                              
#3  0x00007f889989f87c in __GI_abort () at abort.c:79                                                                                                                                                              
#4  0x00007f88998a05b3 in __libc_message (fmt=fmt@entry=0x7f8899a153ed "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:150                                                                            
#5  0x00007f8899997c5b in __GI___fortify_fail (msg=msg@entry=0x7f8899a15393 "buffer overflow detected") at fortify_fail.c:24                                                                                       
#6  0x00007f8899996486 in __GI___chk_fail () at chk_fail.c:28                                                                                                                                                      
#7  0x00007f8899995d06 in __strcpy_chk (dest=dest@entry=0x7ffc9e0c2070 "", src=0x55df812ca020 "hell[o]", destlen=destlen@entry=6) at strcpy_chk.c:30                                                               
#8  0x00007f8899a90230 in strcpy (__src=<optimized out>, __dest=<optimized out>, __dest=<optimized out>, __src=<optimized out>) at /usr/include/bits/string_fortified.h:79                                         
#9  globus_list_cmp_alias_ent (a=a@entry=0x7ffc9e0c2140, b=b@entry=0x7ffc9e0c21b0, arg=arg@entry=0x0) at /root/rpmbuild/BUILD/globus_gridftp_server-13.24/globus_i_gfs_data.c:3051                                 
#10 0x000055df812c92d1 in main () at /root/rpmbuild/BUILD/globus_gridftp_server-13.24/test/cmp_alias_ent_test.c:115                                                                                                

The offending code is in globus_list_cmp_alias_ent:

3051        strcpy(b_tmp, b_ent->alias ? b_ent->alias : "");

As seen in frame #7, the source string is 7 bytes, thus needing 8 bytes to accommodate.  The destination (i.e. b_tmp) however only has 6 bytes due to:

(gdb) list globus_list_cmp_alias_ent
...
3045        char                                b_tmp[b_ent->alias_len+1];
...
(gdb) p b_ent->alias_len
$1 = 5