It looks like there is no check to make sure that the database name and locations both read from the configuration file do not overflow the statically allocated buffer. This is probably not a huge deal but it is not something we should ship with. --Sam