Wget backup filename construction uses unsafe manual copies

While auditing wget's conversion/backup path, I found manual filename rewriting in write_backup_file() that builds .orig or replaces .html with orig using raw memcpy/strcpy on attacker-influenced path strings.