Wget backup filename construction can underflow stack buffer

While writing backup copies of downloaded files, Wget constructs a stack buffer with alloca() and then uses strcpy() plus pointer arithmetic to append or overwrite the '.orig' suffix. In the HTML-extension case it assumes the base filename is at least four bytes long and already ends with '.html'.