tar src/extract.c: redundant strcpy on heap string likely leftover but indicates unsafe pattern

tar src/buffer.c: strcpy into fixed header buffer using unbounded input