In time.c line 649 the call to strftime uses 100 as the max character array length, while all the other calls use sizeof(TimeBuf)-1. As FSTRING_LEN is larger than 100, there is currently no buffer overrun.
Checked in - thanks!
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.