diff --git a/sys/src/ape/lib/openssl/apps/req.c b/sys/src/ape/lib/openssl/apps/req.c
index f58e65ec8..6204d02d2 100644
--- a/sys/src/ape/lib/openssl/apps/req.c
+++ b/sys/src/ape/lib/openssl/apps/req.c
@@ -399,7 +399,7 @@ int MAIN(int argc, char **argv)
 			else
 #endif
 #ifndef OPENSSL_NO_DH
-				if (strncmp("dh:",p,4) == 0)
+				if (strncmp("dh:",p,3) == 0)
 				{
 				pkey_type=TYPE_DH;
 				p+=3;
diff --git a/sys/src/ape/lib/openssl/apps/s_server.c b/sys/src/ape/lib/openssl/apps/s_server.c
index 7c5775f81..7daa9f357 100644
--- a/sys/src/ape/lib/openssl/apps/s_server.c
+++ b/sys/src/ape/lib/openssl/apps/s_server.c
@@ -1975,7 +1975,7 @@ static int www_body(char *hostname, int s, unsigned char *context)
 
 		/* else we have data */
 		if (	((www == 1) && (strncmp("GET ",buf,4) == 0)) ||
-			((www == 2) && (strncmp("GET /stats ",buf,10) == 0)))
+			((www == 2) && (strncmp("GET /stats ",buf,11) == 0)))
 			{
 			char *p;
 			X509 *peer;
diff --git a/sys/src/cmd/dict/roget.c b/sys/src/cmd/dict/roget.c
index 46d64b8c5..36eee7e1c 100644
--- a/sys/src/cmd/dict/roget.c
+++ b/sys/src/cmd/dict/roget.c
@@ -63,7 +63,7 @@ rogetprintentry(Entry e, int cmd)
 			spc = 0;
 		}
 			
-		if (p < e.end -2 && strncmp(p, "[ ", 4) == 0){		/* twiddle layout */
+		if (p < e.end -2 && strncmp(p, "[ ", 2) == 0){		/* twiddle layout */
 			outchars(" [");
 			continue;
 		}
diff --git a/sys/src/cmd/plumb/rules.c b/sys/src/cmd/plumb/rules.c
index 806ba39b1..26a298332 100644
--- a/sys/src/cmd/plumb/rules.c
+++ b/sys/src/cmd/plumb/rules.c
@@ -282,7 +282,7 @@ dollar(Exec *e, char *s, int *namelen)
 				return filename(e, e->file);
 			if(memcmp(s, "type", 4) == 0)
 				return nonnil(e->msg->type);
-			if(memcmp(s, "wdir", 3) == 0)
+			if(memcmp(s, "wdir", 4) == 0)
 				return nonnil(e->msg->wdir);
 		}
 	}