xcopy: Fix out-of-bound access when parsing arguments. We didn't check if the argument string is long enough before indexing into it.