> In this instance it wouldn't matter, since the string he's comparing > to is the empty string, thus strcmp will always break after a single > character comparison. Never trust data, even yours! ;-) An address of an empty string still can be, theorically, overwritten to exploit the lack of lenght guard. Anyway, it's going off-topic. Will come back as a Coverity issue, maybe. Bye, Philippe.