plug a memory leak, don't use strcpy/strcat