let's be safe about strdup