const correctness (3)