wordexp() doesn't initialise its argument on error