simple strcpy() exploit works