dfs OK; input validation NOT OK