do not use strndup