bug for memcpy()