so how to safely use strstr then? this is truly a bug hard to find, yet another caveat.

not sure if fuzz testing can help here.

I wonder how many implicit-const-to-non-cost API are in ANSI C and Posix C