In line `2310` of `compiler.c`: ``` strcpy(init_name, module_name); ``` This 'call to strcpy' with input from call to getenv may overflow the destination.