I think you would have to change the API to return a copy of the string as the get_env result which the caller is responsible for free-ing or the env implementa

I think you would have to change the API to return a copy of the string as the get_env result which the caller is responsible for free-ing or the env implementation would have to ensure returned values from get_env are stable and never change which is effectively a memory leak.