> You still don’t know if some library you use calls getenv() Well, you can know, if you check their imported symbols. (I suppose they could be getting it via

> You still don’t know if some library you use calls getenv() Well, you can know, if you check their imported symbols. (I suppose they could be getting it via dlsym, but what are the odds of that...) So if getenv_r() is added to the C library, and over time third party libraries started adopting it, you could get to the point that you could know no code in your process is calling getenv(), because none of the libraries your process loads import that symbol. They could even add a glibc tunable to make getenv() call abort()... then you could be very sure nobody is calling getenv(), because if anyone ever did, boom