...
Risk Assessment
The modified string object may be overwritten by a subsequent call to the getenv(), setlocale(), or localeconv() function functions. Depending on the implementation, modifying the string returned by getenv() object pointed to by the return value of these functions may or may not modify the environment.
...