argc does not leak its address argument