And I want to mention that removing calls to functions that install atexit() handlers does _not_ remove the attack vector. For that, you would have to avoid calling exit(), including the implied call to exit() upon return from main(). --chris