add a comment that memcmp is not hostile here