It does the memcmp() to match the environment variable with the desired key, then accounts for the "=" when calculating length. But it fails to check that the next character is actually an equal sign. In the case of any key which is also the prefix to some other variable.