I'm probably missing something but...

>man strcat

[snip]
DESCRIPTION
The strcat() function appends a copy of the 
string pointed to by the s2 parameter (including
the terminating null byte) to the end of the string
pointed to by the s1 parameter.  The initial byte 
of s2 overwrites the null byte at the end of the 
string pointed to by s1.  When operating on overlapping
strings, the behavior of this function is unreliable.
[download]

How does strcat know where to append the second string w/o a null byte in string 1 ?

email: mandog