You might modify the parameters sent to be empty, include non-ASCII characters,

Add the NULL "\0" value to that list. It might upset some programs that do string handling in C. But then, if the OP had Taint checking on (and used it sensibly), it'd be extremely unlikely that anything like that got through.