The "strcmp" function is supposed to have 3 possible return values - -1, 0 or 1. However, when it fails (for example when we pass an array as an argument), it returns NULL. Because the if statement has "==" instead of "===", NULL == 0, and the check passes.
We can reach NULL by sending pwd as an array.
![](https://i.imgur.com/2WXIBju.png)