The "strcmp" function is supposed to have 3 possible return values - -1, 0 or 1. However, when it fails (for example when we pass an array as an argument), it returns NULL. Because the if statement has "==" instead of "===", NULL == 0, and the check passes.

We can reach NULL by sending pwd as an array.