Codacy (flawfinder, CWE-126) flags strlen on the locale's decimal point. The string is NUL-terminated by localeconv(), so the behavior is the same. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N5NasAgbDGG28MqXjQvLqp Signed-off-by: Claude <noreply@anthropic.com>