That was a pretty interesting twist in the story. There is a check, but due to a confusion in semantics it checks that the user is root (uid == 0) instead of the pointer!