ExpandEnvName() must allocate one more byte,