When I invoke somewhere my function the parameter is within dirty string, thus I did filtering:
char username[20] = { 0 };
memcpy(username, _username->user.s, _username->user.len);
//_username->user.s is with dirty string, and username is a buffer after initialization, which should be without dirty string.