You don't need the ampersand in either the scanf() or printf() calls, your compiler should be warning you about these issues in the code you posted.
In function 'int main()': 4:16: warning: format '%s' expects argument of type 'char*', but argument 2 has type 'char**' [-Wformat=] 5:17: warning: format '%s' expects argument of type 'char*', but argument 2 has type 'char**' [-Wformat=]
By the way the "%s" format specifier expects a pointer to an array of char. And where are you allocating/assigning memory for that uninitialized pointer?