* New upstream release (http://www.openssh.com/txt/release-6.1).

  - Enable pre-auth sandboxing by default for new installs.
  - Allow "PermitOpen none" to refuse all port-forwarding requests
    (closes: #543683).

1 files changed, 2 insertions, 1 deletions

diff --git a/auth-passwd.c b/auth-passwd.c
index b1c6ce092..68bbd18dd 100644
--- a/auth-passwd.c
+++ b/auth-passwd.c
@@ -209,6 +209,7 @@ sys_auth_passwd(Authctxt *authctxt, const char *password)
          * Authentication is accepted if the encrypted passwords
          * are identical.
          */
-        return (strcmp(encrypted_password, pw_password) == 0);
+        return encrypted_password != NULL &&
+            strcmp(encrypted_password, pw_password) == 0;
 }
 #endif