- (djm) [auth-passwd.c] Handle crypt() returning NULL; from Paul Wouters

   via Niels

1 files changed, 2 insertions, 1 deletions

diff --git a/auth-passwd.c b/auth-passwd.c
index b1c6ce092..68bbd18dd 100644
--- a/auth-passwd.c
+++ b/auth-passwd.c
@@ -209,6 +209,7 @@ sys_auth_passwd(Authctxt *authctxt, const char *password)
          * Authentication is accepted if the encrypted passwords
          * are identical.
          */
-        return (strcmp(encrypted_password, pw_password) == 0);
+        return encrypted_password != NULL &&
+            strcmp(encrypted_password, pw_password) == 0;
 }
 #endif