Index: auth-passwd.c =================================================================== RCS file: /cvs/openssh/auth-passwd.c,v retrieving revision 1.90 retrieving revision 1.91 diff -u -r1.90 -r1.91 --- auth-passwd.c 8 Mar 2009 00:40:28 -0000 1.90 +++ auth-passwd.c 25 Apr 2012 23:51:28 -0000 1.91 @@ -209,6 +209,7 @@ * Authentication is accepted if the encrypted passwords * are identical. */ - return (strcmp(encrypted_password, pw_password) == 0); + return encrypted_password != NULL && + strcmp(encrypted_password, pw_password) == 0; } #endif