the crypt() call can return NULL in some error conditions. One of those is when the computer is running in FIPS mode and an MD5 or DES hash is requested. Attached patch fixes the direct/indirect calls to crypt() where it is not checked for NULL before being used in operations as strchr() or strcmp()
Created attachment 579707 [details] patch hanlding crypt() returning NULL
Build in rawhide. thanks! let me know if you think this deserves stable updates...