Description of problem: Empty username is threated as valid when comparing the username with password to check that the password doesn't contain the username. Actual results: The password_check function fails on empty username string with PWQ_ERROR_USER_CHECK. Expected results: It should consider zero length strings as NULL and continue with other checks... Additional info: Originaly filed at https://fedorahosted.org/libpwquality/ticket/1 .