possible security hole?: 'passwd' segfault