7858e40
--- cvs-1.11.22/src/login.c.old	2006-06-28 13:41:14.000000000 +0200
7858e40
+++ cvs-1.11.22/src/login.c	2006-06-28 13:35:40.000000000 +0200
7858e40
@@ -600,7 +600,7 @@
7858e40
        context, then assume they have supplied the correct, scrambled
7858e40
        password. */
7858e40
     if (cvs_password)
7858e40
-	return cvs_password;
7858e40
+	return xstrdup(cvs_password);
7858e40
 
7858e40
     if (getenv ("CVS_PASSWORD") != NULL)
7858e40
     {