chpasswd: fix possible free() or non-allocated string. +8 bytes