chpasswd stack overflow

Hi Tomasz,


the strcat is overflowing salt in chpasswd.c and chgpasswd.c:
....
 if (!eflg) {
                        if (md5flg) {
                                char salt[12] = "$1$";

                                strcat (salt, crypt_make_salt ());
                                cp = pw_encrypt (newpwd, salt);
                        } else
                                cp = pw_encrypt (newpwd,
				crypt_make_salt ());
                }
.....

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=213052