[UB] memcpy could be called on null dst pointer in function escrypt_r about libsodium

[jedisct1]

Static analysis tools are nice, but that argument is never expected to be NULL.

Not only it wouldn't make any sense to use the crypto_pwhash_*() functions that way, but all their arguments are tagged __attribute__ ((nonnull)), so the compiler is going to scream if you ever do that.

Also, the first thing these functions do is to zero the output buffer, so a bus error would happen way before the memcpy().

[cchr-ledger]

Fair enough, thanks for the explanation.