blead also has not much more protection other then

dSAVE_ERRNO;
const struct spwd * const spwent = getspnam(pwent->pw_name);
RESTORE_ERRNO;
[download]

You can try to disable HAS_GETSPNAM in config.h after Configure.