The startauthentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdmgreetergetauthentication_user function, which allows local users to cause a denial of service (NULL pointer dereference) via an empty username.