The bug isn't in msvcrt.dll, it's in your code. If you pass NULL in to a function that wasn't expecting it, bad things are gonna happen.