Martin Prikryl points out that need_pw may be used uninitialised.