Whoops, this is unnecessary.

exec/load/fido_syscfg.js

@@ -18,6 +18,8 @@
  * get_pw(node)		node is a address string to look up a password for.  matches against wildcards.
  * match_pw(node, pw)	checks that the specified password string (pw) matches the password for the given node address (node).
  */
+var fido_addr = load({}, 'fidoaddr.js');
+
 function SBBSEchoCfg ()
 {
 	var line;
@@ -62,8 +64,8 @@ function SBBSEchoCfg ()
 }
 SBBSEchoCfg.prototype.get_ticpw = function(node)
 {
+  if (!fido_addr.is_valid(node)) throw 'get_ticpw: Invalid address ' + node;
 	var n = node;
-
 	while(n) {
 		if (this.ticpass[n] !== undefined)
 			return this.ticpass[n];
@@ -80,8 +82,8 @@ SBBSEchoCfg.prototype.get_ticpw = function(node)
 };
 SBBSEchoCfg.prototype.get_pw = function(node)
 {
+  if (!fido_addr.is_valid(node)) throw 'get_pw: Invalid address ' + node;
 	var n = node;
-
 	while(n) {
 		if (this.pktpass[n] !== undefined)
 			return this.pktpass[n];