It turns out that the combination splitpath() could return an empty
string for the directory part.  This doesn't play well with catdir().
Reviewed-by: NRich Salz <rsalz@openssl.org>