In UI_UTIL_read_pw(), we should look at the size parameter, not at BUFSIZ.