I think this docstring sentence could use fixing. It returns the password's length, and sets the password in a passed-in buffer. I realize this is just crappy C-style return-without-actually returning, but still :)