PR: 2194

I can't think of any other cause for failure

Check return value if d2i_PBEPARAM().

Remove useless num = 0 assignment.

Remove redundant cases on sock_ctrl(): default case handles them.

Submitted by: David Woodhouse <dwmw2@infradead.org>

Pass passphrase minimum length down to UI.

Submitted by: Torsten Hilbrich <torsten.hilbrich@secunet.com>

Fix memory leak when engine name cannot be loaded.

Also, add missing CHANGES entry for CVE-2009-3245 (code changes submitted to this branch on 23 Feb 2010),
and further harmonize this version of CHANGES with the versions in the current branches.

Clear error queue in a few places in SSL code where errors are expected
so they don't stay in the queue.

ghash-x86_64.pl: minimize stack frame usage.
ghash-x86.pl: modulo-scheduling MMX loop in respect to input vector
results in up to 10% performance improvement.

Submitted By: Jaroslav Imrich <jaroslav.imrich@disig.sk>

The prompt_info and wrong_info parameters can be empty strings which
can produce confusing prompts. Treat empty string same as NULL.

security relevent we'd better list it.

Reject PSS signatures with unsupported trailer value.