f7ce56a6d4
show_confirm() sized its window purely from message content, with no upper bound — a long line (the Cryptgeon password URL in the post-issuance "send email?" prompt) could easily exceed a narrow terminal's width (e.g. a serial console), making curses.newwin() raise "curses function returned NULL" and crash the whole app. show_cert_form() had the same unguarded newwin() call, just with a fixed 13x62 size instead of content-driven. Clamp both windows' height/width to the actual screen size, and wrap newwin() itself in try/except as a last-resort fallback (declined confirm / cancelled form) in case clamping still isn't enough. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>