On Wednesday 16 July 2008, Alexey Dokuchaev wrote: > + if (restart) > + p = (uByte *)(restart) + restart->bLength; Maybe you can add some extra range checks here. Remember the descriptors come from the device itself, and might be corrupt. --HPS