On Sat, Jun 12, 2010 at 06:41:48PM +0200, Michael Karcher wrote: > + // This check cannot overflow as tag_len has at most 28 bits > + if (p->buf_size + tag_len < tag_len + 5) ??? Without overflows this is equivalent to p->buf_size < 5