walter harms <wharms@xxxxxx> wrote: > > + ret = dsize; > > + if (size > 0) { > > + if (dsize > size) { > > + ret = -ERANGE; > > + goto error_key; > > } > > + memcpy(buffer, data, dsize); > > } > > > > i am confused: if size is <= 0 then the error is in dsize ? See this bit, before that hunk: > + if (ret < 0) > + goto error_key; David