Hi, I saw all the other int and size_t conversions to unsigned int. What about ksize(), slab_ksize() and related functions too? It looks like many callers are already expecting unsigned int anyway... net/core/skbuff.c: unsigned int size = frag_size ? : ksize(data); Though some are "int", ew: int pskb_expand_head(struct sk_buff *skb, int nhead, int ntail, gfp_t gfp_mask) { int i, osize = skb_end_offset(skb); int size = osize + nhead + ntail; ... size = SKB_WITH_OVERHEAD(ksize(data)); -Kees -- Kees Cook Pixel Security