Just one thing. If we're passing back "sanitized data", then things like pointers should be missing, leaving only fixed size things. Is there something for which we *must* pass a pointer back, given that it is `meaningless' in user-space anyway ? Darren