And wrt to the msgb_pull patch : - I'm not sure it's the correct way to fix it. Having mgb_pull return a pointer to the end of the bytes we just removed seems a very weird API ... maybe the bug is msgb_pull itself. - The addition of the handler for KEY_MENU should be a separate patch, not in that one.