Yeah. That's tricky code for a static checker. You have to know that if the caller passes kind = 1 or 2 then range is NULL. The caller users S2002_CFG_KIND_DIGITAL_IN and S2002_CFG_KIND_DIGITAL_OUT for 1 and 2. regards, dan carpenter