I feel suspicious with the functions condition_tokenize(), tmpl_afrom_str() and tmpl_alloc(). I think that the length used for tmpl_alloc() includes the quotes, and the value is stored directly in vpt->len. Unfortunatly, I don't dare to fix it myself, I'm pretty sure I'll break everything else. :) -- LRS This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.