The library functions and return states are supposed to be well-defined. If you think you've found a cookie leak on an error path within a library function, we can investigate that and fix the library if need be. Alasdair