[PATCH] Fix buffer overflow in ce_flush().