Oh, thanks for that extra context. I did look a bit further down, but didn't see the loop... This makes much more sense. Looking at the loop though, I think it

Oh, thanks for that extra context. I did look a bit further down, but didn't see the loop... This makes much more sense. Looking at the loop though, I think it does ensure that downloaded == *buf_size: the loop continues while downloaded < *buf_size, and there is a different check for not overflowing. So, overall, downloaded must be exactly equal to *buf_size to exit the loop without an error. So, this seems OK overall.