And wrt to the msgb_pull patch :
- I'm not sure it's the correct way to fix it. Having mgb_pull return a pointer to the end of the bytes we just removed seems a very weird API ... maybe the bug is msgb_pull itself.
- The addition of the handler for KEY_MENU should be a separate patch, not in that one.