Reported by Dan Magenheimer (note: the bug didn't affect
	the existing kernel, since the possible values passed to
	the routine were always "safe").