actually, there could be a problem here: if req is bogus, it does not get modified thus crippling later code. Not sure of who sends it. Should it be modified ?