There might be a security issue here.

I don't see you checking the value of _value_size.