memcpy_overflow: use range list from check_user_data2