You would use updatelib demo application to reproduce the issue. To easily reproduce, overwrite this modified source code : link text in the demo application and try. Please ensure pex.l2enable, pex.mpenable must be set.
We were able to see the issue with a few sectors combined reading. One sector size is 512 bytes.
Yes, as you said, it returns correct number of bytes but wrong data without error message.
This has been fixed in the 1.5B4 image that you can download from here.
Please let us know if you have any other questions?