It seems that lgood is being set to .t. and then to .f. so by the time the rollback command is executed lgood if .f. and the rollback can't execute. Use something else other than lgood in your error routine.