The call to ob_end_clean() generates an E_NOTICE if no buffer exists. The fix is to replace with the following code:

# flush output buffer to protect download
if ( ob_get_length() ) {
    @ob_end_clean();
}