http: do not try to parse request-line if we do not have enough bytes

1 files changed, 2 insertions, 0 deletions

diff --git a/http.c b/http.c
index 9a641da8..636ac5a3 100644
--- a/http.c
+++ b/http.c
@@ -1702,6 +1702,8 @@ evhttp_parse_request_line(struct evhttp_request *req, char *line, size_t len)
 		--eos;
 		--len;
 	}
+	if (len < strlen("GET / HTTP/1.0"))
+		return -1;
 
 	/* Parse the request line */
 	method = strsep(&line, " ");