diff --git a/modules/lua/lua_request.c b/modules/lua/lua_request.c

index 61a14f5..1dc676f 100644

--- a/modules/lua/lua_request.c

+++ b/modules/lua/lua_request.c

@@ -303,6 +303,7 @@ static int req_parsebody(lua_State *L)

             if (!crlf) break;

             key = (char *) apr_pcalloc(r->pool, 256);

             filename = (char *) apr_pcalloc(r->pool, 256);

+            if (end - crlf <= 8) break;

             vlen = end - crlf - 8;

             buffer = (char *) apr_pcalloc(r->pool, vlen+1);

             memcpy(buffer, crlf + 4, vlen);