service: always restrict rx to serve_buf_size

diff --git a/lib/service.c b/lib/service.c
index 88e7d08..6a42dd2 100644 (file)
--- a/lib/service.c
+++ b/lib/service.c
@@ -1064,6 +1064,9 @@ read:
                                        eff_buf.token_len = context->pt_serv_buf_size;
                                }
 
+                               if (eff_buf.token_len > context->pt_serv_buf_size)
+                                       eff_buf.token_len = context->pt_serv_buf_size;
+
                                eff_buf.token_len = lws_ssl_capable_read(wsi,
                                        (unsigned char *)eff_buf.token, pending ? pending :
                                        eff_buf.token_len);