From 0f50e4b7fcd1ece6a58432b9b7dfa1f9e9d0cfb5 Mon Sep 17 00:00:00 2001
From: Reed Allman <rdallman10@gmail.com>
Date: Fri, 8 Sep 2017 01:48:32 -0700
Subject: [PATCH] fix neg content length

---
 api/server/runner.go | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/api/server/runner.go b/api/server/runner.go
index 142a95eec..d3791da40 100644
--- a/api/server/runner.go
+++ b/api/server/runner.go
@@ -69,7 +69,11 @@ func (s *Server) serve(c *gin.Context, appName, path string) {
 
 	if model.Type == "async" {
 		// TODO we should push this into GetCall somehow (CallOpt maybe) or maybe agent.Queue(Call) ?
-		buf := bytes.NewBuffer(make([]byte, c.Request.ContentLength)[:0]) // TODO sync.Pool me
+		contentLength := c.Request.ContentLength
+		if contentLength < 128 { // contentLength could be -1 or really small, sanitize
+			contentLength = 128
+		}
+		buf := bytes.NewBuffer(make([]byte, int(contentLength))[:0]) // TODO sync.Pool me
 		_, err := buf.ReadFrom(c.Request.Body)
 		if err != nil {
 			handleErrorResponse(c, models.ErrInvalidPayload)