Overly aggressive slowloris check?

[DemiMarie]

The slowloris check seems to be overly agressive: if I am reading the code correctly, it requires that the entire header arrive by the end of the second call to the parser. The need for this seems to be due to the code not keeping enough state internally.

[DemiMarie]

Nevermind, I got the return values mixed up. For anyone else reading this: the slowloris check ensures parsing the header (a non-incremental operation) is done no more than twice, avoiding what would otherwise be an O(n²) complexity.