--- bad/gass/transfer/source/library/globus_gass_transfer_http.c	Mon Jan  5 20:48:11 2004
+++ fix/gass/transfer/source/library/globus_gass_transfer_http.c	Wed Jan 21 19:29:05 2004
@@ -1966,6 +1966,9 @@
     globus_l_gass_transfer_http_lock();
     proto = (globus_gass_transfer_http_listener_proto_t *) arg;
 
+    if (proto->request->connected_subject != GLOBUS_NULL)
+        globus_free(proto->request->connected_subject);
+
     proto->request->connected_subject = globus_libc_strdup(identity);
 
     switch(proto->request->authorization_mode)
@@ -5485,7 +5488,7 @@
 	}
 	if(input[i] == CR)
 	{
-	    if(i + 2 > max_to_scan)
+	    if(i + 2 >= max_to_scan)
 	    {
 		/* not enough data */
 		return GLOBUS_TRUE;