I run my pound instances through libsafe (provided by my Mandriva
installs) which will check for buffer overflows and terminate the
process if it detects a string overrun.

Which, it did. (to my surprise)

It's a simple, one character fix in the parse_HTTPS call. (thus only
happens if using SSL listeners)

See attached patch.  I'm not sure if it should be %ld or %li.  %li works
for me, I'm not sure if there are portability concerns. 

Joseph Gooch
Sapphire Suite Product Manager
K12 Systems, Inc.
(866) 366-9540