Remote code execution via chunk-length misvalidation

Heap buffer overflow in ReadyMedia 1.1.15 through 1.3.2 allows remote attackers to execute code via a chunked HTTP request. In ParseHttpHeaders(), operator precedence stores the Boolean result of the chunk-size comparison as req_chunklen, allowing oversized values to pass validation and later reach memmove() as an unchecked length. No authentication or user interaction is required; successful exploitation runs code with the privileges of the minidlna service account.