SECURITY: off-by-one in smtp transport (read response)