[BUG] check_post: limit analysis to the buffer length

If "balance url_param XXX check_post" is used, we must bound the
number of bytes analysed to the buffer's length.

src/backend.c

@@ -289,6 +289,9 @@ struct server *get_server_ph_post(struct session *s)
 		len = chunk;
 	}
 
+	if (len > req->l - body)
+		len = req->l - body;
+
 	p = params;
 
 	while (len > plen) {