Safe casts - we are assured that len_read is positive, but it must be stored as an int to initially check the ap_get_client_block() result.
httpd/httpd/trunk/modules/generators/mod_cgi.c