Index: lighttpd-1.4.28/src/response.c
===================================================================
--- lighttpd-1.4.28.orig/src/response.c	2012-06-10 15:58:10.996189531 +0200
+++ lighttpd-1.4.28/src/response.c	2012-06-10 15:59:13.952646446 +0200
@@ -664,7 +664,7 @@
 				}
 
 				if (slash) pathinfo = slash;
-			} while ((found == 0) && (slash != NULL) && ((size_t)(slash - srv->tmp_buf->ptr) > (con->physical.basedir->used - 2)));
+			} while ((found == 0) && (slash != NULL) && ((size_t)(slash - srv->tmp_buf->ptr) >= (con->physical.basedir->used - 2)));
 
 			if (found == 0) {
 				/* no it really doesn't exists */