diff -Naur a/lighttpd-1.4.35/src/mod_scgi.c b/lighttpd-1.4.35/src/mod_scgi.c
--- a/lighttpd-1.4.35/src/mod_scgi.c	2014-03-06 19:38:00.000000000 +0530
+++ b/lighttpd-1.4.35/src/mod_scgi.c	2014-07-07 16:16:21.000000000 +0530
@@ -1623,10 +1623,12 @@
 	}
 
 	s = get_http_method_name(con->request.http_method);
-	scgi_env_add(p->scgi_env, CONST_STR_LEN("REQUEST_METHOD"), s, strlen(s));
+	if (s)
+		scgi_env_add(p->scgi_env, CONST_STR_LEN("REQUEST_METHOD"), s, strlen(s));
 	scgi_env_add(p->scgi_env, CONST_STR_LEN("REDIRECT_STATUS"), CONST_STR_LEN("200")); /* if php is compiled with --force-redirect */
 	s = get_http_version_name(con->request.http_version);
-	scgi_env_add(p->scgi_env, CONST_STR_LEN("SERVER_PROTOCOL"), s, strlen(s));
+	if (s)
+		scgi_env_add(p->scgi_env, CONST_STR_LEN("SERVER_PROTOCOL"), s, strlen(s));
 
 #ifdef USE_OPENSSL
 	if (buffer_is_equal_caseless_string(con->uri.scheme, CONST_STR_LEN("https"))) {