Without this patch _len_get reads one byte beyond the con->rxbuf if the incoming packet consists only of the byte 0x01.