diff --git a/package/uhttpd/src/uhttpd-cgi.c b/package/uhttpd/src/uhttpd-cgi.c
index 2f94fe26f58f65f66e1d223b18642b30ae9d37bd..16bfda7dba5b6400bb5f0af91aee2adc3951c503 100644
--- a/package/uhttpd/src/uhttpd-cgi.c
+++ b/package/uhttpd/src/uhttpd-cgi.c
@@ -42,7 +42,7 @@ static struct http_response * uh_cgi_header_parse(char *buf, int len, int *off)
 
 		bufptr = &buf[0];
 
-		for( pos = 0; pos < off; pos++ )
+		for( pos = 0; pos < *off; pos++ )
 		{
 			if( !hdrname && (buf[pos] == ':') )
 			{