Minor nits.
size req->vsl using the proper parameter.
Update test-case now that req->VSL is sized correctly
Fix my typo that meant that we trampled on unowned memory.

Almost pinpointed by Martin using Valgrind.