I think it's not the expected, from a vulnerable response where status_line.length == 2. My worry is if this could lead to parse legit replies as vulnerables.