Could this overflow ``filename`` if you send a crafted message with a very long MD5 command?