diff --git a/NEWS b/NEWS
index 8888ce2f..93ec4a04 100644
--- a/NEWS
+++ b/NEWS
@@ -6,6 +6,7 @@ NEWS
 - 1.4.38
   * [stat-cache] fix handling of collisions, might have returned wrong data (fixes #2669)
   * [core] allocate at least 4k buffer for incoming data
+  * [core] fix search for header end if split across chunks (fixes #2670)
 
 - 1.4.37 - 2015-08-30
   * [mod_proxy] remove debug log line from error log (fixes #2659)
diff --git a/src/connections.c b/src/connections.c
index 46e46b1f..e5deb50c 100644
--- a/src/connections.c
+++ b/src/connections.c
@@ -932,7 +932,7 @@ static int connection_handle_read_state(server *srv, connection *con)  {
 
 					for ( ; cc; cc = cc->next, j = 0 ) {
 						size_t bblen = buffer_string_length(cc->mem) - cc->offset;
-						const char *bb = c->mem->ptr + cc->offset;
+						const char *bb = cc->mem->ptr + cc->offset;
 
 						for ( ; j < bblen; j++) {
 							ch = bb[j];