pb->buf_end is already set by url_open_buf()