information security question.

For instance, what happens if a client connects to SimpleWebServer, and sends a carriage return as its first message instead of sending a properly formatted GET message? SimpleWebServer would crash! How would better requirements have potentially eliminated this problem? Requirements could have been written for the SimpleWebServer program that specifies how it should behave in corner cases. Your suggestion to fix the issue in this case is highly appreciated.