549c549,553
< die(i <= sizeof s->session->session_id);
---
> if (i > sizeof s->session->session_id)
> {
> SSLerr(SSL_F_SSL3_CLIENT_HELLO, SSL_R_INTERNAL_ERROR);
> goto err;
> }