952c952,956
< die(sl <= sizeof s->session->session_id);
---
> if (sl > sizeof s->session->session_id)
> {
> SSLerr(SSL_F_SSL3_SEND_SERVER_HELLO, SSL_R_INTERNAL_ERROR);
> return -1;
> }