276c276,278
< os.length=i;
---
> os.length = i;
> if (os.length > sizeof ret->session_id) /* can't happen */
> os.length = sizeof ret->session_id;
279d280
< die(os.length <= sizeof ret->session_id);