OpenSSL: Don't overflow the output length in EVP_CipherUpdate calls

Note it is backported from OpenSSL 1.1.1j to fix CVE-2021-23840.

https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1

Git Hash: 9e94eac9765f54671b90150955e0851579959daa
Git Author: jkim@FreeBSD.org

Merge OpenSSL 1.0.2r.

MFC: r331627

Merge OpenSSL 1.0.2o.

MFC: r318899

Merge OpenSSL 1.0.2l.

MFC: r306193

Merge OpenSSL 1.0.2u.

Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.

Additional commits post-branch will follow.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Merge OpenSSL 1.0.2h.

Relnotes: yes

Merge OpenSSL 1.0.2d.

Merge OpenSSL 1.0.1m.

Merge OpenSSL 1.0.1k.

Merge OpenSSL 1.0.1j.

Merge OpenSSL 1.0.1c.

Approved by: benl (maintainer)

Merge OpenSSL 0.9.8k into head.

Approved by: re

This commit was generated by cvs2svn to compensate for changes in r167612,
which included commits to RCS files with non-trunk default branches.

Vendor import of OpenSSL 0.9.8e.

Vendor import of OpenSSL 0.9.8b

Vendor import of OpenSSL 0.9.7d.

Vendor import of OpenSSL 0.9.7a.

Vendor import of OpenSSL release 0.9.7. This release includes
support for AES and OpenBSD's hardware crypto.

Initial import of OpenSSL 0.9.6

Initial import of OpenSSL 0.9.4, sans IDEA and RSA code for patent
infringement reasons.