add check for internal error

diff --git a/ssl/s3_pkt.c b/ssl/s3_pkt.c
index 7728284befd9c10846a0b5bc6ef7e0f2ba509f0c..93d1461a32678c9511cc70f85b6a9c60288ee3e2 100644 (file)
--- a/ssl/s3_pkt.c
+++ b/ssl/s3_pkt.c
@@ -167,6 +167,11 @@ static int ssl3_read_n(SSL *s, int n, int max, int extend)
                if (max > max_max)
                        max = max_max;
        }
+       if (n > max) /* does not happen */
+               {
+               SSLerr(SSL_F_SSL3_READ_N,SSL_R_INTERNAL_ERROR);
+               return -1;
+               }
 
        off = s->packet_length;
        newb = s->s3->rbuf.left;