openssl: Address CVE-2014-0198

This patch fixes issue OS-3. A description of the issue is provided:

The do_ssl3_write function in s3_pkt.c in Open SSL 1.x through 1.0.1g,
when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer
pointer during certain recursive calls, which allows remote attackers to
cause a denial of service (NULL pointer dereference and application crash)
via vectors that trigger an alert condition.