openssl: fix for CVE-2014-0198

openssl: fix for CVE-2014-0198