This is reported against 0.9.8; please open a new ticket if still a problem with current releases. It's been eight years, unlikely to happen with a new patch. -- Rich Salz, OpenSSL dev team; rsalz at openssl.org