For consistency, set s->init_num in the 'reuse_message' case (if s23_srvr.c faked the message, s->init_num is 0).
diff --git a/ssl/s3_both.c b/ssl/s3_both.c index 409120b..8e840ec 100644 --- a/ssl/s3_both.c +++ b/ssl/s3_both.c
@@ -357,7 +357,8 @@ } *ok=1; s->init_msg = s->init_buf->data + 4; - return((int)s->s3->tmp.message_size); + s->init_num = (int)s->s3->tmp.message_size; + return s->init_num; } p=(unsigned char *)s->init_buf->data;