Merge pull request #3424 from ronald-cron-arm/ssl_write_client_hello-2.7

[Backport 2.7] Bounds checks in ssl_write_client_hello