diff --git a/library/ssl_msg.c b/library/ssl_msg.c
index 083c8d2..0b31a3b 100644
--- a/library/ssl_msg.c
+++ b/library/ssl_msg.c
@@ -3757,7 +3757,7 @@
 
     /* Check actual (decrypted) record content length against
      * configured maximum. */
-    if( ssl->in_msglen > MBEDTLS_SSL_IN_CONTENT_LEN )
+    if( rec->data_len > MBEDTLS_SSL_IN_CONTENT_LEN )
     {
         MBEDTLS_SSL_DEBUG_MSG( 1, ( "bad message length" ) );
         return( MBEDTLS_ERR_SSL_INVALID_RECORD );