Merge pull request #3418 from ronald-cron-arm/ssl_write_client_hello-2.16

[Backport 2.16] Bounds checks in ssl_write_client_hello