SSL3_RT_MAX_COMPRESSED_LENGTH
(SSL3_RT_MAX_ENCRYPTED_OVERHEAD+SSL3_RT_MAX_COMPRESSED_LENGTH)
if (rrec.length > SSL3_RT_MAX_COMPRESSED_LENGTH + mac_len) {