SSL3_RT_MAX_TLS13_ENCRYPTED_LENGTH
if (rec->length > SSL3_RT_MAX_TLS13_ENCRYPTED_LENGTH) {
len = SSL3_RT_MAX_TLS13_ENCRYPTED_LENGTH;