Add sanity check in ssl3_cbc_digest_record