Fix bug in CVE-2011-4619: check we have really received a client hello