http://cvs.openssl.org/chngview?cn=21940

--- ssl/s3_enc.c	2009-04-16 17:22:50.000000000 +0000
+++ ssl/s3_enc.c.oden	2012-01-09 14:15:06.000000000 +0000
@@ -512,6 +512,9 @@ int ssl3_enc(SSL *s, int send)
 
 			/* we need to add 'i-1' padding bytes */
 			l+=i;
+			/* the last of these zero bytes will be overwritten
+			 * with the padding length. */
+			memset(&rec->input[rec->length], 0, i);
 			rec->length+=i;
 			rec->input[l-1]=(i-1);
 			}