A resend-timer mistake in OpenSSL's UDP handshake can hand leftover heap bytes to the other side of a DTLS session.