CVE-2020-28018: Use-after-free in tls-openssl.c