diff --git a/ssl/s3_clnt.c b/ssl/s3_clnt.c
index 5f891d4..d0dc2bd 100644
--- a/ssl/s3_clnt.c
+++ b/ssl/s3_clnt.c
@@ -629,8 +629,9 @@
 
     /* If resending the ClientHello in DTLS after a HelloVerifyRequest, don't
      * renegerate the client_random. The random must be reused. */
-    if (!SSL_IS_DTLS(s) || !s->d1->send_cookie) {
-      ssl_fill_hello_random(s, 0, p, sizeof(s->s3->client_random));
+    if ((!SSL_IS_DTLS(s) || !s->d1->send_cookie) &&
+        !ssl_fill_hello_random(s, 0, p, sizeof(s->s3->client_random))) {
+      goto err;
     }
 
     /* Do the message type and length last. Note: the final argument to