SSL_get_finished determine length

[Samuel Williams]

Is it valid to call:

size_t size = SSL_get_finished(ssl, NULL, 0);

So we can determine the length?

Because SSL_get_finished invokes memcpy even if the size is 0, so is the
undefined behaviour?

Thanks.