From 609c4c28da633d6fdd0a246afe4e4fd62821ecd3 Mon Sep 17 00:00:00 2001
From: hartmans <hartmans@dc483132-0cff-0310-8789-dd5450dbe970>
Date: Mon, 1 Dec 2008 16:43:19 +0000
Subject: [PATCH] RC4 has a header length that includes the confounder and
 checksum. The trailer length is 0

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mskrb-integ-crypto-iov@21234 dc483132-0cff-0310-8789-dd5450dbe970
---
 src/lib/crypto/arcfour/arcfour_aead.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/lib/crypto/arcfour/arcfour_aead.c b/src/lib/crypto/arcfour/arcfour_aead.c
index 9b74172f59..e9398f4b0c 100644
--- a/src/lib/crypto/arcfour/arcfour_aead.c
+++ b/src/lib/crypto/arcfour/arcfour_aead.c
@@ -41,12 +41,14 @@ krb5int_arcfour_crypto_length(const struct krb5_aead_provider *aead,
 {
     switch (type) {
     case KRB5_CRYPTO_TYPE_HEADER:
-	*length = CONFOUNDERLENGTH;
+	*length = CONFOUNDERLENGTH + hash->hashsize;
 	break;
     case KRB5_CRYPTO_TYPE_PADDING:
 	*length = 0;
 	break;
     case KRB5_CRYPTO_TYPE_TRAILER:
+	*length = 0;
+	break;
     case KRB5_CRYPTO_TYPE_CHECKSUM:
 	*length = hash->hashsize;
 	break;