1168 	u_char tmp, padlen, pad = 0;  in ssh_packet_send2_wrapped()  local
1222 	padlen = block_size - (len % block_size);  in ssh_packet_send2_wrapped()
1223 	if (padlen < 4)  in ssh_packet_send2_wrapped()
1224 		padlen += block_size;  in ssh_packet_send2_wrapped()
1232 		tmp = (len + padlen) % state->extra_pad;  in ssh_packet_send2_wrapped()
1238 		    pad, len, padlen, state->extra_pad));  in ssh_packet_send2_wrapped()
1239 		tmp = padlen;  in ssh_packet_send2_wrapped()
1240 		padlen += pad;  in ssh_packet_send2_wrapped()
1242 		if (padlen < tmp)  in ssh_packet_send2_wrapped()
1246 	if ((r = sshbuf_reserve(state->outgoing_packet, padlen, &cp)) != 0)  in ssh_packet_send2_wrapped()
1250 		arc4random_buf(cp, padlen);  in ssh_packet_send2_wrapped()
1253 		explicit_bzero(cp, padlen);  in ssh_packet_send2_wrapped()
1264 	cp[4] = padlen;  in ssh_packet_send2_wrapped()
1266 	    len, padlen, aadlen));  in ssh_packet_send2_wrapped()
1562 	u_int padlen, need;  in ssh_packet_read_poll2()  local
1727 	padlen = sshbuf_ptr(state->incoming_packet)[4];  in ssh_packet_read_poll2()
1728 	DBG(debug("input: padlen %d", padlen));  in ssh_packet_read_poll2()
1729 	if (padlen < 4)	{  in ssh_packet_read_poll2()
1731 		    "Corrupted padlen %d on input.", padlen)) != 0 ||  in ssh_packet_read_poll2()
1739 	    ((r = sshbuf_consume_end(state->incoming_packet, padlen)) != 0))  in ssh_packet_read_poll2()