final int exp = size();
        final int actual = getLength();
        if (exp != actual) {
            // Log the size mismatch for debugging but don't throw exception
            // This can occur due to padding alignment differences between size8() and pad8()
            if (log.isDebugEnabled()) {
                log.debug("Size calculation mismatch: expected {} but got {} (difference: {})", exp, actual, actual - exp);
            }

        if (rem < 0) {
            rem = 8 + rem;
        }
        return size + 8 - rem;
    }

    /**
     * Calculates padding needed to align to 8-byte boundary from header start.
     *
     * @param dstIndex the current destination index
     * @return number of padding bytes needed
     */
    protected final int pad8(final int dstIndex) {
        final int fromHdr = dstIndex - this.headerStart;

        assertEquals((byte) 0x00, getPrivateField(cmd, "maxSetupCount"));
        assertEquals(4096, getPrivateField(cmd, "maxDataCount"));
    }

    @Test
    @DisplayName("writeSetupWireFormat writes subCommand and padding")
    void testWriteSetup() throws Exception {
        Trans2GetDfsReferral cmd = new Trans2GetDfsReferral("foo");
        byte[] buf = new byte[2];
        int r = cmd.writeSetupWireFormat(buf, 0);

            baos.write(new byte[8]);

            // SERVER_CHECKSUM data
            writeLittleEndianInt(baos, PacSignature.KERB_CHECKSUM_HMAC_MD5);
            baos.write(mockChecksum);

            // Padding to align
            while (baos.size() < 104) {
                baos.write(0);
            }

            // PRIVSVR_CHECKSUM data
            writeLittleEndianInt(baos, PacSignature.KERB_CHECKSUM_HMAC_MD5);

        stale-issue-label: "status:stale"
        days-before-stale: 0
        days-before-close: 30
        remove-stale-when-updated: true

        }

        @Test
        @DisplayName("Should align to 8-byte boundary")
        void testPaddingAlignment() {
            // Test various name lengths to ensure proper padding
            for (int nameLen = 1; nameLen <= 32; nameLen++) {
                byte[] name = new byte[nameLen];
                Arrays.fill(name, (byte) 'A');

 *
 * <pre>
 *        toString: S-1-5-21-4133388617-793952518-2001621813-512
 * toDisplayString: WNET\Domain Admins
 *         getType: 2
 *     getTypeText: Domain group
 *   getDomainName: WNET
 *  getAccountName: Domain Admins
 * </pre>
 */
public interface SID {

    /**
     * SID type indicating no type information.
     */
    int SID_TYPE_USE_NONE = 0;

}\n\n  _resetScrollbar() {\n    // Restore fixed content padding\n    const fixedContent = [].slice.call(document.querySelectorAll(SELECTOR_FIXED_CONTENT))\n    $(fixedContent).each((index, element) => {\n      const padding = $(element).data('padding-right')\n      $(element).removeData('padding-right')\n      element.style.paddingRight = padding ? padding : ''\n    })\n\n    // Restore sticky content\n    const elements = [].slice.call(document.querySelectorAll(`${SELECTOR_STICKY_CONTENT}`))\n   ...

        int bytesDecoded = smbInfoAllocation.decode(buffer, 0, buffer.length);

        // Verify - actual implementation reads 20 bytes (4 + 4 + 4 + 4 + 4)
        // bytesPerSect is read as Int2 but advances by 4 bytes (padding)
        assertEquals(20, bytesDecoded);

        // Verify capacity calculation: alloc * sectPerAlloc * bytesPerSect
        long expectedCapacity = alloc * sectPerAlloc * bytesPerSect;

# limitations under the License.
# ==============================================================================
#
# Sets up custom apt sources for our TF images.

# Prevent apt install tzinfo from asking our location (assumes UTC)
export DEBIAN_FRONTEND=noninteractive

# Set up shared custom sources
apt-get update
apt-get install -y gnupg ca-certificates