Sorry, I wasn't very clear. I was saying that in addition to failing (b), (c), and (d), there's also an additional problem with called the length extension attack.