}
            n = m + 1;
            kn[m] = kn[n] = 0;
            for (j = 0; j < 28; ++j) {
                l = j + totrot[i];
                if (l < 28) {
                    pcr[j] = pc1m[l];
                } else {
                    pcr[j] = pc1m[l - 28];
                }
            }
            for (j = 28; j < 56; ++j) {
                l = j + totrot[i];
                if (l < 56) {

    assertEquals(Range.atMost(8), range.span(Range.atMost(2)));

    // adjacent below
    assertEquals(Range.closed(2, 8), range.span(Range.closedOpen(2, 4)));
    assertEquals(Range.atMost(8), range.span(Range.lessThan(4)));

    // overlap below
    assertEquals(Range.closed(2, 8), range.span(Range.closed(2, 6)));
    assertEquals(Range.atMost(8), range.span(Range.atMost(6)));

    // enclosed with same start

        byte[] blob = new byte[28 + avPairsLength + 4];
        Encdec.enc_uint32le(0x00000101, blob, 0); // Header
        Encdec.enc_uint32le(0x00000000, blob, 4); // Reserved
        Encdec.enc_uint64le(nanos1601, blob, 8);
        System.arraycopy(clientChallenge, 0, blob, 16, 8);
        Encdec.enc_uint32le(0x00000000, blob, 24); // Unknown
        System.arraycopy(avPairs, 0, blob, 28, avPairsLength);

            assertTrue(bytesRead > 0);
            // readDataWireFormat returns bytes consumed from header, not full buffer
            assertEquals(28, bytesRead); // Header + one referral structure
            assertNotNull(response.getDfsResponse());
        }

        @Test
        @DisplayName("Should handle readDataWireFormat with offset")

            bb.putShort((short) 20); // pathOffset
            bb.putShort((short) 24); // altPathOffset
            bb.putShort((short) 28); // nodeOffset

            // Add path string at offset 20 (8 + 20 = 28)
            bb.position(28);
            bb.put("\\test\0".getBytes(StandardCharsets.UTF_16LE));

            int bytesDecoded = buffer.decode(testBuffer, 0, testBuffer.length);

    @Test
    public void testExcessiveBufferSizes() {
        byte[] buffer = createBasicNegotiateResponseBuffer();

        // Test excessive maxTransactSize (> 16MB)
        SMBUtil.writeInt4(20 * 1024 * 1024, buffer, 28); // 20MB
        SMBUtil.writeInt4(1024 * 1024, buffer, 32); // 1MB read size - valid
        SMBUtil.writeInt4(1024 * 1024, buffer, 36); // 1MB write size - valid

    assertEquals(Range.atMost(8), range.span(Range.atMost(2)));

    // adjacent below
    assertEquals(Range.closed(2, 8), range.span(Range.closedOpen(2, 4)));
    assertEquals(Range.atMost(8), range.span(Range.lessThan(4)));

    // overlap below
    assertEquals(Range.closed(2, 8), range.span(Range.closed(2, 6)));
    assertEquals(Range.atMost(8), range.span(Range.atMost(6)));

    // enclosed with same start

        Encdec.enc_uint32le(0x00000000, temp, 24); // Unknown
        if (avPairs != null) {
            System.arraycopy(avPairs, 0, temp, 28, avPairsLength);
        }
        Encdec.enc_uint32le(0x00000000, temp, 28 + avPairsLength); // mystery bytes!

        return NtlmUtil.computeResponse(responseKeyNT, serverChallenge, temp, 0, temp.length);
    }

    /**

	SUBSW $(44<<12), R6, R9                    // SUBSW $180224, R6, R9         // c9b04071
	SUBS $(1804<<12), R13, R9                  // SUBS $7389184, R13, R9        // a9315cf1
	SUBSW R22->28, R6, R7                      // c770966b
	SUBSW R22>>28, R6, R7                      // c770566b
	SUBS R26<<15, R6, R16                      // d03c1aeb
	SVC $0                                     // 010000d4

        assertEquals(Smb2ChangeNotifyRequest.FILE_NOTIFY_CHANGE_FILE_NAME, SMBUtil.readInt4(buffer, offset + 24));

        // Verify reserved field is zero
        assertEquals(0, SMBUtil.readInt4(buffer, offset + 28));
    }

    @Test
    @DisplayName("Should read empty bytes from wire format")
    void testReadBytesWireFormat() {
        // Given
        byte[] buffer = new byte[256];
        int offset = 10;