throw new IOException("Malformed SPNEGO token " + constructed);
            }

            final ASN1Sequence vec = (ASN1Sequence) constructed.getBaseObject();

            final ASN1ObjectIdentifier spnego = (ASN1ObjectIdentifier) vec.getObjectAt(0);
            if (!SPNEGO_OID.equals(spnego)) {
                throw new IOException("Malformed SPNEGO token, OID " + spnego);
            }

        assertNotNull(cifsContextWrapper.get(url));
    }

    @Test
    void testGetSmbResource_MalformedURLException() {
        // Test get(String url) with a malformed URL
        String malformedUrl = "invalid-url";
        CIFSException thrown = assertThrows(CIFSException.class, () -> {
            cifsContextWrapper.get(malformedUrl);
        });

    }

    @Test
    @DisplayName("byte[] ctor: malformed DER is wrapped as PACDecodingException (IOException path)")
    void byteArrayConstructor_malformedDER_throwsWrapped() {
        // Arrange: Truncated SEQUENCE (0x30 len=2 but only 1 byte of content)
        byte[] malformed = new byte[] { 0x30, 0x02, 0x01 };

        // Act + Assert

            if (derToken.getTagClass() != BERTags.APPLICATION) {
                throw new PACDecodingException("Malformed kerberos ticket");
            }
            stream.close();
        } catch (IOException e) {
            throw new PACDecodingException("Malformed kerberos ticket", e);
        }

        ASN1Sequence sequence;
        try {

        // Test version patterns with different separators
        String[] args = new String[] { "11:-Dprop=value:with:colons", "8-:-Xbootclasspath/a:/path/to/jar", "malformed11:-invalid", // Should not match pattern
                "11-malformed:-invalid" // Should not match pattern
        };

        String[] result = JvmUtil.filterJvmOptions(args);

        assertTrue(names.isEmpty() || names.size() >= 0); // Will be empty due to ResourceUtil static method
    }

    // Test loadDataStoreNameList with malformed XML
    public void test_loadDataStoreNameList_malformedXml() throws Exception {
        File jarFile = new File(tempDir, "malformed-datastore.jar");
        createTestJarWithXml(jarFile, "This is not valid XML");

        DataStoreFactory testFactory = new DataStoreFactory() {

    /**
     * Parses a DCERPC binding string into a DcerpcBinding object
     * @param str the binding string to parse
     * @return the parsed DcerpcBinding object
     * @throws DcerpcException if the binding string is malformed
     */
    protected static DcerpcBinding parseBinding(final String str) throws DcerpcException {
        int state, mark, si;
        final char[] arr = str.toCharArray();
        String proto = null, key = null;

     * @param shareAccess the share access flags for file sharing
     * @throws SmbException if an SMB error occurs
     * @throws MalformedURLException if the URL is malformed
     * @throws UnknownHostException if the host cannot be resolved
     */
    public SmbRandomAccessFile(final String url, final String mode, final int shareAccess)

    /**
     * Parses a DCERPC binding string into a DcerpcBinding object
     * @param str the binding string to parse
     * @return the parsed DcerpcBinding object
     * @throws DcerpcException if the binding string is malformed
     */
    protected static DcerpcBinding parseBinding(final String str) throws DcerpcException {
        int state, mark, si;
        final char[] arr = str.toCharArray();
        String proto = null, key = null;

        // Test that PACDecodingException is thrown for a malformed token
        byte[] malformedToken = new byte[] { 0x01, 0x02, 0x03 };
        PACDecodingException e = assertThrows(PACDecodingException.class, () -> new KerberosTicket(malformedToken, (byte) 0, keys));
        assertTrue(e.getMessage().startsWith("Malformed kerberos ticket"));
    }

    @Test