* All access is synchronized via indexUpdateCallback lock.
     */
    protected List<String> deleteUrlList = new ArrayList<>();

    /** Maximum size of the delete URL cache before batch deletion is triggered. */
    protected int maxDeleteDocumentCacheSize;

    /** Maximum number of redirects to follow when processing URLs. */
    protected int maxRedirectCount;

ntent).empty().append(o)}e._settings.onLoadFail.call(n.default(e),t,a,i)})),n.default(this._element).trigger(n.default.Event("loaded.lte.cardrefresh"))},t._addOverlay=function(){this._parent.append(this._overlay),n.default(this._element).trigger(n.default.Event("overlay.added.lte.cardrefresh"))},t._removeOverlay=function(){this._parent.find(this._overlay).remove(),n.default(this._element).trigger(n.default.Event("overlay.removed.lte.cardrefresh"))},t._init=function(){var e=this;n.default(this).f...

        }

        @Test
        @DisplayName("Weak resolve via initContext triggers only once on accessors")
        void testResolveWeakInitContext() throws SmbException, CIFSException {
            SID sid = new SID("S-1-5-21-1-2");
            sid.initContext("srv", mockCtx);

            // First accessor triggers resolution
            int t1 = sid.getType();

            writer.write("   \n");
            writer.write("192.168.1.101 HOST2\n");
        }

        when(mockConfig.getLmHostsFileName()).thenReturn(lmhostsFile.getAbsolutePath());

        // Use getByName to trigger populate
        NbtAddress result = lmhosts.getByName("HOST1", mockContext);
        assertNotNull(result);
        result = lmhosts.getByName("HOST2", mockContext);
        assertNotNull(result);
    }

        // Provide a page with no valid items so that advance returns null and triggers close in next()
        TestIterator it = TestIterator.create(tree, parent, "*", null, 0, initial, List.of(new FileEntry[][] { new FileEntry[] {} }))
                .throwOnCloseInternal();

        // Act: first next() returns initial, second triggers close which throws internally but is handled
        assertTrue(it.hasNext());

        assertEquals("smb://server/share/file", a.getCanonicalURL());
    }

    @Test
    @DisplayName("Invalid path triggers RuntimeCIFSException during canonicalize")
    void testCanonicalizeInvalidPath() {
        SmbResourceLocatorImpl a = locator("smb:invalid-no-slash");
        // Any accessor that triggers canonicalizePath should throw
        assertThrows(RuntimeCIFSException.class, a::getURLPath);

        assertTrue(ex.getMessage().contains("Malformed Kerberos Ticket"));
    }

    @Test
    @DisplayName("byte[] ctor: top-level non-SEQUENCE triggers PACDecodingException (type mismatch)")
    void byteArrayConstructor_topLevelNotSequence_throws() throws Exception {
        // Arrange: Encoded INTEGER instead of SEQUENCE

        verify(tc, never()).getConfig();
        verifyNoInteractions(config);
    }

    @Test
    @DisplayName("createContext: Kerberos present but forceFallback triggers NTLM path")
    void createContext_forceFallback_triggersNtlmAndFailsOnNonNtlmToken() throws CIFSException {
        when(tc.getConfig()).thenReturn(config);
        when(config.isAllowNTLMFallback()).thenReturn(true);

        SmbTreeImpl tree = mock(SmbTreeImpl.class);
        when(tree.acquire(false)).thenReturn(tree);
        when(tree.acquire()).thenReturn(tree);

        setTree(c, tree);

        // Act: first acquire triggers tree.acquire()
        c.acquire();
        verify(tree, times(1)).acquire();

        // Act: second acquire does not call tree.acquire again
        c.acquire();
        verify(tree, times(1)).acquire();

        assertTrue(stats.getFailureRate() <= 1.0);
    }

    @Test
    public void testBufferOverflowPrevention() throws Exception {
        validator.resetStats();

        // Trigger buffer overflow prevention
        try {
            byte[] buffer = new byte[10];
            validator.validateBufferAccess(buffer, 5, 10);
        } catch (SmbException e) {
            // Expected
        }