{header: generateHeader(0, 2048), shouldFail: true},
	{header: generateHeader(0, 2048+1), shouldFail: true},
}

func generateHeader(size, usersize int) http.Header {
	header := http.Header{}
	for i := range size {
		header.Set(strconv.Itoa(i), "")
	}
	userlength := 0
	for i := 0; userlength < usersize; i++ {
		userlength += len(userMetadataKeyPrefixes[0] + strconv.Itoa(i))
		header.Set(userMetadataKeyPrefixes[0]+strconv.Itoa(i), "")
	}

// is larger than 2 KB.
func isHTTPHeaderSizeTooLarge(header http.Header) bool {
	var size, usersize int
	for key := range header {
		length := len(key) + len(header.Get(key))
		size += length
		for _, prefix := range userMetadataKeyPrefixes {
			if stringsHasPrefixFold(key, prefix) {
				usersize += length
				break
			}
		}
		if usersize > maxUserDataSize || size > maxHeaderSize {
			return true
		}
	}
	return false

			return nil, config.ErrInvalidNumberOfErasureEndpoints(nil).Msg(msg)
		}

		// Final set size with all the symmetry accounted for.
		setSize = commonSetDriveCount(commonSize, setCounts)
	}

	// Check whether setSize is with the supported range.
	if !isValidSetSize(setSize) {

        relativeSid.sub_authority_count = 1;
        relativeSid.sub_authority = new int[] { 1000 };

        SID userSid = new SID(domainSid, relativeSid);
        assertEquals(domainSid.sub_authority_count + relativeSid.sub_authority_count, userSid.sub_authority_count);
        assertEquals(1000, userSid.sub_authority[userSid.sub_authority_count - 1]);
    }

    /**
     * Test the internal constructor.
     */
    @Test

            // First extra is user if userId is empty
            if (!userId.isEmpty() && !userId.isBlank()) {
                this.userSid = new SID(domainId, userId);
            } else if (this.extraSids.length > 0) {
                this.userSid = this.extraSids[0];
            }
            this.groupSid = new SID(domainId, groupId);

            // Compute Group IDs with Domain ID to get Group SIDs

    private static final String TEST_DOMAIN = "TESTDOMAIN";
    private static final String TEST_SERVER = "SERVER01";

    private SID domainSid;
    private SID userSid;

    @BeforeEach
    void setUp() throws Exception {
        domainSid = new SID("S-1-5-21-1-2-3");
        userSid = new SID("S-1-5-21-1-2-3-1000");
    }

    private void writeLittleEndianShort(DataOutputStream dos, short value) throws IOException {

        final FessConfig fessConfig = ComponentUtil.getFessConfig();
        SearchResponse response = option.apply(client.prepareSearch(index)
                .setScroll(scrollForUpdate)
                .setSize(sizeForUpdate)
                .setPreference(Constants.SEARCH_PREFERENCE_LOCAL)).execute().actionGet(fessConfig.getIndexScrollSearchTimeout());

        int count = 0;
        String scrollId = response.getScrollId();

                builder.setQuery(queryBuilder);
                builder.setFrom(0);
                final int maxDocumentCacheSize = fessConfig.getIndexerWebfsMaxDocumentCacheSizeAsInteger();
                builder.setSize(maxDocumentCacheSize <= 0 ? 1 : maxDocumentCacheSize);
                builder.addSort(OpenSearchAccessResult.CREATE_TIME, SortOrder.ASC);
            };

            final DocList docList = new DocList();

*   Fixes a `CHECK` fail in `CollectiveGather` ([CVE-2022-35994](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35994))
*   Fixes a `CHECK` fail in `SetSize` ([CVE-2022-35993](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35993))
*   Fixes a `CHECK` fail in `TensorListFromTensor` ([CVE-2022-35992](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35992))