- ACCEPTED on 2025-11-24

## Context

Gradle is an international open-source project with contributors from around the world. English is the primary language for code, comments, documentation, and communication, but there are variations in English spelling and terminology, specifically American English vs. British English.

Inconsistency in spelling conventions can lead to several issues:

        assertTrue(s.contains("filename=/bar"));
        assertTrue(s.contains("maxReferralLevel=0x3"));
    }

    @ParameterizedTest
    @ValueSource(ints = { 0, 5, -1, 65534 })
    @DisplayName("referral level variations")
    void testLevels(int level) throws Exception {
        Trans2GetDfsReferral cmd = new Trans2GetDfsReferral("foo");
        setPrivateField(cmd, "maxReferralLevel", level);
        byte[] buffer = new byte[100];

        assertEquals("[テスト環境]", specialMailEnv.getMailSubjectTestPrefix());
        assertEquals("******@****.***", specialMailEnv.getMailReturnPath());
    }

    // Test deploy mode variations
    public void xtest_deployModeVariations() {
        String[] deployModes = { "hot", "cool", "warm" };

        for (String mode : deployModes) {
            FessEnv.SimpleImpl deployEnv = new FessEnv.SimpleImpl() {

        assertEquals(3, third.length, "Allocated buffer length matches configured maximum size");
    }

    // Parameterized: exercise small variations of cache size for a simple reuse cycle
    @ParameterizedTest
    @ValueSource(ints = { 1, 2 })
    @DisplayName("Parameterized: buffer reuse works for various small cache sizes")

public class NtlmPasswordAuthenticatorTimingAttackTest {

    private static final int TIMING_ITERATIONS = 1000;
    private static final double TIMING_TOLERANCE = 2.0; // 200% tolerance - JVM timing is inherently variable for timing variations

    @BeforeEach
    public void setUp() {
        // Warm up JVM to reduce JIT compilation effects
        for (int i = 0; i < 100; i++) {

    for (Striped<?> striped : allImplementations()) {
      new NullPointerTester().testAllPublicInstanceMethods(striped);
    }
  }

  public void testSizes() {
    // not bothering testing all variations, since we know they share implementations
    assertThat(Striped.lock(100).size()).isAtLeast(100);
    assertTrue(Striped.lock(256).size() == 256);
    assertThat(Striped.lazyWeakLock(100).size()).isAtLeast(100);

    for (Striped<?> striped : allImplementations()) {
      new NullPointerTester().testAllPublicInstanceMethods(striped);
    }
  }

  public void testSizes() {
    // not bothering testing all variations, since we know they share implementations
    assertThat(Striped.lock(100).size()).isAtLeast(100);
    assertTrue(Striped.lock(256).size() == 256);
    assertThat(Striped.lazyWeakLock(100).size()).isAtLeast(100);

    @Test
    public void test_execute_caseInsensitiveScriptType() {
        // Setup test script engine
        scriptEngineFactory.add("TestEngine", testScriptEngine);

        // Execute with different case variations
        Object result1 = scriptExecutor.execute("testengine", "script1");
        assertEquals("processed: script1", result1);

        Object result2 = scriptExecutor.execute("TESTENGINE", "script2");

        assertNull(transport.getSmbSession((jcifs.CIFSContext) null));
        verify(transport).getSmbSession((jcifs.CIFSContext) isNull());
    }

    // Happy path: session retrieval with host/domain variations
    @ParameterizedTest
    @DisplayName("getSmbSession(ctx,host,domain) returns session for various inputs")
    @CsvSource({ "server,DOMAIN", "server,", ",DOMAIN", "," })

        // Authenticator should be closed
        assertTrue(auth.isClosed());
    }

    /**
     * Test password security with char array constructor variations
     */
    @Test
    @DisplayName("Test all char array constructor variations")
    public void testCharArrayConstructorVariations() {
        // Test with domain, username, password, and type
        char[] password1 = "TypedPass123!".toCharArray();