return false;
        }

        if (!context.isValid()) {
            throw new CIFSException("Preauth integrity context is invalid for session: " + sessionId);
        }

        byte[] actualHash = context.getCurrentHash();
        boolean isValid = MessageDigest.isEqual(actualHash, expectedHash);

        if (isValid) {

        assertTrue(h.isValid());

        // Tree id change makes it invalid
        when(tree.getTreeId()).thenReturn(11L);
        assertFalse(h.isValid());

        // Connected=false makes it invalid
        when(tree.getTreeId()).thenReturn(10L);
        when(tree.isConnected()).thenReturn(false);
        assertFalse(h.isValid());

        // Mark closed makes it invalid

        assertTrue(validator.isValid(null, context));
    }

    public void test_isValid_blankValue() {
        final ConstraintValidatorContext context = null;
        assertTrue(validator.isValid(" ", context));
        assertTrue(validator.isValid("   ", context));
        assertTrue(validator.isValid("\t", context));
        assertTrue(validator.isValid("\n", context));
    }

        when(handle.isValid()).thenReturn(true);
        SmbWatchHandleImpl sut = new SmbWatchHandleImpl(handle, 0, false);

        sut.close();

        verify(handle, times(1)).close(0L);
    }

    // close() should do nothing when handle is invalid
    @Test
    @DisplayName("close() does nothing when handle invalid")
    void close_invalidHandle_doesNothing() throws Exception {

    }

    /**
     * Test isValid() when the handle is valid.
     */
    @Test
    void testIsValid_whenValid() {
        when(smbFileHandle.isValid()).thenReturn(true);
        assertTrue(smbFileHandle.isValid(), "isValid should return true when the handle is valid.");
        verify(smbFileHandle, times(1)).isValid();
    }

    /**
     * Test isValid() when the handle is invalid.
     */
    @Test

            fail("Expected CIFSException");
        } catch (CIFSException e) {
            // Expected
        }

        assertFalse(context.isValid());

        // Further operations on invalid context should fail
        assertThrows(CIFSException.class, () -> {
            preauthService.updatePreauthHash(sessionId, "test".getBytes());
        });
    }

    @Test

        // Re-prepare state for second branch: not open but handle set
        when(fileHandle.isValid()).thenReturn(false);
        // Need to reopen logic to set handle again
        // Reset open flag by reconstructing target
        target = new SmbPipeHandleImpl(pipe);

        target.ensureOpen(); // handle present but invalid per isValid=false
        target.close();
        verify(fileHandle, atLeastOnce()).release();
    }

        }

        @Test
        @DisplayName("Should detect invalid signature")
        void testVerifyInvalidSignature() {
            // Set signed flag
            SMBUtil.writeInt4(ServerMessageBlock2.SMB2_FLAGS_SIGNED, data, 16);

            // Place invalid signature
            byte[] invalidSignature = new byte[SIGNATURE_LENGTH];

		tokens := strings.SplitN(arg, "=", 2)
		if len(tokens) != 2 {
			logger.Fatal(fmt.Errorf("invalid arguments passed to --sftp=%s", arg), "unable to start SFTP server")
		}
		switch tokens[0] {
		case "address":
			host, portStr, err := net.SplitHostPort(tokens[1])
			if err != nil {
				logger.Fatal(fmt.Errorf("invalid arguments passed to --sftp=%s (%v)", arg, err), "unable to start SFTP server")
			}

   * including if it is a public suffix itself. For example, returns {@code true} for {@code
   * www.google.com}, {@code foo.co.uk} and {@code com}, but not for {@code invalid} or {@code
   * google.invalid}. This is the recommended method for determining whether a domain is potentially
   * an addressable host.
   *
   * <p>Note that this method is equivalent to {@link #hasRegistrySuffix()} because all registry