throw new SmbException("Path contains control characters");
        }

        // Check for traversal sequences
        if (containsTraversal(path)) {
            log.warn("Path contains directory traversal: {}", sanitizeForLog(path));
            throw new SmbException("Path contains directory traversal sequences");
        }

        // Normalize the path
        String normalized = normalizePath(path);

	case err, ok := <-h.traverseAndHealDoneCh:
		if !ok {
			return
		}
		h.mutex.Lock()
		h.endTime = UTCNow()
		// Heal traversal is complete.
		if err == nil {
			// heal traversal succeeded.
			h.currentStatus.Summary = healFinishedStatus
		} else {
			// heal traversal had an error.
			h.currentStatus.Summary = healStoppedStatus
			h.currentStatus.FailureDetail = err.Error()
		}
		h.mutex.Unlock()

   * element in the result.
   *
   * <p>If needed, the {@link Traverser} class provides more flexible and lighter-weight ways to
   * list the nodes reachable from a given node or nodes. See the <a
   * href="https://github.com/google/guava/wiki/GraphsExplained#Graph-traversal">"Graph traversal"
   * section of the Guava User's Guide</a> for more information.
   *

   * element in the result.
   *
   * <p>If needed, the {@link Traverser} class provides more flexible and lighter-weight ways to
   * list the nodes reachable from a given node or nodes. See the <a
   * href="https://github.com/google/guava/wiki/GraphsExplained#Graph-traversal">"Graph traversal"
   * section of the Guava User's Guide</a> for more information.
   *

- **I/O Operations** (`org.codelibs.core.io`) - File handling, resource management, stream utilities, and traversal utilities for efficient resource processing
- **Reflection** (`org.codelibs.core.lang`) - Class loading, method/field access, type introspection utilities, and generics support

        }

        // Check for directory traversal
        if (path.contains("..") || path.contains("./") || path.contains(".\\")) {
            failedValidations.incrementAndGet();
            log.warn("Path contains traversal sequences: {}", sanitizeForLog(path));
            throw new SmbException("Path contains directory traversal");
        }

        // Check individual components

                    "Destination array bounds exceeded: offset=" + dstOffset + ", length=" + length + ", array.length=" + dst.length);
        }
    }

    /**
     * Validates SMB path to prevent traversal attacks
     *
     * @param path the path to validate
     * @throws IllegalArgumentException if path is invalid
     */
    public static void validateSmbPath(String path) {
        if (path == null) {

                + "test_script.py";
        assertEquals(expectedPath, pythonJob.getPyFilePath());
    }

    // Test getPyFilePath with directory traversal attempt
    public void test_getPyFilePath_withDirectoryTraversal() {
        pythonJob.filename("../../malicious.py");

        assertThrows(IllegalArgumentException.class, () -> InputValidator.validateArrayBounds(src, 0, dst, 50, 60));
    }

    @ParameterizedTest
    @DisplayName("Test path traversal detection")
    @ValueSource(strings = { "../etc/passwd", "..\\windows\\system32", "folder/../../../etc", "test/../../root", "..\\..\\..\\windows" })
    void testPathTraversal(String path) {

		t.Skip()
	}
	defer DetectTestLeak(t)()
	ExecExtendedObjectLayerAPITest(t, testPathTraversalExploit, []string{"PutObject"})
}

// testPathTraversal exploit test, exploits path traversal on windows
// with following object names "\\../.minio.sys/config/iam/${username}/identity.json"
// #16852
func testPathTraversalExploit(obj ObjectLayer, instanceType, bucketName string, apiRouter http.Handler,