relativeSid.sub_authority_count = 1;
        relativeSid.sub_authority = new int[] { 1000 };

        SID userSid = new SID(domainSid, relativeSid);
        assertEquals(domainSid.sub_authority_count + relativeSid.sub_authority_count, userSid.sub_authority_count);
        assertEquals(1000, userSid.sub_authority[userSid.sub_authority_count - 1]);
    }

    /**

        revision = src[si];
        si++;
        sub_authority_count = src[si++];
        identifier_authority = new byte[6];
        System.arraycopy(src, si, identifier_authority, 0, 6);
        si += 6;
        if (sub_authority_count > 100) {
            throw new RuntimeException("Invalid SID sub_authority_count");
        }
        sub_authority = new int[sub_authority_count];
        for (int i = 0; i < sub_authority_count; i++) {

        // Verify SID
        assertNotNull(decodedInfo.sid);
        assertEquals(domainInfo.sid.revision, decodedInfo.sid.revision);
        assertEquals(domainInfo.sid.sub_authority_count, decodedInfo.sid.sub_authority_count);
    }

    @Test
    void testLsarDomainInfoEncodeDecodeWithNulls() throws NdrException {
        // Create a domain info with null fields

	 * 
	 * typedef struct _SID {
	 *    UCHAR Revision;
	 *    UCHAR SubAuthorityCount;
	 *    SID_IDENTIFIER_AUTHORITY IdentifierAuthority;
	 *    [size_is(SubAuthorityCount)] ULONG SubAuthority[*];
	 * } SID, *PSID;
	 */

	typedef struct {
		uint8_t revision;
		uint8_t sub_authority_count;
		uint8_t identifier_authority[6];
		[size_is(sub_authority_count)] uint32_t sub_authority[*];
	} sid_t;

	 * 
	 * typedef struct _SID {
	 *    UCHAR Revision;
	 *    UCHAR SubAuthorityCount;
	 *    SID_IDENTIFIER_AUTHORITY IdentifierAuthority;
	 *    [size_is(SubAuthorityCount)] ULONG SubAuthority[*];
	 * } SID, *PSID;
	 */

	typedef struct {
		uint8_t revision;
		uint8_t sub_authority_count;
		uint8_t identifier_authority[6];
		[size_is(sub_authority_count)] uint32_t sub_authority[*];
	} sid_t;

        this.sub_authority_count = (byte) (domsid.sub_authority_count + id.sub_authority_count);
        this.sub_authority = new int[this.sub_authority_count];
        int i;
        for (i = 0; i < domsid.sub_authority_count; i++) {
            this.sub_authority[i] = domsid.sub_authority[i];
        }
        for (i = domsid.sub_authority_count; i < domsid.sub_authority_count + id.sub_authority_count; i++) {

            when(decodeBuffer.dec_ndr_long()).thenReturn((int) originalSid.sub_authority_count, // sub_authority_count
                    originalSid.sub_authority[0], // sub_authorities
                    originalSid.sub_authority[1], originalSid.sub_authority[2]);
            when(decodeBuffer.dec_ndr_small()).thenReturn((int) originalSid.revision, (int) originalSid.sub_authority_count,

        public void encode(NdrBuffer _dst) throws NdrException {
            _dst.align(4);
            final int _sub_authoritys = sub_authority_count;
            _dst.enc_ndr_long(_sub_authoritys);
            _dst.enc_ndr_small(revision);
            _dst.enc_ndr_small(sub_authority_count);
            final int _identifier_authoritys = 6;
            final int _identifier_authorityi = _dst.index;

        assertNotNull(securityDescriptor.getOwnerUserSid());
        assertNotNull(securityDescriptor.getOwnerGroupSid());
        assertEquals(3, securityDescriptor.getOwnerUserSid().sub_authority_count);
        assertEquals(2, securityDescriptor.getOwnerGroupSid().sub_authority_count);
    }

    @Test
    @DisplayName("Test decode with DACL at non-zero offset")
    void testDecodeWithDaclAtNonZeroOffset() throws SMBProtocolDecodingException {

        public void encode(NdrBuffer _dst) throws NdrException {
            _dst.align(4);
            final int _sub_authoritys = this.sub_authority_count;
            _dst.enc_ndr_long(_sub_authoritys);
            _dst.enc_ndr_small(this.revision);
            _dst.enc_ndr_small(this.sub_authority_count);
            final int _identifier_authoritys = 6;
            final int _identifier_authorityi = _dst.index;