for _, k := range slices.Sorted(maps.Keys(paxHdrs)) {
			rec, err := formatPAXRecord(k, paxHdrs[k])
			if err != nil {
				return err
			}
			buf.WriteString(rec)
		}

		// Write the extended header file.
		var name string
		var flag byte
		if isGlobal {
			name = realName
			if name == "" {
				name = "GlobalHead.0.0"
			}
			flag = TypeXGlobalHeader
		} else {

    /**
     * SMB command to open a file with extended attributes.
     */
    public static final byte SMB_COM_OPEN_ANDX = (byte) 0x2D;

    /**
     * SMB command to read from a file with extended attributes.
     */
    public static final byte SMB_COM_READ_ANDX = (byte) 0x2E;

    /**
     * SMB command to write to a file with extended attributes.
     */

    /**
     * Permission to append data to a file or add subdirectories
     */
    int FILE_APPEND_DATA = 0x00000004; // 3
    /**
     * Permission to read extended attributes
     */
    int FILE_READ_EA = 0x00000008; // 4
    /**
     * Permission to write extended attributes
     */
    int FILE_WRITE_EA = 0x00000010; // 5
    /**
     * Permission to execute a file or traverse a directory
     */

/**
 * JUnit 5 tests for AndXServerMessageBlock in legacy smb1 package.
 *
 * The tests use small stub subclasses to drive encode/decode paths and
 * validate batching, chaining, signing, and NT_CREATE_ANDX extended handling.
 */
class AndXServerMessageBlockTest {

    /**
     * Test stub for AndXServerMessageBlock to control read/write logic.
     */
    static class DummyAndXBlock extends AndXServerMessageBlock {

import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;

/**
 * A type implemented by, or extended by maven itself.
 * Maven provides implementations of those types and may inject them in plugins.
 * <p>
 * A type can be marked {@link Consumer} or {@link Provider} but not both. A type is assumed to be

     * @return the isLoggedInAsGuest
     */
    public final boolean isLoggedInAsGuest() {
        return this.isLoggedInAsGuest;
    }

    /**
     * Returns the security blob received from the server during extended security negotiation.
     *
     * @return the blob
     */
    public final byte[] getBlob() {
        return this.blob;
    }

    @Override

 * helper implementations to exercise expected interaction patterns and edge cases.
 */
@ExtendWith(MockitoExtension.class)
public class SmbRenewableCredentialsTest {

    // Simple base class to satisfy the extended CredentialsInternal contract
    static abstract class BaseCreds implements SmbRenewableCredentials {
        @Override
        public CredentialsInternal clone() {

            assertEquals(flags, pipe.getPipeType());
            assertEquals(SmbConstants.TYPE_NAMED_PIPE, pipe.getType());
        }
    }

    @Test
    @DisplayName("customizeCreate sets required flags and extended mode")
    void customizeCreateSetsFlagsAndExtended() throws Exception {
        // Arrange: real instance to call protected method; collaborators mocked for interaction verification

                "17:-Xmx4g", // Exact 17
                "invalid:pattern", // Invalid pattern
                "18-:-XX:+UseZGC", // Range from 18 (should be excluded)
                "11:-XX:+UseG1GC", // Exact 11 (should be excluded)
                "17-:-XX:+UnlockExperimentalVMOptions" // Range from 17
        };

        String[] result = JvmUtil.filterJvmOptions(args);
        assertEquals(5, result.length);

        if (len > this.outputBuffer.length) {
            throw new SMBProtocolDecodingException("Payload exceeds buffer size");
        }
        System.arraycopy(buffer, bufferIndex, this.outputBuffer, 0, len);
        return len;
    }

    @Override
    public String toString() {