assertEquals("Malformed PAC", exception.getMessage());
    }

    @Test
    @DisplayName("Test getters return expected values using mocks")
    void testGetters() throws Exception {
        // Use mocking to test getters without complex PAC data creation
        PacLogonInfo logonInfo = mock(PacLogonInfo.class);

                    | FileNotifyInformation.FILE_NOTIFY_CHANGE_STREAM_SIZE | FileNotifyInformation.FILE_NOTIFY_CHANGE_STREAM_WRITE;

            // Expected value when all flags are combined
            assertEquals(0x00000FFF, allFlags);
        }

        @Test
        @DisplayName("Test removing specific filter flag")
        void testRemovingFilterFlag() {

        when(handle.isValid()).thenReturn(false);
        SmbWatchHandleImpl sut = new SmbWatchHandleImpl(handle, 0, false);

        SmbException ex = assertThrows(SmbException.class, sut::watch, "Expected SmbException when handle invalid");
        assertTrue(ex.getMessage().contains("Watch was broken by tree disconnect"));
    }

    // Happy path for SMB2: a response is received and the list is returned; tree is closed

	metadata []byte

	// cached contains the metadata if decoded.
	cached *xlMetaV2

	// Indicates the entry can be reused and only one reference to metadata is expected.
	reusable bool
}

// isDir returns if the entry is representing a prefix directory.
func (e metaCacheEntry) isDir() bool {
	return len(e.metadata) == 0 && strings.HasSuffix(e.name, slashSeparator)
}

        responseHeaders = responseHeadersBuilder.build()

        if (url.isHttps) {
          val blank = source.readUtf8LineStrict()
          if (blank.isNotEmpty()) {
            throw IOException("expected \"\" but was \"$blank\"")
          }
          val cipherSuiteString = source.readUtf8LineStrict()
          val cipherSuite = CipherSuite.forJavaName(cipherSuiteString)

        NdrLong decodedTotalEntries = new NdrLong(0);
        netdfs.NetrDfsEnumEx decodedEnumEx = new netdfs.NetrDfsEnumEx(null, 0, 0, decodedInfo, decodedTotalEntries);

        // Manually encode the expected output for decode_out
        byte[] encodeBufferOut = new byte[1024];
        NdrBuffer dstOut = new NdrBuffer(encodeBufferOut, 0);

        // Simulate info pointer (non-null)

	"github.com/dustin/go-humanize"
	"github.com/minio/madmin-go/v3"
	"github.com/minio/minio/internal/bucket/replication"
	"github.com/minio/minio/internal/hash"
)

//go:generate msgp -file $GOFILE -io=false -tests=false -unexported=false

// BackendType - represents different backend types.
type BackendType int

// Enum for different backend types.
const (
	Unknown = BackendType(madmin.Unknown)
	// Filesystem backend.

            assertNotNull(request);
            assertTrue(request instanceof CreateContextRequest);
        }

        @Test
        @DisplayName("getName() should return expected byte array")
        void testGetNameMethod() {
            byte[] expectedName = "TEST_CONTEXT".getBytes(StandardCharsets.UTF_8);
            CreateContextRequest request = mock(CreateContextRequest.class);

Using the **SNI extension** discussed above, the TLS Termination Proxy would check which of the TLS (HTTPS) certificates available it should use for this connection, using the one that matches the domain expected by the client.

In this case, it would use the certificate for `someapp.example.com`.

<img src="/img/deployment/https/https03.drawio.svg">

    private final AtomicLong integerOverflowsPrevented = new AtomicLong(0);

    /**
     * Validate SMB response buffer bounds
     *
     * @param buffer the buffer to validate
     * @param expectedSize expected minimum size
     * @param maxSize maximum allowed size
     * @throws SmbException if validation fails
     */
    public void validateBuffer(byte[] buffer, int expectedSize, int maxSize) throws SmbException {