// Error response structure: size(2)=9, errorContextCount(1), reserved(1), bc(4), errorData(bc)
        SMBUtil.writeInt2(9, buf, bodyStart);
        buf[bodyStart + 2] = 0x02; // errorContextCount
        buf[bodyStart + 3] = 0x00; // reserved
        int bc = 4;
        SMBUtil.writeInt4(bc, buf, bodyStart + 4);
        byte[] err = new byte[] { 0x55, 0x66, 0x77, 0x01 };

        smb.mid = 123;
        smb.pid = 456;
        smb.tid = 789;
        smb.uid = 101;
        smb.flags2 = ServerMessageBlock.FLAGS2_UNICODE;
        smb.useUnicode = true;

        byte[] params = { 0x01, 0x02, 0x03, 0x04 };
        byte[] bytes = { 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F };
        smb.setParamWords(params);
        smb.setBytes(bytes);

        byte[] buffer = new byte[1024];

        buffer[22] = 0x00;
        buffer[23] = 0x00;

        // TID (2 bytes)
        buffer[24] = 0x01;
        buffer[25] = 0x00;

        // PID (2 bytes)
        buffer[26] = 0x02;
        buffer[27] = 0x00;

        // UID (2 bytes)
        buffer[28] = 0x03;
        buffer[29] = 0x00;

        // MID (2 bytes)
        buffer[30] = 0x04;
        buffer[31] = 0x00;

    @Test
    @DisplayName("Test constants values")
    void testConstants() {
        // Test flag constants
        assertEquals(0x01, Trans2FindFirst2.FLAGS_CLOSE_AFTER_THIS_REQUEST);
        assertEquals(0x02, Trans2FindFirst2.FLAGS_CLOSE_IF_END_REACHED);
        assertEquals(0x04, Trans2FindFirst2.FLAGS_RETURN_RESUME_KEYS);
        assertEquals(0x08, Trans2FindFirst2.FLAGS_RESUME_FROM_PREVIOUS_END);

        when(this.mechContext.getFlags()).thenReturn(0x1234);
        when(this.mechContext.initSecContext(any(byte[].class), eq(0), eq(0))).thenReturn(new byte[] { 0x01, 0x02 });

        // Act: len==0 triggers initial token construction
        byte[] out = ctx.initSecContext(null, 0, 0);

        // Assert: returns a SPNEGO token (opaque here but non-null/non-empty)

        buffer.put(new byte[] { 0, 0, 0, 0, 0, 2 }); // IdentifierAuthority
        buffer.putInt(0); // SubAuthority

        // DACL at offset 60
        buffer.position(60);
        buffer.put((byte) 0x02); // AclRevision
        buffer.put((byte) 0x00); // Padding
        buffer.putShort((short) 8); // AclSize
        buffer.putShort((short) 0); // AceCount
        buffer.putShort((short) 0); // Padding

    }

    @Test
    void testConstructorWithMalformedToken() {
        // Test that PACDecodingException is thrown for a malformed token
        byte[] malformedToken = new byte[] { 0x01, 0x02, 0x03 };
        PACDecodingException e = assertThrows(PACDecodingException.class, () -> new KerberosTicket(malformedToken, (byte) 0, keys));
        assertTrue(e.getMessage().startsWith("Malformed kerberos ticket"));
    }

            // Test with various wildcard patterns and attribute masks
            String[] wildcards = { "*.txt", "test*", null };
            int[] attributes = { 0x10, 0x20, 0x07 };

            for (int i = 0; i < wildcards.length; i++) {
                DosFileFilter dos = new DosFileFilter(wildcards[i], attributes[i]);

    void testBufferManagement() {
        byte[] buffer = new byte[1024];
        buffer[0] = 0x42;
        buffer[1] = 0x43;

        response.setBuffer(buffer);

        byte[] released = response.releaseBuffer();
        assertSame(buffer, released);
        assertEquals(0x42, released[0]);
        assertEquals(0x43, released[1]);

        // After release, getting buffer again should return null

        // Random but realistic GUID
        byte[] testGuid = { (byte) 0x01, (byte) 0x23, (byte) 0x45, (byte) 0x67, (byte) 0x89, (byte) 0xAB, (byte) 0xCD, (byte) 0xEF,
                (byte) 0xFE, (byte) 0xDC, (byte) 0xBA, (byte) 0x98, (byte) 0x76, (byte) 0x54, (byte) 0x32, (byte) 0x10 };

        // Security mode with signing required