class SecurityBlobTest {

    // Parameter source for toString() hex rendering cases
    static Stream<Arguments> hexCases() {
        return Stream.of(Arguments.of(new byte[] {}, ""), Arguments.of(new byte[] { (byte) 0x00 }, "00"),
                Arguments.of(new byte[] { (byte) 0x0F }, "0f"), Arguments.of(new byte[] { (byte) 0x10 }, "10"),
                Arguments.of(new byte[] { (byte) 0xAB }, "ab"),

        this.flags0 |= fl;
    }

    @Override
    protected int writeParameterWordsWireFormat(final byte[] dst, int dstIndex) {
        final int start = dstIndex;

        dst[dstIndex] = (byte) 0x00;
        dstIndex++;
        // name length without counting null termination
        this.namelen_index = dstIndex;
        dstIndex += 2;
        SMBUtil.writeInt4(this.flags0, dst, dstIndex);

        assertEquals(0, cap.getValue().length, "Optimistic token must be zero-length");
    }

    @ParameterizedTest
    @ValueSource(bytes = { 0x00, 0x7F, (byte) 0xFF })
    @DisplayName("initSecContext throws on invalid token type")
    void testInitSecContextInvalidTokenType(byte firstByte) throws Exception {
        SpnegoContext ctx = newContext();

        assertTrue(workgroupLike.isWorkgroup());

        // Server: return a NetBIOS type not 0x1d/0x1b
        when(nb.getNameType()).thenReturn(0x20);
        SmbResourceLocatorImpl server = locator("smb://server");
        when(nsc.getAllByName(eq("server"), eq(true))).thenReturn(new Address[] { addr });
        assertEquals(SmbConstants.TYPE_SERVER, server.getType());

            // Test with various wildcard patterns and attribute masks
            String[] wildcards = { "*.txt", "test*", null };
            int[] attributes = { 0x10, 0x20, 0x07 };

            for (int i = 0; i < wildcards.length; i++) {
                DosFileFilter dos = new DosFileFilter(wildcards[i], attributes[i]);

        assertArrayEquals(maxFileId, copiedFileId);

        // Test with file ID having minimum byte values
        byte[] minFileId = new byte[16];
        Arrays.fill(minFileId, (byte) 0x00);
        Smb2FlushRequest minRequest = new Smb2FlushRequest(mockConfig, minFileId);

        written = minRequest.writeBytesWireFormat(buffer, 0);

        assertEquals(24, written);

    @DisplayName("Command Constants Tests")
    class CommandConstantsTests {

        @Test
        @DisplayName("Should have correct command constants")
        void testCommandConstants() {
            assertEquals(0x00, ServerMessageBlock2.SMB2_NEGOTIATE);
            assertEquals(0x01, ServerMessageBlock2.SMB2_SESSION_SETUP);
            assertEquals(0x02, ServerMessageBlock2.SMB2_LOGOFF);

    @Override
    public final boolean readBoolean() throws SmbException {
        if (read(this.tmp, 0, 1) < 0) {
            throw new SmbEndOfFileException();
        }
        return this.tmp[0] != (byte) 0x00;
    }

    @Override
    public final byte readByte() throws SmbException {
        if (read(this.tmp, 0, 1) < 0) {
            throw new SmbEndOfFileException();
        }
        return this.tmp[0];

        buffer[66] = (byte) 0x4C;
        buffer[67] = (byte) 0x4D;
        buffer[68] = (byte) 0x53;
        buffer[69] = (byte) 0x53;
        buffer[70] = (byte) 0x50;
        buffer[71] = (byte) 0x00;

        return buffer;
    }

        assertTrue(n > 0);
        // Common AndX header: command at +1, reserved at +2, offset at +3/+4
        assertEquals((byte) 0xFF, buf[1], "AndX command should be 0xFF when no chaining");
        assertEquals((byte) 0x00, buf[2], "Reserved byte must be 0");
        assertEquals((byte) 0xDE, buf[3], "Sentinel low offset when no chaining");
        assertEquals((byte) 0xDE, buf[4], "Sentinel high offset when no chaining");