.thenReturn(0); // cancel count

            message.decode(mockBuffer);

            assertEquals(DcerpcConstants.RPC_PT_RESPONSE, message.ptype);
            assertEquals(100, message.alloc_hint);
        }

        @Test
        @DisplayName("decode should handle FAULT ptype correctly")
        void testDecodeFaultPtype() throws NdrException {

     * @param bufferIndex the starting offset in the buffer
     * @param len the length of data to decode
     * @throws IOException if an I/O error occurs during decoding
     */
    public SecurityDescriptor(final byte[] buffer, final int bufferIndex, final int len) throws IOException {
        this.decode(buffer, bufferIndex, len);
    }

    /**
     * Decodes a security descriptor from a byte buffer.
     *

import jcifs.BaseTest;

/**
 * Test class for Encdec utility functionality
 */
@DisplayName("Encdec Utility Tests")
class EncdecTest extends BaseTest {

    @Test
    @DisplayName("Should encode and decode 16-bit integers")
    void testInt16Operations() {
        // Given
        short value = 0x1234;
        byte[] buffer = new byte[2];

        // When - encode little endian

        SMBUtil.writeInt4(DirectoryLeaseState.DIRECTORY_READ_HANDLE, buffer, 40);

        // Decode with partial data
        DirectoryLeaseContext context = new DirectoryLeaseContext(new Smb2LeaseKey(), 0, DirectoryCacheScope.IMMEDIATE_CHILDREN);
        context.decode(buffer, 0, 56);

        // Should decode standard lease data correctly
        assertArrayEquals(key.getKey(), context.getLeaseKey().getKey());

        int decodedValue = 200;
        when(mockNdrBuffer.dec_ndr_small()).thenReturn(decodedValue);

        // Create an NdrSmall object (initial value doesn't matter for decode)
        NdrSmall ndrSmall = new NdrSmall(0);

        // Call the decode method
        ndrSmall.decode(mockNdrBuffer);

        // Verify that dec_ndr_small was called
        verify(mockNdrBuffer, times(1)).dec_ndr_small();

      name: NAME # match object names that satisfy the wildcard expression.
      olderThan: 7d10h # match objects older than this value
      createdBefore: "2006-01-02T15:04:05.00Z" # match objects created before "date"
      tags:
        - key: name
          value: pick* # match objects with tag 'name', all values starting with 'pick'
      metadata:
        - key: content-type

   * is also performed for calls to {@link Object#equals}, {@link Object#hashCode}, and {@link
   * Object#toString}.
   *
   * <p>If the target method call finishes before the limit is reached, the return value or
   * exception is propagated to the caller exactly as-is. If, on the other hand, the time limit is
   * reached, the proxy will attempt to abort the call to the target, and will throw an {@link

// UnmarshalYAML - BatchJobKV extends default unmarshal to extract line, col information.
func (kv *BatchJobKV) UnmarshalYAML(val *yaml.Node) error {
	type jobKV BatchJobKV
	var tmp jobKV
	err := val.Decode(&tmp)
	if err != nil {
		return err
	}
	*kv = BatchJobKV(tmp)
	kv.line, kv.col = val.Line, val.Column
	return nil
}

// Validate returns an error if key is empty
func (kv BatchJobKV) Validate() error {

## Tips for Success

- **Small PRs**: Easier to review, faster to merge. Split large changes logically.
- **Clear Commits**: Use `git rebase -i` to refine history before submitting.
- **Engage Early**: Discuss complex changes in issues or Slack (https://slack.min.io) before coding.
- **Be Responsive**: Address reviewer feedback promptly to keep PRs moving.
- **Learn from Reviews**: Use feedback to improve future contributions.

## Resources

    * So, the **certificate and encryption** handling is done **before HTTP**.
* **TCP doesn't know about "domains"**. Only about IP addresses.
    * The information about the **specific domain** requested goes in the **HTTP data**.
* The **HTTPS certificates** "certify" a **certain domain**, but the protocol and encryption happen at the TCP level, **before knowing** which domain is being dealt with.