void testReadUShortOutOfBounds() {
        byte[] a = new byte[] { 0x02 };
        assertThrows(IndexOutOfBoundsException.class, () -\u003e NtlmMessage.readUShort(a, 0));
    }

    @Test
    @DisplayName("readULong throws on too short array")
    void testReadULongOutOfBounds() {
        byte[] a = new byte[] { 0x01, 0x02, 0x03 };
        assertThrows(IndexOutOfBoundsException.class, () -\u003e NtlmMessage.readULong(a, 0));

            // Skip idFileSystem (4 bytes)
            buffer[4] = 0x08; // sectPerAlloc = 8
            buffer[8] = 0x00;
            buffer[9] = 0x10; // alloc = 4096
            buffer[12] = 0x00;
            buffer[13] = 0x08; // free = 2048
            buffer[16] = 0x00;
            buffer[17] = 0x02; // bytesPerSect = 512

    public static final int SMB2_LEASE_NONE = 0x00;

    /**
     * Read caching lease (R)
     */
    public static final int SMB2_LEASE_READ_CACHING = 0x01;

    /**
     * Handle caching lease (H)
     */
    public static final int SMB2_LEASE_HANDLE_CACHING = 0x02;

    /**
     * Write caching lease (W)
     */
    public static final int SMB2_LEASE_WRITE_CACHING = 0x04;

    /**

        assertEquals(0x0A, AvPair.MsvAvChannelBindings, "MsvAvChannelBindings constant should be 0x0A.");
    }

    @Test
    void testRawDataImmutability() {
        int type = AvPair.MsvAvTimestamp;
        byte[] raw = new byte[] { 0x01, 0x02, 0x03, 0x04 };
        AvPair avPair = new AvPair(type, raw);

        // Modify the original raw array
        raw[0] = 0x05;

        // Bit 2: active (1)
        // Bit 1: permanent (1)

        // MAC address
        byte[] testMac = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
        System.arraycopy(testMac, 0, src, srcIndex + 19, 6);

        // Statistics
        byte[] stats = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
        System.arraycopy(stats, 0, src, srcIndex + 25, 6);

        response.readRDataWireFormat(src, srcIndex);

    void testLeaseStateConstants() {
        assertEquals(0x00, Smb2LeaseState.SMB2_LEASE_NONE);
        assertEquals(0x01, Smb2LeaseState.SMB2_LEASE_READ_CACHING);
        assertEquals(0x02, Smb2LeaseState.SMB2_LEASE_HANDLE_CACHING);
        assertEquals(0x04, Smb2LeaseState.SMB2_LEASE_WRITE_CACHING);
        assertEquals(0x03, Smb2LeaseState.SMB2_LEASE_READ_HANDLE);
        assertEquals(0x05, Smb2LeaseState.SMB2_LEASE_READ_WRITE);

        // Group SID with 2 sub-authorities
        testBuffer[44] = 0x01; // revision
        testBuffer[45] = 0x02; // sub-authority count
        testBuffer[46] = 0x00; // identifier authority
        testBuffer[47] = 0x00;
        testBuffer[48] = 0x00;
        testBuffer[49] = 0x00;
        testBuffer[50] = 0x00;
        testBuffer[51] = 0x05;
        SMBUtil.writeInt4(32, testBuffer, 52); // sub-authority 1

            ASN1ObjectIdentifier[] mechs = new ASN1ObjectIdentifier[] { OID_KRB, OID_NTLM };
            int flags = NegTokenInit.DELEGATION | NegTokenInit.INTEGRITY;
            byte[] mechToken = new byte[] { 0x01, 0x02, 0x03, 0x04, 0x05 };
            byte[] mic = new byte[] { (byte) 0xAA, (byte) 0xBB, (byte) 0xCC };

            NegTokenInit original = new NegTokenInit(mechs, flags, mechToken, mic);

        bufferIndex++;
        server.security = server.securityMode & 0x01;
        server.encryptedPasswords = (server.securityMode & 0x02) == 0x02;
        server.signaturesEnabled = (server.securityMode & 0x04) == 0x04;
        server.signaturesRequired = (server.securityMode & 0x08) == 0x08;
        server.maxMpxCount = readInt2(buffer, bufferIndex);
        bufferIndex += 2;

        }
        impersonationLevel = 0x02; // As seen on NT :~)
        securityFlags = (byte) 0x03; // SECURITY_CONTEXT_TRACKING | SECURITY_EFFECTIVE_ONLY
    }

    @Override
    int writeParameterWordsWireFormat(final byte[] dst, int dstIndex) {
        final int start = dstIndex;

        dst[dstIndex] = (byte) 0x00;
        dstIndex++;