if (!destroyed) {
            boolean failedToDestroy = false;
            Exception destroyException = null;

            try {
                // Mark as destroyed first to prevent further operations
                destroyed = true;

                // Try to destroy master key if it implements Destroyable
                if (masterKey instanceof Destroyable) {
                    try {

 * Tests all SMB2 protocol constants and their expected values
 */
@DisplayName("Smb2Constants Test Suite")
class Smb2ConstantsTest {

    @Test
    @DisplayName("Should have private constructor to prevent instantiation")
    void testPrivateConstructor() throws Exception {
        // Verify constructor is private
        Constructor<Smb2Constants> constructor = Smb2Constants.class.getDeclaredConstructor();

        assertArrayEquals(fileId, resp.getFileId());
        assertEquals("file.txt", resp.getFileName());

        // No create contexts section present -> null
        assertNull(resp.getCreateContexts());
    }

    @Test
    void decode_withCreateContext_unrecognized_yieldsEmptyArray() throws Exception {

        verify(transport, times(1)).acquire();
        assertTrue(session.isInUse());
    }

    @Test
    @DisplayName("getSessionKey: throws when absent, returns when present")
    void testGetSessionKey() throws Exception {
        SmbSessionImpl session = newSession();

        // Absent key -> CIFSException

	// RoleARN parameter processing: If a role ARN is given in the request, we
	// use that and validate the authentication request. If not, we assume this
	// is an STS request for a claim based IDP (if one is present) and set
	// roleArn = openid.DummyRoleARN.
	//
	// Currently, we do not support multiple claim based IDPs, as there is no
	// defined parameter to disambiguate the intended IDP in this STS request.

                                concurrentLimiter.recordFailure("user" + threadId, "192.168.2." + threadId);
                                localFailures++;
                                // Prevent lockout by resetting after 3 failures
                                if (localFailures >= 3) {
                                    concurrentLimiter.recordSuccess("user" + threadId, "192.168.2." + threadId);

	xioutil "github.com/minio/minio/internal/ioutil"
	"github.com/minio/pkg/v3/mimedb"
	"github.com/pkg/sftp"
	"golang.org/x/crypto/ssh"
)

// Maximum write offset for incoming SFTP blocks.
// Set to 100MiB to prevent hostile DOS attacks.
const ftpMaxWriteOffset = 100 << 20

type sftpDriver struct {
	permissions *ssh.Permissions
	endpoint    string
	remoteIP    string
}

//msgp:ignore sftpMetrics

The connection lock is never held while doing I/O (even closing a socket) to prevent contention.

 * MultisetSetCountConditionallyTester}. It is used by those testers to test calls to the
 * unconditional {@code setCount()} method and calls to the conditional {@code setCount()} method
 * when the expected present count is correct.
 *
 * @author Chris Povirk
 */
@GwtCompatible
@Ignore("test runners must not instantiate and run this directly, only via suites we build")

        // This should not throw an exception
        assertDoesNotThrow(() -> ntlmServlet.init(servletConfig));
    }

    /**
     * Test the service method when no Authorization header is present and no session exists.
     * Expects a 401 Unauthorized response with NTLM and Basic authentication challenges.
     * @throws ServletException
     * @throws IOException
     */
    @Test