when(pipe.ensureTreeConnected()).thenReturn(tree);
        when(tree.acquire()).thenReturn(tree);
        when(tree.isSMB2()).thenReturn(true); // simplifies stream init
        when(tree.getReceiveBufferSize()).thenReturn(4096);

        // Act: first calls construct streams, second calls return cached
        SmbPipeInputStream in1 = handle.getInput();
        SmbPipeInputStream in2 = handle.getInput();

* Move private key parsing from serviceaccount/jwt.go to client-go/util/cert ([#40907](https://github.com/kubernetes/kubernetes/pull/40907), [@cblecker](https://github.com/cblecker))

        assertEquals(8, size);
        assertEquals(8, encoded);
        assertEquals(8, decoded);
        assertNotNull(str);
        assertTrue(str.contains("4096"));
    }

    /**
     * Test FileInformation constants match expected protocol values
     */
    @Test
    @DisplayName("Test FileInformation constants match SMB protocol values")

        when(handle.getPipe()).thenReturn(pipe);
        // init(th) behavior inside SmbFileInputStream constructor
        when(tree.isSMB2()).thenReturn(smb2);
        when(tree.getReceiveBufferSize()).thenReturn(4096);
        when(tree.getMaximumBufferSize()).thenReturn(65535);
        when(tree.hasCapability(anyInt())).thenReturn(false);
        return new SmbPipeInputStream(handle, tree);
    }

        SMBUtil.writeInt8(500000, buffer, 28); // Available allocation units
        SMBUtil.writeInt4(512, buffer, 36); // Sectors per unit
        SMBUtil.writeInt4(4096, buffer, 40); // Bytes per sector

        int result = response.readBytesWireFormat(buffer, bufferIndex);

        assertNotNull(response.getInfo());

  /**
   * Returns the RFC 7235 authorization challenges appropriate for this response's code. If the
   * response code is 401 unauthorized, this returns the "WWW-Authenticate" challenges. If the
   * response code is 407 proxy unauthorized, this returns the "Proxy-Authenticate" challenges.
   * Otherwise this returns an empty list of challenges.
   *
   * If a challenge uses the `token68` variant instead of auth params, there is exactly one

          .put(1000, 0x433109b33e13e6edL)
          .put(800, 0x5f2f123bfc815f81L)
          .put(640, 0x6396fc6a67293cf4L)
          .put(512, 0x45c01b4934ddbbbeL)
          .put(409, 0xfcd19b617551db45L)
          .put(327, 0x4eee69e12854871eL)
          .put(261, 0xab753446a3bbd532L)
          .put(208, 0x54242fe06a291c3fL)
          .put(166, 0x4f7acff7703a635bL)
          .put(132, 0xa784bd0a1f22cc7fL)

     */
    protected FileUtil() {
    }

    /** The encoding name for UTF-8. */
    private static final String UTF8 = "UTF-8";

    /** Default Buffer Size */
    protected static final int DEFAULT_BUF_SIZE = 4096; // 4k

    /** Max Buffer Size */
    protected static final int MAX_BUF_SIZE = 10 * 1024 * 1024; // 10m

    /**
     * Validates that a given path is safe and does not attempt path traversal attacks.
     * <p>

            byte[] buffer = new byte[24];
            // Skip idFileSystem (4 bytes)
            buffer[4] = 0x08; // sectPerAlloc = 8
            buffer[8] = 0x00;
            buffer[9] = 0x10; // alloc = 4096
            buffer[12] = 0x00;
            buffer[13] = 0x08; // free = 2048
            buffer[16] = 0x00;
            buffer[17] = 0x02; // bytesPerSect = 512

        transaction.setTotalParameterCount(500);
        transaction.setTotalDataCount(1000);
        transaction.setMaxParameterCount(2048);
        transaction.setMaxDataCountForTest(4096);
        transaction.setParameterCount(250);
        transaction.setParameterOffset(150);
        transaction.setDataCount(500);
        transaction.setDataOffset(400);
        transaction.setSetupCount(2);