Of course, the attackers would not try all this by hand, they would write a program to do it, possibly with thousands or millions of tests per second. And they would get just one extra correct letter at a time.

But doing that, in some minutes or hours the attackers would have guessed the correct username and password, with the "help" of our application, just using the time taken to answer.

#### Fix it with `secrets.compare_digest()` { #fix-it-with-secrets-compare-digest }

        assertTrue(bytesWritten > 0);

        // Verify data is written at correct offset
        assertEquals(3, dst[startOffset]);

        // Verify total parameter count at correct offset
        assertEquals(500, SMBUtil.readInt4(dst, startOffset + 3));

        // Verify total data count at correct offset
        assertEquals(1000, SMBUtil.readInt4(dst, startOffset + 7));
    }

    @Test

        assertTrue(resp instanceof ServerMessageBlock2);
        assertTrue(resp instanceof TreeConnectResponse);
    }

    @Test
    @DisplayName("Should return correct share type constants")
    void testShareTypeConstants() {
        // Then
        assertEquals((byte) 0x1, Smb2TreeConnectResponse.SMB2_SHARE_TYPE_DISK);

    class FlagConstantsTests {

        @Test
        @DisplayName("Should have correct shared lock flag value")
        void testSharedLockFlag() {
            assertEquals(0x1, Smb2Lock.SMB2_LOCKFLAG_SHARED_LOCK);
        }

        @Test
        @DisplayName("Should have correct exclusive lock flag value")
        void testExclusiveLockFlag() {

    private TestRequestWithPath testImplementation;

    @BeforeEach
    void setUp() {
        testImplementation = new TestRequestWithPath();
    }

    @Test
    @DisplayName("Test getPath returns correct path")
    void testGetPath() {
        // Test with mock
        String expectedPath = "/share/folder/file.txt";
        when(requestWithPath.getPath()).thenReturn(expectedPath);

        SamrAliasHandle aliasHandle = new SamrAliasHandle(mockDcerpcHandle, mockSamrDomainHandle, access, rid);

        // Assert
        assertNotNull(aliasHandle);
        // Verify that sendrecv was called with the correct MsrpcSamrOpenAlias object
        ArgumentCaptor<MsrpcSamrOpenAlias> rpcCaptor = ArgumentCaptor.forClass(MsrpcSamrOpenAlias.class);
        verify(mockDcerpcHandle).sendrecv(rpcCaptor.capture());

        testState = Smb2LeaseState.SMB2_LEASE_READ_WRITE;
        leaseContext = new LeaseV1CreateContextRequest(testKey, testState);
    }

    @Test
    @DisplayName("Should have correct context name")
    void testContextName() {
        assertArrayEquals("RqLs".getBytes(), leaseContext.getName());
        assertEquals("RqLs", LeaseV1CreateContextRequest.CONTEXT_NAME);
    }

    @Test

		t.Errorf("Count() method should get correct value, expect: %v, got %v", count, len(users))
	}

	if err := DB.Model(&User{}).Where("name = ?", user1.Name).Or("name = ?", user3.Name).Count(&count).Find(&users).Error; err != nil {
		t.Errorf(fmt.Sprintf("Count should work, but got err %v", err))
	}

	if count != int64(len(users)) {
		t.Errorf("Count() method should get correct value, expect: %v, got %v", count, len(users))
	}

            assertEquals(HEADER_SIZE + CHUNK_SIZE, bytesWritten);

            // Verify source key at correct position
            for (int i = 0; i < SOURCE_KEY_SIZE; i++) {
                assertEquals(sourceKey[i], largeBuffer[position + i]);
            }

            // Verify chunk count at correct position
            assertEquals(1, SMBUtil.readInt4(largeBuffer, position + SOURCE_KEY_SIZE));
        }

        assertTrue(result.contains("informationLevel=0x101"), "String should contain the correct information level.");
        assertTrue(result.contains("filename=test.txt"), "String should contain the correct filename.");
        assertTrue(result.endsWith("]"), "String should end with a closing bracket.");
    }