void byteArrayConstructor_malformedDER_throwsWrapped() {
        // Arrange: Truncated SEQUENCE (0x30 len=2 but only 1 byte of content)
        byte[] malformed = new byte[] { 0x30, 0x02, 0x01 };

        // Act + Assert
        PACDecodingException ex = assertThrows(PACDecodingException.class, () -> new KerberosApRequest(malformed, null));
        assertTrue(ex.getMessage().contains("Malformed Kerberos Ticket"));

        byte[] buffer = new byte[100];
        int result = response.readSetupWireFormat(buffer, 0, 100);
        assertEquals(0, result);
    }

    @Test
    void testReadParametersWireFormat() {
        byte[] buffer = new byte[100];
        int result = response.readParametersWireFormat(buffer, 0, 100);
        assertEquals(0, result);
    }

    @Test

        assertDoesNotThrow(() -> InputValidator.validateArrayBounds(src, 50, dst, 50, 50));

        assertThrows(IllegalArgumentException.class, () -> InputValidator.validateArrayBounds(null, 0, dst, 0, 10));
        assertThrows(IllegalArgumentException.class, () -> InputValidator.validateArrayBounds(src, 0, null, 0, 10));

            request.setFileId(testFileId);
            request.setData(data, 512, 1024);
            request.setOffset(4096L);
            request.setRemainingBytes(2048);
            request.setWriteFlags(0x02);

            // Calculate expected size
            int expectedSize = ((Smb2Constants.SMB2_HEADER_LENGTH + 48 + 1024 + 7) / 8) * 8;
            assertEquals(expectedSize, request.size());

        assertEquals((byte) (0x80 | (NameServicePacket.QUERY << 3) | 0x04 | 0x02 | 0x01), dst[2]); // flags1
        assertEquals((byte) (0x80 | 0x10 | NameServicePacket.FMT_ERR), dst[3]); // flags2
        assertEquals((byte) 0x00, dst[4]); // questionCount
        assertEquals((byte) 0x01, dst[5]);
        assertEquals((byte) 0x00, dst[6]); // answerCount
        assertEquals((byte) 0x02, dst[7]);
        assertEquals((byte) 0x00, dst[8]); // authorityCount

import jcifs.smb1.util.Hexdump;

class Trans2FindFirst2 extends SmbComTransaction {

    // flags

    private static final int FLAGS_CLOSE_AFTER_THIS_REQUEST = 0x01;
    private static final int FLAGS_CLOSE_IF_END_REACHED = 0x02;
    private static final int FLAGS_RETURN_RESUME_KEYS = 0x04;
    private static final int FLAGS_RESUME_FROM_PREVIOUS_END = 0x08;
    private static final int FLAGS_FIND_WITH_BACKUP_INTENT = 0x10;

            // Test at buffer start
            int result1 = response.decode(buffer, 0, 10);
            assertEquals(10, result1);

            // Test at buffer end
            int result2 = response.decode(buffer, 90, 10);
            assertEquals(10, result2);

            // Test full buffer
            int result3 = response.decode(buffer, 0, 100);
            assertEquals(100, result3);
        }

        @Test

        prepareMinimalSecurityDescriptorBuffer(testBuffer, 0, true, true, false);

        // Decode with exact size needed
        int size = securityDescriptor.decode(testBuffer, 0, 100);

        // decode returns 0 when no DACL is present (falls through)
        assertEquals(0, size);
        assertNotNull(securityDescriptor.getOwnerUserSid());

        byte[] rawData = new byte[48]; // 8 (size/zero) + 8 (customData) + 32 (machineId)
        // Simulate some data
        rawData[0] = 48; // size
        rawData[16] = 0x01; // machineId start
        rawData[17] = 0x02;

        AvSingleHost avSingleHost = new AvSingleHost(rawData);

        assertNotNull(avSingleHost);
        assertEquals(AvPair.MsvAvSingleHost, avSingleHost.getType());

        assertFalse(key.isZero());
    }

    @Test
    @DisplayName("Should create lease key from byte array")
    void testLeaseKeyFromBytes() {
        byte[] testBytes = new byte[] { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F, 0x10 };

        Smb2LeaseKey key = new Smb2LeaseKey(testBytes);

        assertArrayEquals(testBytes, key.getKey());