char[] passwordChars = this.auth.getPasswordAsCharArray();
            if (passwordChars != null) {
                passwordString = new String(passwordChars);
                // Securely wipe the char array immediately after use
                java.util.Arrays.fill(passwordChars, '\0');
            }
        }

        return new Type3Message(this.transportContext, msg2, this.targetName, passwordString,

        // Check that bytes before startIndex are unchanged
        for (int i = 0; i < startIndex; i++) {
            assertEquals((byte) (i & 0xFF), dst[i]);
        }

        // Check that bytes after written area are unchanged
        for (int i = startIndex + bytesWritten; i < dst.length; i++) {
            assertEquals((byte) (i & 0xFF), dst[i]);
        }
    }

    @Test

            assertTrue(result.contains("sectPerAlloc=0"));
            assertTrue(result.contains("bytesPerSect=0"));
        }

        @Test
        @DisplayName("Should return correct string representation after decoding")
        void shouldReturnCorrectStringAfterDecoding() throws SMBProtocolDecodingException {
            // Given
            ByteBuffer buffer = ByteBuffer.allocate(24);

     * @param req The servlet request
     * @param resp The servlet response
     * @param skipAuthentication If true the negotiation is only done if it is
     * initiated by the client (MSIE post requests after successful NTLM SSP
     * authentication). If false and the user has not been authenticated yet
     * the client will be forced to send an authentication (server sends
     * HttpServletResponse.SC_UNAUTHORIZED).

    @Test
    void testConstructorWithUnrecognizedField() throws IOException, GeneralSecurityException {
        // Test with an unrecognized field in the ticket
        // Note: In the actual implementation, field 99 would come after mandatory fields,
        // so decryption happens first. We test with a mocked successful decryption.
        byte[] token = createTestTicketBytes(new BigInteger(KerberosConstants.KERBEROS_VERSION), SERVER_REALM, SERVER_PRINCIPAL_NAME,

     *            The original string.
     * @param fromText
     *            The substring to be replaced.
     * @param toText
     *            The replacement substring.
     * @return The resulting string after replacements.
     */
    public static final String replace(final String text, final String fromText, final String toText) {
        if (text == null || fromText == null || toText == null) {
            return null;
        }

    }

    /**
     * Creates a new document in the search index.
     *
     * @param form the create form containing document data
     * @return HTML response redirecting to the list page after creation
     */
    @Execute
    @Secured({ ROLE })
    public HtmlResponse create(final CreateForm form) {
        verifyCrudMode(form.crudMode, CrudMode.CREATE, this::asListHtml);

        activityHelper.access(getUserBean(), requestPath, executeName);
        return super.hookBefore(runtime);
    }

    /**
     * Hook method called after action execution completes.
     * <p>
     * This method performs cleanup operations by calling the parent hook.
     * </p>
     *
     * @param runtime the action runtime context
     */
    @Override

            parameterOffset += pad;

            totalParameterCount = writeParametersWireFormat(txn_buf, bufParameterOffset);
            bufDataOffset = totalParameterCount; // data comes right after data

            int available = maxBufferSize - parameterOffset;
            parameterCount = Math.min(totalParameterCount, available);
            available -= parameterCount;

        assertTrue(mockService.unregisterWitness(regId));
        assertEquals(0, mockService.getRegistrationCount());
        assertFalse(mockService.hasRegistration(regId));

        // 5. Verify heartbeat fails after unregistration
        assertFalse(mockService.processHeartbeat(regId, 4));
    }

    /**
     * Test error conditions and edge cases
     */
    @Test
    void testErrorConditions() {