void testReadULongOutOfBounds() {
        byte[] a = new byte[] { 0x01, 0x02, 0x03 };
        assertThrows(IndexOutOfBoundsException.class, () -\u003e NtlmMessage.readULong(a, 0));
    }

    @Test
    @DisplayName("readSecurityBuffer correctly extracts data")
    void testReadSecurityBuffer() {
        byte[] buf = new byte[8 + 4];
        byte[] payload = { 0x11, 0x22, 0x33, 0x44 };

            originalUuid.clock_seq_hi_and_reserved = (byte) 0x99;
            originalUuid.clock_seq_low = (byte) 0x88;
            originalUuid.node = new byte[] { (byte) 0x11, (byte) 0x22, (byte) 0x33, (byte) 0x44, (byte) 0x55, (byte) 0x66 };

            // Mock encoding buffer
            NdrBuffer encodeBuffer = mock(NdrBuffer.class);
            when(encodeBuffer.derive(anyInt())).thenReturn(encodeBuffer);

        ASN1ObjectIdentifier[] mechs = new ASN1ObjectIdentifier[] { OID_KRB, OID_NTLM };
        int flags = NegTokenInit.DELEGATION | NegTokenInit.MUTUAL_AUTHENTICATION | NegTokenInit.INTEGRITY;
        byte[] mechToken = new byte[] { 0x01, 0x02, 0x03 };
        byte[] mic = new byte[] { (byte) 0xFE, 0x55 };

        NegTokenInit init = new NegTokenInit(mechs, flags, mechToken, mic);
        byte[] bytes = init.toByteArray();

        serverData.serverTime = System.currentTimeMillis();
        serverData.serverTimeZone = -480; // PST
        serverData.encryptionKeyLength = 8;
        serverData.encryptionKey = new byte[] { 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, (byte) 0x88 };
        serverData.guid = new byte[16];

        // Then - verify all values are set correctly
        assertEquals((byte) 0x98, serverData.sflags);

        assertEquals(buf.length, n, "Parameter bytes written should match expected length");
        // informationLevel LE at offset 4..5
        assertEquals((byte) 0x04, buf[4]);
        assertEquals((byte) 0x01, buf[5]);
    }

    /**
     * Ensures writeSetupWireFormat writes subcommand and trailing zero, returning 2.
     */
    @Test
    void testWriteSetupWireFormat() {
        // Given

        assertEquals(0x11, smbComOpenAndX.openFunction); // OPEN_FN_CREATE | OPEN_FN_OPEN
    }

    /**
     * Test constructor with no special flags.
     */
    @Test
    void testConstructor_OpenOnly() {
        int flags = 0;
        smbComOpenAndX = new SmbComOpenAndX(fileName, access, flags, andx);
        assertEquals(0x01, smbComOpenAndX.openFunction); // OPEN_FN_OPEN
    }

    /**

		ACB_USE_DES_KEY_ONLY       = 0x00008000, /* 1 = Use DES key only */
		ACB_DONT_REQUIRE_PREAUTH   = 0x00010000  /* 1 = Preauth not required */
	} SamrAcctFlags;

	[op(0x01)]
	int SamrCloseHandle([in] policy_handle *handle);

	[op(0x39)]
	int SamrConnect2([in,string,unique] wchar_t *system_name,
			[in] uint32_t access_mask,
			[out] policy_handle *handle);

	[op(0x3e)]

        Arrays.fill(destData, (byte) 0x00); // Clear destData
        ndrBuffer.readOctetArray(destData, 1, 3); // Read 0x10, 0x11, 0x12 into destData[1-3]

        assertEquals(3, ndrBuffer.getIndex());
        assertEquals(0x00, destData[0]);
        assertEquals(0x10, destData[1]);
        assertEquals(0x11, destData[2]);
        assertEquals(0x12, destData[3]);
        assertEquals(0x00, destData[4]);
    }

    @Test

    private Smb2SessionSetupRequest request;

    // Test constants
    private static final int TEST_SECURITY_MODE = 0x01;
    private static final int TEST_CAPABILITIES = 0x00000001;
    private static final long TEST_PREVIOUS_SESSION_ID = 0x1234567890ABCDEFL;
    private static final byte[] TEST_TOKEN = { 0x01, 0x02, 0x03, 0x04, 0x05 };

    @BeforeEach
    void setUp() {
        mockConfig = mock(Configuration.class);

                new byte[] { (byte) 0xbb, (byte) 0x6e, (byte) 0xd3, (byte) 0x08, (byte) 0x70, (byte) 0xb7, (byte) 0xf0, (byte) 0xe0 });

        // 64-fold("kerberos")
        verifyNfold("kerberos", 8,
                new byte[] { (byte) 0x6b, (byte) 0x65, (byte) 0x72, (byte) 0x62, (byte) 0x65, (byte) 0x72, (byte) 0x6f, (byte) 0x73 });
    }

    /**
     * Helper method to verify n-fold expansion.
     */