.writeByte(0b01111111)

    val derReader = DerReader(buffer)

    assertFailsWith<ProtocolException> {
      derReader.read("test") {}
    }.also { expected ->
      assertThat(expected.message).isEqualTo("invalid encoding for length")
    }
  }

  @Test fun `decode length not encoded in shortest form possible`() {
    val buffer =
      Buffer()
        .writeByte(0b00000010)
        .writeByte(0b10000001)

                    }
                }
            }
        } catch (SmbException e) {
            throw e;
        } catch (IOException e1) {
            log.debug("Ignoring invalid initial token", e1);
        }

        return new SpnegoContext(tc.getConfig(), setupTargetName(tc, host, new NtlmContext(tc, this, doSigning)));
    }

                        repos.add(repo);
                    } catch (InvalidRepositoryException e) {
                        throw new ProjectBuildingException("", "Invalid remote repository " + repository, e);
                    }
                    normalized = true;
                } else {
                    repos.add((ArtifactRepository) repository);
                }

        } catch (ConfigPropertyNotFoundException e) {
            assertTrue(e.getMessage().contains("non.existent.boolean"));
        }
    }

    // Test getTimeAdjustTimeMillisAsLong with invalid number format
    public void xtest_getTimeAdjustTimeMillisAsLong_invalidFormat() {
        FessEnv.SimpleImpl customEnv = new FessEnv.SimpleImpl() {
            protected Properties prepareProperties() {

          }

          var lengthBits = source.readByte().toLong() and 0xff
          if (lengthBits == 0L || lengthBytes == 1 && lengthBits and 0b1000_0000 == 0L) {
            throw ProtocolException("invalid encoding for length")
          }

          for (i in 1 until lengthBytes) {
            lengthBits = lengthBits shl 8
            lengthBits += source.readByte().toInt() and 0xff
          }

    void testGetPreNTLMResponse_invalidEncoding() {
        // Arrange
        when(cifsContext.getConfig()).thenReturn(configuration);
        when(configuration.getOemEncoding()).thenReturn("X-INVALID-ENCODING-NOT-EXISTENT");

        // Act + Assert
        RuntimeException ex = assertThrows(RuntimeException.class, () -> NtlmUtil.getPreNTLMResponse(cifsContext, "password", new byte[8]));

        assertSame(t1, t2, "Expected same tree instance to be reused");
    }

    @ParameterizedTest
    @NullAndEmptySource
    @DisplayName("treeConnectLogon: invalid logon share throws SmbException")
    void testTreeConnectLogonInvalid(String logonShare) {
        SmbSessionImpl session = spy(newSession());
        when(configuration.getLogonShare()).thenReturn(logonShare);

   * Otherwise this returns an empty list of challenges.
   *
   * If a challenge uses the `token68` variant instead of auth params, there is exactly one
   * auth param in the challenge at key null. Invalid headers and challenges are ignored.
   * No semantic validation is done, for example that `Basic` auth must have a `realm`
   * auth param, this is up to the caller that interprets these challenges.
   */

              // 001NNNNN
              maxDynamicTableByteCount = readInt(b, PREFIX_5_BITS)
              if (maxDynamicTableByteCount < 0 || maxDynamicTableByteCount > headerTableSizeSetting) {
                throw IOException("Invalid dynamic table size update $maxDynamicTableByteCount")
              }
              adjustDynamicTableByteCount()
            }
            b == 0x10 || b == 0 -> {
              // 000?0000 - Ignore never indexed bit.

        // Given: Create a new pool for this test to ensure isolation
        SmbTransportPoolImpl testPool = new SmbTransportPoolImpl();
        when(ctx.getTransportPool()).thenReturn(testPool);

        // Connection with invalid port
        SmbTransportImpl first = testPool.getSmbTransport(ctx, address, invalidPort, false);

        // Verify that the transport was created with the default port