// Then - Verify keys are wiped (we can't directly access private fields,
        // but we can verify the context behaves correctly after wiping)
        // After wiping, operations that require keys should fail

        // Attempting to use the context after wiping should handle gracefully
        // Note: The actual implementation might throw an exception or handle differently
    }

    @Test

        }

        @Test
        @DisplayName("Insufficient buffer causes ArrayIndexOutOfBoundsException")
        void shortBuffer_throwsAIOOBE() {
            // Arrange: length 1 means readInt2 will access index 1 and fail
            byte[] buffer = new byte[1];
            Smb2LogoffResponse resp = newResponse();

            // Act & Assert

labels.user_given_name=Nome
labels.givenName=Nome (dado)
labels.user_surname=Sobrenome
labels.surame=Sobrenome
labels.user_mail=Endereço de e-mail
labels.mail=Endereço de e-mail
labels.user_employeeNumber=Número do funcionário
labels.employeeNumber=Número do funcionário
labels.user_telephoneNumber=Número de telefone
labels.telephoneNumber=Número de telefone

    /**
     * Test createCustomFilter with null throws exception
     */
    public void testCreateCustomFilter_NullPatterns() {
        try {
            SerializeUtil.createCustomFilter(null);
            fail("Expected IllegalArgumentException");
        } catch (final IllegalArgumentException e) {
            // Expected
        }
    }

    /**
     * Test serialization with empty array
     *

 * descriptor ACEs:
 *
 * <pre>
 * Allow WNET\alice     0x001200A9  Direct
 * Allow Administrators 0x001F01FF  Inherited
 * Allow SYSTEM         0x001F01FF  Inherited
 * </pre>
 *
 * the access check would fail because the direct ACE has an access mask
 * of <code>0x001200A9</code> which doesn't have the
 * <code>FILE_WRITE_DATA</code> bit on (bit <code>0x00000002</code>). Actually, this isn't quite correct. If

        if ((flags & SmbConstants.O_CREAT) == SmbConstants.O_CREAT) {
            // create it if necessary
            if ((flags & SmbConstants.O_EXCL) == SmbConstants.O_EXCL) {
                // fail if already exists
                this.openFunction = OPEN_FN_CREATE | OPEN_FN_FAIL_IF_EXISTS;
            } else {
                this.openFunction = OPEN_FN_CREATE | OPEN_FN_OPEN;
            }
        } else {

        // It mainly tests the decryption logic path
        Key key = new KerberosKey(null, new byte[16], KerberosConstants.RC4_ENC_TYPE, 0);
        byte[] data = new byte[32]; // Dummy data
        // The test will likely fail with "Checksum failed" as the data is not properly encrypted
        // but it proves the decryption path is taken.

**Covered Extractors**:
- ZipExtractor
- TarExtractor

**Test Count**: 12 tests

**Key Scenarios**:
- ✅ Descriptive error messages for invalid archives
- ✅ Continues processing when some entries fail
- ✅ Handles empty archives gracefully
- ✅ Mixed valid/invalid entries processed correctly
- ✅ Null input stream validation

---

### 4. AbstractExtractorTest.java

    <example>${fe:formatCode("L", "prettyprint", doc.mimetype, doc.content_description)}</example>
  </function>

  <function>
    <description>Mask e-mail address.</description>
    <name>maskEmail</name>
    <function-class>org.codelibs.fess.taglib.FessFunctions</function-class>
    <function-signature>java.lang.String maskEmail(java.lang.String)</function-signature>

        // However, we'll try to read it safely for compatibility
        if (this.byteCount > bufferIndex - start) {
            try {
                // Attempt to read nativeFileSystem, but don't fail if there are issues
                final int fsLen = this.byteCount - (bufferIndex - start);
                if (fsLen > 0 && fsLen < 256) { // Sanity check on length