void testBufferManagement() {
        byte[] buffer = new byte[1024];
        buffer[0] = 0x42;
        buffer[1] = 0x43;

        response.setBuffer(buffer);

        byte[] released = response.releaseBuffer();
        assertSame(buffer, released);
        assertEquals(0x42, released[0]);
        assertEquals(0x43, released[1]);

        // After release, getting buffer again should return null

     * Inheritance flag: child objects inherit this ACE
     */
    int FLAGS_OBJECT_INHERIT = 0x01;
    /**
     * Inheritance flag: child containers inherit this ACE
     */
    int FLAGS_CONTAINER_INHERIT = 0x02;
    /**
     * Inheritance flag: inheritance stops after one level
     */
    int FLAGS_NO_PROPAGATE = 0x04;
    /**
     * Inheritance flag: ACE applies only to children, not to the object itself
     */

        // Error response structure: size(2)=9, errorContextCount(1), reserved(1), bc(4), errorData(bc)
        SMBUtil.writeInt2(9, buf, bodyStart);
        buf[bodyStart + 2] = 0x02; // errorContextCount
        buf[bodyStart + 3] = 0x00; // reserved
        int bc = 4;
        SMBUtil.writeInt4(bc, buf, bodyStart + 4);
        byte[] err = new byte[] { 0x55, 0x66, 0x77, 0x01 };

        smb.mid = 123;
        smb.pid = 456;
        smb.tid = 789;
        smb.uid = 101;
        smb.flags2 = ServerMessageBlock.FLAGS2_UNICODE;
        smb.useUnicode = true;

        byte[] params = { 0x01, 0x02, 0x03, 0x04 };
        byte[] bytes = { 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F };
        smb.setParamWords(params);
        smb.setBytes(bytes);

        byte[] buffer = new byte[1024];

        when(this.mechContext.getFlags()).thenReturn(0x1234);
        when(this.mechContext.initSecContext(any(byte[].class), eq(0), eq(0))).thenReturn(new byte[] { 0x01, 0x02 });

        // Act: len==0 triggers initial token construction
        byte[] out = ctx.initSecContext(null, 0, 0);

        // Assert: returns a SPNEGO token (opaque here but non-null/non-empty)

        buffer[22] = 0x00;
        buffer[23] = 0x00;

        // TID (2 bytes)
        buffer[24] = 0x01;
        buffer[25] = 0x00;

        // PID (2 bytes)
        buffer[26] = 0x02;
        buffer[27] = 0x00;

        // UID (2 bytes)
        buffer[28] = 0x03;
        buffer[29] = 0x00;

        // MID (2 bytes)
        buffer[30] = 0x04;
        buffer[31] = 0x00;

   * @return {@code true} if the argument is a 6to4 address
   */
  public static boolean is6to4Address(Inet6Address ip) {
    byte[] bytes = ip.getAddress();
    return (bytes[0] == (byte) 0x20) && (bytes[1] == (byte) 0x02);
  }

  /**
   * Returns the IPv4 address embedded in a 6to4 address.
   *
   * @param ip {@link Inet6Address} to be examined for embedded IPv4 in 6to4 address

    }

    @Test
    void testConstructorWithMalformedToken() {
        // Test that PACDecodingException is thrown for a malformed token
        byte[] malformedToken = new byte[] { 0x01, 0x02, 0x03 };
        PACDecodingException e = assertThrows(PACDecodingException.class, () -> new KerberosTicket(malformedToken, (byte) 0, keys));
        assertTrue(e.getMessage().startsWith("Malformed kerberos ticket"));
    }

            // Test with various wildcard patterns and attribute masks
            String[] wildcards = { "*.txt", "test*", null };
            int[] attributes = { 0x10, 0x20, 0x07 };

            for (int i = 0; i < wildcards.length; i++) {
                DosFileFilter dos = new DosFileFilter(wildcards[i], attributes[i]);

        // Random but realistic GUID
        byte[] testGuid = { (byte) 0x01, (byte) 0x23, (byte) 0x45, (byte) 0x67, (byte) 0x89, (byte) 0xAB, (byte) 0xCD, (byte) 0xEF,
                (byte) 0xFE, (byte) 0xDC, (byte) 0xBA, (byte) 0x98, (byte) 0x76, (byte) 0x54, (byte) 0x32, (byte) 0x10 };

        // Security mode with signing required