* @param data the raw PAC data bytes
     * @param keys map of Kerberos keys for signature validation
     * @throws PACDecodingException if the PAC data is malformed or signature validation fails
     */
    public Pac(byte[] data, Map<Integer, KerberosKey> keys) throws PACDecodingException {
        byte[] checksumData = data.clone();
        try {

    private byte[] checksum;

    /**
     * Constructs a PacSignature by parsing the provided data.
     *
     * @param data the raw signature data to parse
     * @throws PACDecodingException if the data is malformed or cannot be parsed
     */
    public PacSignature(final byte[] data) throws PACDecodingException {
        try {

    }

    @Test
    @DisplayName("byte[] ctor: malformed DER is wrapped as PACDecodingException (IOException path)")
    void byteArrayConstructor_malformedDER_throwsWrapped() {
        // Arrange: Truncated SEQUENCE (0x30 len=2 but only 1 byte of content)
        byte[] malformed = new byte[] { 0x30, 0x02, 0x01 };

        // Act + Assert

     * @throws PACDecodingException if the string structure is malformed
     */
    public PacUnicodeString readUnicodeString() throws IOException, PACDecodingException {
        final short length = readShort();
        final short maxLength = readShort();
        final int pointer = readInt();

        if (maxLength < length) {
            throw new PACDecodingException("Malformed string in PAC");
        }

import okhttp3.ResponseBody
import okio.BufferedSource

class RealResponseBody(
  /**
   * Use a string to avoid parsing the content type until needed. This also defers problems caused
   * by malformed content types.
   */
  private val contentTypeString: String?,
  private val contentLength: Long,
  private val source: BufferedSource,
) : ResponseBody() {
  override fun contentLength(): Long = contentLength

        assertNotNull(cifsContextWrapper.get(url));
    }

    @Test
    void testGetSmbResource_MalformedURLException() {
        // Test get(String url) with a malformed URL
        String malformedUrl = "invalid-url";
        CIFSException thrown = assertThrows(CIFSException.class, () -> {
            cifsContextWrapper.get(malformedUrl);
        });

    void testConstructorWithEmptyToken() {
        byte[] emptyToken = new byte[0];
        assertThrows(PACDecodingException.class, () -> new KerberosToken(emptyToken));
    }

    /**
     * Test constructor with a malformed token (not ASN.1).
     */
    @Test
    void testConstructorWithMalformedToken() {
        byte[] malformedToken = "This is not a valid token".getBytes();

            // Should handle gracefully (exact behavior depends on implementation)
            // This test mainly verifies no exceptions are thrown
        }

        @Test
        @DisplayName("should handle malformed POM gracefully")
        void shouldHandleMalformedPomGracefully() throws Exception {
            Path pomFile = tempDir.resolve("pom.xml");
            String malformedPom = "<?xml version=\"1.0\"?><project><invalid></project>";

            if (derToken.getTagClass() != BERTags.APPLICATION) {
                throw new PACDecodingException("Malformed kerberos ticket");
            }
            stream.close();
        } catch (IOException e) {
            throw new PACDecodingException("Malformed kerberos ticket", e);
        }

        ASN1Sequence sequence;
        try {

import org.lastaflute.web.validation.VaMessenger;

/**
 * Exception thrown when an invalid query is encountered.
 * This exception is typically used in search contexts where a provided
 * query is malformed, contains invalid syntax, or violates query constraints.
 */
public class InvalidQueryException extends FessSystemException {

    /** Serial version UID for serialization */