}

    public void test_parseWithInvalidFormat() {
        GsaConfigParser parser = new GsaConfigParser();
        String invalidXml = "<?xml version=\"1.0\"?><invalid><test/></invalid>";

        try {
            parser.parse(new InputSource(new StringReader(invalidXml)));
            fail("Should throw GsaConfigException");
        } catch (GsaConfigException e) {

        // Test throwing and catching the exception with cause
        String expectedMessage = "Storage write error";
        Exception expectedCause = new IllegalStateException("Invalid state");

        try {
            throw new StorageException(expectedMessage, expectedCause);
        } catch (StorageException e) {
            assertEquals(expectedMessage, e.getMessage());

    @ParameterizedTest
    @DisplayName("Message constructor should handle crypto-specific error messages")
    @NullAndEmptySource
    @ValueSource(strings = { "AES encryption not supported", "Missing Bouncy Castle provider", "Invalid key length for AES-128",
            "RC4 cipher not available in this JVM", "DES encryption is deprecated and not supported", "HMAC-SHA256 algorithm not found",
            "RSA key generation failed: key size not supported" })

     * Processes user, group, and role prefixes along with allow/deny prefixes.
     *
     * @param value the permission string to encode
     * @return the encoded permission string, or null if the input is blank or invalid
     */
    public String encode(final String value) {
        if (StringUtil.isBlank(value)) {
            return null;
        }

        String permission = value.trim();

          shift += 24;
          len += 3;
        } else {
          int codePoint = Character.codePointAt(input, i);
          if (codePoint == c) {
            // not a valid code point; let the JDK handle invalid Unicode
            return hashBytes(input.toString().getBytes(charset));
          }
          i++;
          buffer |= codePointToFourUtf8Bytes(codePoint) << shift;

		}
		for i, w := range writers {
			if w == nil {
				disks[i] = OfflineDisk
			}
		}
		if err == nil {
			if length := int64(len(data[test.offset:])); n != length {
				t.Errorf("Test %d: invalid number of bytes written: got: #%d want #%d", i, n, length)
			}
			writers := make([]io.Writer, len(disks))
			for i, disk := range disks {
				if disk == nil {
					continue
				}

        assertNotNull(securityDescriptor.getOwnerGroupSid());
    }

    @Test
    @DisplayName("Test decode throws exception for invalid ACE count")
    void testDecodeThrowsExceptionForInvalidAceCount() {
        // Prepare buffer with invalid ACE count (> 4096)
        prepareSecurityDescriptorBufferWithInvalidAceCount(testBuffer, 0);

    }

    @Override
    public int decode(byte[] buffer, int bufferIndex, int len) throws SMBProtocolDecodingException {
        if (len != 8) {
            throw new SMBProtocolDecodingException("Invalid durable handle V2 response length: " + len);
        }

        this.timeout100Ns = SMBUtil.readInt4(buffer, bufferIndex) & 0xFFFFFFFFL; // Timeout (4 bytes, 100-ns intervals, unsigned)

            // Test that invalid threshold is ignored
            dynamicCircuitBreaker.updateFailureThreshold(-1);
            assertEquals(7, dynamicCircuitBreaker.getCurrentFailureThreshold(), "Threshold should not change for invalid value");

        } finally {
            dynamicCircuitBreaker.close();
        }
    }

    @Test

    /**
     * SID type indicating a deleted account.
     */
    public static final int SID_TYPE_DELETED = lsarpc.SID_NAME_DELETED;
    /**
     * SID type indicating an invalid SID.
     */
    public static final int SID_TYPE_INVALID = lsarpc.SID_NAME_INVALID;
    /**
     * SID type indicating an unknown account type.
     */