// uploaded with the single-part PUT API. The offset and length
// specify the requested range.
func DecryptSinglePart(w io.Writer, offset, length int64, key ObjectKey) io.WriteCloser {
	const PayloadSize = 1 << 16 // DARE 2.0
	w = ioutil.LimitedWriter(w, offset%PayloadSize, length)

	decWriter, err := sio.DecryptWriter(w, sio.Config{Key: key[:]})
	if err != nil {

  public void testConcat_overflow_negative() {
    int dim1 = 1 << 16;
    int dim2 = 1 << 15;
    assertThat(dim1 * dim2).isLessThan(0);
    testConcatOverflow(dim1, dim2);
  }

  @GwtIncompatible // different overflow behavior; could probably be made to work by using ~~
  public void testConcat_overflow_nonNegative() {
    int dim1 = 1 << 16;
    int dim2 = 1 << 16;
    assertThat(dim1 * dim2).isAtLeast(0);

    - [Client Binaries](#client-binaries-3)
    - [Server Binaries](#server-binaries-3)
    - [Node Binaries](#node-binaries-3)
  - [Changelog since v1.11.6](#changelog-since-v1116)
    - [Other notable changes](#other-notable-changes-3)
- [v1.11.6](#v1116)
  - [Downloads for v1.11.6](#downloads-for-v1116)
    - [Client Binaries](#client-binaries-4)
    - [Server Binaries](#server-binaries-4)
    - [Node Binaries](#node-binaries-4)

	var headerTests = []struct {
		name    string
		extra   []byte
		wanterr error
	}{
		{
			name:    strings.Repeat("x", 1<<16),
			extra:   []byte{},
			wanterr: errLongName,
		},
		{
			name:    "long_extra",
			extra:   bytes.Repeat([]byte{0xff}, 1<<16),
			wanterr: errLongExtra,
		},
	}

	// write a zip file
	buf := new(bytes.Buffer)
	w := NewWriter(buf)

	_ = x[ErrMaximumExpires-110]
	_ = x[ErrSlowDownRead-111]
	_ = x[ErrSlowDownWrite-112]
	_ = x[ErrMaxVersionsExceeded-113]
	_ = x[ErrInvalidPrefixMarker-114]
	_ = x[ErrBadRequest-115]
	_ = x[ErrKeyTooLongError-116]
	_ = x[ErrInvalidBucketObjectLockConfiguration-117]
	_ = x[ErrObjectLockConfigurationNotFound-118]
	_ = x[ErrObjectLockConfigurationNotAllowed-119]
	_ = x[ErrNoSuchObjectLockConfiguration-120]
	_ = x[ErrObjectLocked-121]

		{"\xbf", (1 << 6) - 1, true},
		{"\xbf\xff", (1 << 14) - 1, true},
		{"\xbf\xff\xff", (1 << 22) - 1, true},
		{"\xff", -1, true},
		{"\xff\xff", -1, true},
		{"\xff\xff\xff", -1, true},
		{"\xc0", -1 * (1 << 6), true},
		{"\xc0\x00", -1 * (1 << 14), true},
		{"\xc0\x00\x00", -1 * (1 << 22), true},
		{"\x87\x76\xa2\x22\xeb\x8a\x72\x61", 537795476381659745, true},

	if expThis != gotThis {
		t.Fatalf("expected uuid %s, got %s", expThis, gotThis)
	}
}

// tests formatErasureV3ThisEmpty conditions.
func TestFormatErasureEmpty(t *testing.T) {
	format := newFormatErasureV3(1, 16)
	format.Erasure.DistributionAlgo = formatErasureVersionV2DistributionAlgoV1
	formats := make([]*formatErasureV3, 16)

	for j := range 16 {
		newFormat := format.Clone()
		newFormat.Erasure.This = format.Erasure.Sets[0][j]

        void testBinaryConstructorInvalidCount() {
            // Arrange: second byte is sub_authority_count > 100
            byte[] bytes = new byte[1 + 1 + 6];
            bytes[0] = 1; // revision
            bytes[1] = (byte) 101; // invalid count

            // Act + Assert
            RuntimeException ex = assertThrows(RuntimeException.class, () -> new SID(bytes, 0));

     *
     * @param sid the RPC sid_t structure to convert
     * @return byte encoded form
     */
    public static byte[] toByteArray(final rpc.sid_t sid) {
        final byte[] dst = new byte[1 + 1 + 6 + sid.sub_authority_count * 4];
        int di = 0;
        dst[di] = sid.revision;
        di++;
        dst[di++] = sid.sub_authority_count;
        System.arraycopy(sid.identifier_authority, 0, dst, di, 6);

{* ../../docs_src/security/tutorial005_an_py310.py hl[106,108:116] *}

## Проверка `username` и формата данных { #verify-the-username-and-data-shape }

Мы проверяем, что получили `username`, и извлекаем scopes.