[COMPRESS-101] ZipArchiveInputStream doesn't handle data descriptors without signatures

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0
• Fix Version/s: 1.1
• Assignee: Stefan Bodewig
• Reporter: Stefan Bodewig
• Created: 12/Mar/10 15:13
• Updated: 12/Mar/10 15:36
• Resolved: 12/Mar/10 15:36

Description

from http://www.pkware.com/documents/casestudies/APPNOTE.TXT :

Although not originally assigned a signature, the value
0x08074b50 has commonly been adopted as a signature value
for the data descriptor record. Implementers should be
aware that ZIP files may be encountered with or without this
signature marking data descriptors and should account for
either case when reading ZIP files to ensure compatibility.
When writing ZIP files, it is recommended to include the
signature value marking the data descriptor record. When
the signature is used, the fields currently defined for
the data descriptor record will immediately follow the
signature.

The current code skips over 16 bytes while the descriptor may be using only 12 bytes.