commons-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Plamen Totev (JIRA)" <>
Subject [jira] [Created] (COMPRESS-394) Zip - Local `Version Needed To Extract` does not match Central Directory
Date Sat, 13 May 2017 21:53:04 GMT
Plamen Totev created COMPRESS-394:

             Summary: Zip - Local `Version Needed To Extract` does not match Central Directory
                 Key: COMPRESS-394
             Project: Commons Compress
          Issue Type: Bug
          Components: Archivers
            Reporter: Plamen Totev


This is followup on an issue reported on Plexus Archiver -

Plexus Archiver uses {{ZipArchiveOutputStream}} to create zip archives. It constructs the
{{ZipArchiveOutputStream}} using {{BufferedOutputStream}}. As a result the output do not provide
random access and additional data descriptor records are added. Unfortunately this leads to
different values being set for {{version needed to extract}} field in the local file header
and in the central directory. It looks like that the root cause is the way the local header
{{version needed to extract}} field value is calculated:
        if (phased &&  !isZip64Required(entry.entry, zip64Mode)){
        } else {
            putShort(versionNeededToExtract(zipMethod, hasZip64Extra(ze)), buf, LFH_VERSION_NEEDED_OFFSET);

As you can see the need for data descriptors is not taken into account. On other hand when
the central directory is created the following is used to determine the minimum required version

    private int versionNeededToExtract(final int zipMethod, final boolean zip64) {
        if (zip64) {
            return ZIP64_MIN_VERSION;
        // requires version 2 as we are going to store length info
        // in the data descriptor
        return (isDeflatedToOutputStream(zipMethod)) ?

As a side note: I'm not a zip expert by any means so I could be wrong, but my understanding
is that if Deflate compression is used then the minimum required version should be 2.0 regardless
if data descriptors are used or not.

This message was sent by Atlassian JIRA

View raw message