Bug#654899: libarchive-zip-perl: jh_manifest from javahelper creates corrupt archives (jars)

[Niko Tyni]

On Fri, Jan 06, 2012 at 04:59:35PM +0000, Wookey wrote:
> Package: libarchive-zip-perl
> Version: 1.30-3
> Severity: important
> Tags: upstream
> 
> jh_manifest generates corrupt jars using this code:
[...]
> The member for the directory entry META-INF/ is present and correct in the
> original jar, but after the member for the file META-INF/MANIFEST.MF
> is added the directory mmeber is corrupt. 3 bytes in the header have
> changed:

> The new compressed size is wrong, and gives this error if unzipped:
> $ unzip -t debian/terraintool/usr/share/terraintool/terraintool.jar | head -n 5
> Archive:  debian/terraintool/usr/share/terraintool/terraintool.jar
> META-INF/:  ucsize 0 <> csize 2 for STORED entry
>          continuing with "compressed" size value
>     testing: META-INF/                bad CRC 1a6cd7b3  (should be 00000000)
>     testing: mccombe/                 OK

I'm having trouble reproducing this on sid/amd64 with a self made trivial
jar file. Could you please provide a test case? (I suppose that's a
jar file that breaks, the necessary bits in debian/ and a jh_manifest
invocation that goes wrong.)

Also, #634089 talks about wheezy/sid but you've filed this with
the squeeze versions. Is that an accident or is this really broken
on stable too?
-- 
Niko Tyni   ntyni at debian.org