@zip.js/zip.js 2.8.43 → 2.8.45

package/lib/core/zip-reader.js

@@ -57,6 +57,8 @@ import {
 	EXTRAFIELD_TYPE_EXTENDED_TIMESTAMP,
 	EXTRAFIELD_TYPE_INFOZIP,
 	EXTRAFIELD_TYPE_UNIX,
+	EXTRAFIELD_TYPE_UNIX_TYPE1,
+	EXTRAFIELD_TYPE_PKWARE_UNIX,
 	EXTRAFIELD_TYPE_USDZ,
 	END_OF_CENTRAL_DIR_LENGTH,
 	ZIP64_END_OF_CENTRAL_DIR_LOCATOR_LENGTH,
@@ -93,6 +95,8 @@ import {
 	runWorker,
 	CODEC_INFLATE,
 	ERR_INVALID_SIGNATURE,
+	ERR_INVALID_CRC32,
+	ERR_INVALID_AUTHENTICATION_CODE,
 	ERR_INVALID_PASSWORD,
 	ERR_INVALID_UNCOMPRESSED_SIZE,
 	ERR_INVALID_COMPRESSED_DATA,
@@ -141,6 +145,8 @@ import {
 	OPTION_CHECK_OVERLAPPING_ENTRY,
 	OPTION_CHECK_AMBIGUITY,
 	OPTION_CHECK_SIGNATURE,
+	OPTION_CHECK_CRC32,
+	OPTION_CHECK_AUTHENTICATION_CODE,
 	OPTION_STRICTNESS,
 	OPTION_MAX_APPENDED_DATA_SIZE,
 	STRICTNESS_STRICT,
@@ -169,6 +175,7 @@ const CHARSET_UTF8 = "utf-8";
 const PROPERTY_NAME_UTF8_SUFFIX = "UTF8";
 const CHARSET_CP437 = "cp437";
 const BITFLAG_AMBIGUITY_MASK = BITFLAG_ENCRYPTED | BITFLAG_DATA_DESCRIPTOR | BITFLAG_LANG_ENCODING_FLAG;
+const VENDOR_VERSION_AE_1 = 1;
 const ZIP64_PROPERTIES = [
 	[PROPERTY_NAME_UNCOMPRESSED_SIZE, MAX_32_BITS],
 	[PROPERTY_NAME_COMPRESSED_SIZE, MAX_32_BITS],
@@ -551,6 +558,8 @@ export {
 	ERR_UNSUPPORTED_ENCRYPTION,
 	ERR_UNSUPPORTED_COMPRESSION,
 	ERR_INVALID_SIGNATURE,
+	ERR_INVALID_CRC32,
+	ERR_INVALID_AUTHENTICATION_CODE,
 	ERR_INVALID_PASSWORD,
 	ERR_INVALID_UNCOMPRESSED_SIZE,
 	ERR_INVALID_COMPRESSED_DATA,
@@ -583,7 +592,7 @@ class ZipEntry {
 			config,
 			bitFlag,
 			rawBitFlag,
-			signature,
+			crc32,
 			rawLastModDate,
 			uncompressedSize,
 			compressedSize
@@ -670,6 +679,11 @@ class ZipEntry {
 		if (deflate64) {
 			useCompressionStream = false;
 		}
+		const checkCrc32Option = getOptionValue(zipEntry, options, OPTION_CHECK_CRC32);
+		const checkCrc32 = (checkCrc32Option === UNDEFINED_VALUE ?
+			getOptionValue(zipEntry, options, OPTION_CHECK_SIGNATURE) :
+			checkCrc32Option) && !passThrough &&
+			(!encrypted || zipCrypto || (extraFieldAES && extraFieldAES.vendorVersion == VENDOR_VERSION_AE_1));
 		const workerOptions = {
 			options: {
 				codecType: CODEC_INFLATE,
@@ -677,10 +691,11 @@ class ZipEntry {
 				rawPassword,
 				zipCrypto,
 				encryptionStrength: extraFieldAES && extraFieldAES.strength,
-				signed: getOptionValue(zipEntry, options, OPTION_CHECK_SIGNATURE) && !passThrough,
-				passwordVerification: zipCrypto && (dataDescriptor ? ((rawLastModDate >>> 8) & MAX_8_BITS) : ((signature >>> 24) & MAX_8_BITS)),
+				checkCrc32,
+				checkAuthenticationCode: getOptionValue(zipEntry, options, OPTION_CHECK_AUTHENTICATION_CODE),
+				passwordVerification: zipCrypto && (dataDescriptor ? ((rawLastModDate >>> 8) & MAX_8_BITS) : ((crc32 >>> 24) & MAX_8_BITS)),
 				outputSize: passThrough ? compressedSize : uncompressedSize,
-				signature,
+				crc32,
 				compressed: compressionMethod != 0 && !passThrough,
 				encrypted,
 				useWebWorkers: getOptionValue(zipEntry, options, OPTION_USE_WEB_WORKERS),
@@ -702,7 +717,7 @@ class ZipEntry {
 				fileEntry,
 				index,
 				offset: localHeaderOffset,
-				signature,
+				crc32,
 				compressedSize,
 				uncompressedSize,
 				dataOffset,
@@ -793,6 +808,7 @@ function readCommonFooter(fileEntry, directory, dataView, offset, localDirectory
 	const compressionMethod = getUint16(dataView, offset + 4);
 	Object.assign(directory, {
 		signature: getUint32(dataView, offset + HEADER_OFFSET_SIGNATURE),
+		crc32: getUint32(dataView, offset + HEADER_OFFSET_SIGNATURE),
 		compressedSize: getUint32(dataView, offset + HEADER_OFFSET_COMPRESSED_SIZE),
 		uncompressedSize: getUint32(dataView, offset + HEADER_OFFSET_UNCOMPRESSED_SIZE)
 	});
@@ -818,6 +834,16 @@ function readCommonFooter(fileEntry, directory, dataView, offset, localDirectory
 	} else {
 		directory.compressionMethod = compressionMethod;
 	}
+	const extraFieldPkwareUnix = extraField.get(EXTRAFIELD_TYPE_PKWARE_UNIX);
+	if (extraFieldPkwareUnix) {
+		readExtraFieldUnixDates(extraFieldPkwareUnix, directory);
+		directory.extraFieldPkwareUnix = extraFieldPkwareUnix;
+	}
+	const extraFieldUnixType1 = extraField.get(EXTRAFIELD_TYPE_UNIX_TYPE1);
+	if (extraFieldUnixType1) {
+		readExtraFieldUnixDates(extraFieldUnixType1, directory);
+		directory.extraFieldUnixType1 = extraFieldUnixType1;
+	}
 	const extraFieldNTFS = extraField.get(EXTRAFIELD_TYPE_NTFS);
 	if (extraFieldNTFS) {
 		readExtraFieldNTFS(extraFieldNTFS, directory);
@@ -867,15 +893,15 @@ function readExtraFieldUnicode(extraFieldUnicode, propertyName, rawPropertyName,
 		return;
 	}
 	const extraFieldView = getDataView(extraFieldUnicode.data);
-	const crc32 = new Crc32();
-	crc32.append(fileEntry[rawPropertyName]);
-	const dataViewSignature = getDataView(new Uint8Array(4));
-	dataViewSignature.setUint32(0, crc32.get(), true);
-	const signature = getUint32(extraFieldView, 1);
+	const computedCrc32 = new Crc32();
+	computedCrc32.append(fileEntry[rawPropertyName]);
+	const computedCrc32View = getDataView(new Uint8Array(4));
+	computedCrc32View.setUint32(0, computedCrc32.get(), true);
+	const nameCrc32 = getUint32(extraFieldView, 1);
 	Object.assign(extraFieldUnicode, {
 		version: getUint8(extraFieldView, 0),
 		[propertyName]: decodeText(extraFieldUnicode.data.subarray(5)),
-		valid: !fileEntry.bitFlag.languageEncodingFlag && signature == getUint32(dataViewSignature, 0)
+		valid: !fileEntry.bitFlag.languageEncodingFlag && nameCrc32 == getUint32(computedCrc32View, 0)
 	});
 	if (extraFieldUnicode.valid) {
 		directory[propertyName] = extraFieldUnicode[propertyName];
@@ -894,6 +920,9 @@ function readExtraFieldAES(extraFieldAES, directory, compressionMethod) {
 		compressionMethod: getUint16(extraFieldView, 5)
 	});
 	directory.compressionMethod = extraFieldAES.compressionMethod;
+	if (extraFieldAES.vendorVersion != VENDOR_VERSION_AE_1) {
+		directory.crc32 = UNDEFINED_VALUE;
+	}
 }
 
 function readExtraFieldNTFS(extraFieldNTFS, directory) {
@@ -912,29 +941,41 @@ function readExtraFieldNTFS(extraFieldNTFS, directory) {
 	} catch {
 		// ignored
 	}
-	try {
-		if (tag1Data && tag1Data.length == 24) {
-			const tag1View = getDataView(tag1Data);
-			const rawLastModDate = tag1View.getBigUint64(0, true);
-			const rawLastAccessDate = tag1View.getBigUint64(8, true);
-			const rawCreationDate = tag1View.getBigUint64(16, true);
-			Object.assign(extraFieldNTFS, {
-				rawLastModDate,
-				rawLastAccessDate,
-				rawCreationDate
-			});
-			const lastModDate = getDateNTFS(rawLastModDate);
-			const lastAccessDate = getDateNTFS(rawLastAccessDate);
-			const creationDate = getDateNTFS(rawCreationDate);
-			const extraFieldData = { lastModDate, lastAccessDate, creationDate };
-			Object.assign(extraFieldNTFS, extraFieldData);
-			Object.assign(directory, extraFieldData);
-		}
-	} catch {
-		// ignored
+	if (tag1Data && tag1Data.length == 24) {
+		const tag1View = getDataView(tag1Data);
+		const rawLastModDate = tag1View.getBigUint64(0, true);
+		const rawLastAccessDate = tag1View.getBigUint64(8, true);
+		const rawCreationDate = tag1View.getBigUint64(16, true);
+		Object.assign(extraFieldNTFS, {
+			rawLastModDate,
+			rawLastAccessDate,
+			rawCreationDate
+		});
+		const lastModDate = getDateNTFS(rawLastModDate);
+		const lastAccessDate = getDateNTFS(rawLastAccessDate);
+		const creationDate = getDateNTFS(rawCreationDate);
+		const extraFieldData = { lastModDate, lastAccessDate, creationDate };
+		Object.assign(extraFieldNTFS, extraFieldData);
+		Object.assign(directory, extraFieldData);
 	}
 }
 
+function readExtraFieldUnixDates(extraField, directory) {
+	if (extraField.data.length < 8) {
+		return;
+	}
+	const extraFieldView = getDataView(extraField.data);
+	const lastAccessDate = new Date(getUint32(extraFieldView, 0) * 1000);
+	const lastModDate = new Date(getUint32(extraFieldView, 4) * 1000);
+	const extraFieldData = { lastAccessDate, lastModDate };
+	if (extraField.data.length >= 12) {
+		extraFieldData.uid = getUint16(extraFieldView, 8);
+		extraFieldData.gid = getUint16(extraFieldView, 10);
+	}
+	Object.assign(extraField, extraFieldData);
+	Object.assign(directory, extraFieldData);
+}
+
 function readExtraFieldUnix(extraField, directory, isInfoZip) {
 	try {
 		const view = getDataView(extraField.data);
@@ -1013,7 +1054,7 @@ async function detectOverlappingEntry({
 	fileEntry,
 	index,
 	offset,
-	signature,
+	crc32,
 	compressedSize,
 	uncompressedSize,
 	dataOffset,
@@ -1034,7 +1075,7 @@ async function detectOverlappingEntry({
 		const dataDescriptorSignature = dataDescriptorArray.length == dataDescriptorLength + DATA_DESCRIPTOR_RECORD_SIGNATURE_LENGTH &&
 			getUint32(getDataView(dataDescriptorArray), 0) == DATA_DESCRIPTOR_RECORD_SIGNATURE;
 		if (dataDescriptorSignature) {
-			const readSignature = getUint32(getDataView(dataDescriptorArray), 4);
+			const readCrc32 = getUint32(getDataView(dataDescriptorArray), 4);
 			let readCompressedSize;
 			let readUncompressedSize;
 			if (extraFieldZip64) {
@@ -1044,8 +1085,8 @@ async function detectOverlappingEntry({
 				readCompressedSize = getUint32(getDataView(dataDescriptorArray), 8);
 				readUncompressedSize = getUint32(getDataView(dataDescriptorArray), 12);
 			}
-			const matchSignature = (fileEntry.encrypted && !fileEntry.zipCrypto) || readSignature == signature;
-			if (matchSignature &&
+			const matchCrc32 = (fileEntry.encrypted && !fileEntry.zipCrypto) || readCrc32 == crc32;
+			if (matchCrc32 &&
 				readCompressedSize == compressedSize &&
 				readUncompressedSize == uncompressedSize) {
 				dataDescriptorLength += DATA_DESCRIPTOR_RECORD_SIGNATURE_LENGTH;
@@ -1214,11 +1255,11 @@ function checkLocalDirectory(zipEntry, localDirectory, rawLocalFilename) {
 		throwAmbiguousArchive("mismatched local file header (compression method)");
 	}
 	if (!localDirectory.bitFlag.dataDescriptor &&
-		(localDirectory.signature || localDirectory.compressedSize || localDirectory.uncompressedSize) &&
-		(localDirectory.signature != zipEntry.signature ||
+		(localDirectory.crc32 || localDirectory.compressedSize || localDirectory.uncompressedSize) &&
+		(localDirectory.crc32 != zipEntry.crc32 ||
 			localDirectory.compressedSize != zipEntry.compressedSize ||
 			localDirectory.uncompressedSize != zipEntry.uncompressedSize)) {
-		throwAmbiguousArchive("mismatched local file header (signature or sizes)");
+		throwAmbiguousArchive("mismatched local file header (crc32 or sizes)");
 	}
 }
 
@@ -1234,11 +1275,7 @@ function getOptionValue(zipReader, options, name) {
 
 function getDate(timeRaw) {
 	const date = (timeRaw & 0xffff0000) >> 16, time = timeRaw & MAX_16_BITS;
-	try {
-		return new Date(1980 + ((date & 0xFE00) >> 9), ((date & 0x01E0) >> 5) - 1, date & 0x001F, (time & 0xF800) >> 11, (time & 0x07E0) >> 5, (time & 0x001F) * 2, 0);
-	} catch {
-		// ignored
-	}
+	return new Date(1980 + ((date & 0xFE00) >> 9), ((date & 0x01E0) >> 5) - 1, date & 0x001F, (time & 0xF800) >> 11, (time & 0x07E0) >> 5, (time & 0x001F) * 2, 0);
 }
 
 function getDateNTFS(timeRaw) {

package/lib/core/zip-writer.js

@@ -208,7 +208,8 @@ import {
 	OPTION_ENCODE_TEXT,
 	OPTION_OFFSET,
 	OPTION_USDZ,
-	OPTION_UNIX_EXTRA_FIELD_TYPE
+	OPTION_UNIX_EXTRA_FIELD_TYPE,
+	OPTION_LOCAL_EXTRA_FIELD
 } from "./options.js";
 
 const ERR_DUPLICATED_NAME = "File already exists";
@@ -223,6 +224,8 @@ const ERR_INVALID_EXTRAFIELD_DATA = "Extra field data exceeds 64KB";
 const ERR_UNSUPPORTED_COMPRESSION = "Compression method not supported";
 const MIN_UNIX_TIME = -2147483648;
 const MAX_UNIX_TIME = 2147483647;
+const MIN_NTFS_TIME = BigInt(0);
+const MAX_NTFS_TIME = BigInt("0x7fffffffffffffff");
 const ERR_UNSUPPORTED_FORMAT = "Zip64 is not supported (set the 'zip64' option to 'true')";
 const ERR_UNDEFINED_UNCOMPRESSED_SIZE = "Undefined uncompressed size";
 const ERR_UNDEFINED_READER = "Undefined reader";
@@ -236,6 +239,8 @@ const ERR_INVALID_MSDOS_ATTRIBUTES = "Invalid msdosAttributesRaw (must be intege
 const ERR_INVALID_MSDOS_DATA = "Invalid msdosAttributes (must be an object with boolean flags)";
 
 const EXTRAFIELD_DATA_AES = new Uint8Array([0x07, 0x00, 0x02, 0x00, 0x41, 0x45, 0x03, 0x00, 0x00]);
+const EXTRAFIELD_OFFSET_AES_VENDOR_VERSION = 4;
+const VENDOR_VERSION_AE_1 = 1;
 const INFOZIP_EXTRA_FIELD_TYPE = "infozip";
 const UNIX_EXTRA_FIELD_TYPE = "unix";
 
@@ -330,9 +335,9 @@ class ZipWriter {
 				zip64UncompressedSize,
 				extraFieldLength
 			});
-			const { signature } = entry;
-			if (signature !== UNDEFINED_VALUE) {
-				setUint32(headerView, HEADER_OFFSET_SIGNATURE, signature);
+			const { crc32 } = entry;
+			if (crc32 !== UNDEFINED_VALUE) {
+				setUint32(headerView, HEADER_OFFSET_SIGNATURE, crc32);
 			}
 			Object.assign(entry, {
 				zip64UncompressedSize,
@@ -535,6 +540,7 @@ async function addFile(zipWriter, name, reader, options) {
 			internalFileAttribute: metadataInfo.resolvedOptions.internalFileAttributes,
 			externalFileAttribute: attributesInfo.resolvedOptions.externalFileAttributes,
 			signature: options[PROPERTY_NAME_SIGNATURE],
+			crc32: options.crc32 === UNDEFINED_VALUE ? options[PROPERTY_NAME_SIGNATURE] : options.crc32,
 			offset: zipWriter.offset - diskOffset,
 			diskNumberStart: diskNumber
 		});
@@ -751,27 +757,8 @@ function resolveMetadata(zipWriter, name, options) {
 	if (!zipCrypto && (password !== UNDEFINED_VALUE || rawPassword !== UNDEFINED_VALUE) && !(encryptionStrength >= 1 && encryptionStrength <= 3)) {
 		throw new Error(ERR_INVALID_ENCRYPTION_STRENGTH);
 	}
-	let rawExtraField = EMPTY_UINT8_ARRAY;
-	const extraField = options[PROPERTY_NAME_EXTRA_FIELD];
-	if (extraField) {
-		let extraFieldSize = 0;
-		let offset = 0;
-		extraField.forEach(data => extraFieldSize += 4 + getLength(data));
-		rawExtraField = new Uint8Array(extraFieldSize);
-		const rawExtraFieldView = getDataView(rawExtraField);
-		extraField.forEach((data, type) => {
-			if (type > MAX_16_BITS) {
-				throw new Error(ERR_INVALID_EXTRAFIELD_TYPE);
-			}
-			if (getLength(data) > MAX_16_BITS) {
-				throw new Error(ERR_INVALID_EXTRAFIELD_DATA);
-			}
-			setUint16(rawExtraFieldView, offset, type);
-			setUint16(rawExtraFieldView, offset + 2, getLength(data));
-			arraySet(rawExtraField, data, offset + 4);
-			offset += 4 + getLength(data);
-		});
-	}
+	const rawExtraField = serializeExtraField(options[PROPERTY_NAME_EXTRA_FIELD]);
+	const rawLocalExtraField = serializeExtraField(options[OPTION_LOCAL_EXTRA_FIELD]);
 	return {
 		comment,
 		resolvedOptions: {
@@ -805,11 +792,36 @@ function resolveMetadata(zipWriter, name, options) {
 			useCompressionStream,
 			dataDescriptor,
 			zip64,
-			rawExtraField
+			rawExtraField,
+			rawLocalExtraField
 		}
 	};
 }
 
+function serializeExtraField(extraField) {
+	if (!extraField) {
+		return EMPTY_UINT8_ARRAY;
+	}
+	let extraFieldSize = 0;
+	let offset = 0;
+	extraField.forEach(data => extraFieldSize += 4 + getLength(data));
+	const rawExtraField = new Uint8Array(extraFieldSize);
+	const rawExtraFieldView = getDataView(rawExtraField);
+	extraField.forEach((data, type) => {
+		if (type > MAX_16_BITS) {
+			throw new Error(ERR_INVALID_EXTRAFIELD_TYPE);
+		}
+		if (getLength(data) > MAX_16_BITS) {
+			throw new Error(ERR_INVALID_EXTRAFIELD_DATA);
+		}
+		setUint16(rawExtraFieldView, offset, type);
+		setUint16(rawExtraFieldView, offset + 2, getLength(data));
+		arraySet(rawExtraField, data, offset + 4);
+		offset += 4 + getLength(data);
+	});
+	return rawExtraField;
+}
+
 async function resolveSizes(zipWriter, reader, { resolvedOptions: metadata }, options) {
 	const { passThrough, zipCrypto, password, rawPassword, encryptionStrength } = metadata;
 	let { dataDescriptor, zip64, level, compressionMethod } = metadata;
@@ -1134,7 +1146,7 @@ async function createFileEntry(reader, writer, { diskNumberStart, lock }, entryI
 		msdosAttributes
 	};
 	let {
-		signature,
+		crc32,
 		uncompressedSize
 	} = options;
 	let compressedSize = 0;
@@ -1154,7 +1166,7 @@ async function createFileEntry(reader, writer, { diskNumberStart, lock }, entryI
 				encryptionStrength,
 				zipCrypto: encrypted && zipCrypto,
 				passwordVerification: encrypted && zipCrypto && (rawLastModDate >> 8) & MAX_8_BITS,
-				signed: !passThrough,
+				computeCrc32: !passThrough,
 				compressed: compressed && !passThrough,
 				encrypted: encrypted && !passThrough,
 				useWebWorkers,
@@ -1173,7 +1185,9 @@ async function createFileEntry(reader, writer, { diskNumberStart, lock }, entryI
 			writer.size += compressedSize;
 			if (!passThrough) {
 				uncompressedSize = result.inputSize;
-				signature = result.signature;
+				if (!encrypted || zipCrypto) {
+					crc32 = result.crc32;
+				}
 			}
 			if ((!zip64CompressedSize && compressedSize >= MAX_32_BITS) ||
 				(!zip64UncompressedSize && uncompressedSize >= MAX_32_BITS)) {
@@ -1188,7 +1202,7 @@ async function createFileEntry(reader, writer, { diskNumberStart, lock }, entryI
 
 	}
 	setEntryInfo({
-		signature,
+		crc32,
 		compressedSize,
 		uncompressedSize,
 		headerInfo,
@@ -1211,7 +1225,8 @@ async function createFileEntry(reader, writer, { diskNumberStart, lock }, entryI
 		version,
 		headerArray,
 		headerView,
-		signature,
+		signature: crc32,
+		crc32: encrypted && !zipCrypto && !passThrough ? UNDEFINED_VALUE : crc32,
 		extraFieldExtendedTimestampFlag,
 		zip64UncompressedSize,
 		zip64CompressedSize
@@ -1232,6 +1247,7 @@ function getHeaderInfo(options) {
 		dataDescriptor,
 		directory,
 		rawExtraField,
+		rawLocalExtraField,
 		encryptionStrength,
 		extendedTimestamp,
 		ntfsTimestamp,
@@ -1239,7 +1255,8 @@ function getHeaderInfo(options) {
 		encrypted,
 		zip64UncompressedSize,
 		zip64CompressedSize,
-		uncompressedSize
+		uncompressedSize,
+		crc32
 	} = options;
 	let { version, compressionMethod } = options;
 	const compressed = !directory && (compressionMethod === UNDEFINED_VALUE
@@ -1312,8 +1329,8 @@ function getHeaderInfo(options) {
 				extraFieldNTFS.uint16(EXTRAFIELD_TYPE_NTFS_TAG1);
 				extraFieldNTFS.uint16(24);
 				extraFieldNTFS.uint64(lastModTimeNTFS);
-				extraFieldNTFS.uint64(getTimeNTFS(lastAccessDate) || lastModTimeNTFS);
-				extraFieldNTFS.uint64(getTimeNTFS(creationDate) || lastModTimeNTFS);
+				extraFieldNTFS.uint64(lastAccessDate ? getTimeNTFS(lastAccessDate) : lastModTimeNTFS);
+				extraFieldNTFS.uint64(creationDate ? getTimeNTFS(creationDate) : lastModTimeNTFS);
 				rawExtraFieldNTFS = extraFieldNTFS.array;
 			} catch {
 				rawExtraFieldNTFS = EMPTY_UINT8_ARRAY;
@@ -1365,15 +1382,18 @@ function getHeaderInfo(options) {
 	}
 	if (encrypted && !zipCrypto) {
 		version = version > VERSION_AES ? version : VERSION_AES;
+		if (passThrough && crc32 !== UNDEFINED_VALUE) {
+			rawExtraFieldAES[EXTRAFIELD_OFFSET_AES_VENDOR_VERSION] = VENDOR_VERSION_AE_1;
+		}
 		rawExtraFieldAES[9] = compressionMethod;
 		compressionMethod = COMPRESSION_METHOD_AES;
 	}
 	const localExtraFieldZip64Length = writeLocalExtraFieldZip64 ? getLength(rawLocalExtraFieldZip64) : 0;
-	const extraFieldLength = localExtraFieldZip64Length + getLength(rawExtraFieldAES, rawExtraFieldExtendedTimestamp, rawExtraFieldNTFS, rawExtraFieldUnix, rawExtraField);
+	const extraFieldLength = localExtraFieldZip64Length + getLength(rawExtraFieldAES, rawExtraFieldExtendedTimestamp, rawExtraFieldNTFS, rawExtraFieldUnix, rawExtraField, rawLocalExtraField);
 	if (extraFieldLength > MAX_16_BITS) {
 		throw new Error(ERR_INVALID_EXTRAFIELD_DATA);
 	}
-	const dosLastModDate = new Date(Math.ceil(lastModDate.getTime() / 2000) * 2000);
+	const dosLastModDate = new Date(Math.ceil(Math.floor(lastModDate.getTime() / 1000) / 2) * 2000);
 	const {
 		headerArray,
 		headerView,
@@ -1403,6 +1423,7 @@ function getHeaderInfo(options) {
 	localHeader.bytes(rawExtraFieldNTFS);
 	localHeader.bytes(rawExtraFieldUnix);
 	localHeader.bytes(rawExtraField);
+	localHeader.bytes(rawLocalExtraField);
 	if (dataDescriptor) {
 		if (!zip64CompressedSize) {
 			setUint32(localHeaderView, HEADER_OFFSET_COMPRESSED_SIZE + LOCAL_HEADER_COMMON_OFFSET, 0);
@@ -1521,7 +1542,7 @@ function getDataDescriptorInfo({
 }
 
 function setEntryInfo({
-	signature,
+	crc32,
 	compressedSize,
 	uncompressedSize,
 	headerInfo,
@@ -1529,6 +1550,7 @@ function setEntryInfo({
 }, {
 	zip64,
 	zipCrypto,
+	passThrough,
 	dataDescriptor
 }) {
 	const {
@@ -1539,10 +1561,10 @@ function setEntryInfo({
 		dataDescriptorView,
 		dataDescriptorOffset
 	} = dataDescriptorInfo;
-	if ((!encrypted || zipCrypto) && signature !== UNDEFINED_VALUE) {
-		setUint32(headerView, HEADER_OFFSET_SIGNATURE, signature);
+	if ((!encrypted || zipCrypto || passThrough) && crc32 !== UNDEFINED_VALUE) {
+		setUint32(headerView, HEADER_OFFSET_SIGNATURE, crc32);
 		if (dataDescriptor) {
-			setUint32(dataDescriptorView, dataDescriptorOffset, signature);
+			setUint32(dataDescriptorView, dataDescriptorOffset, crc32);
 		}
 	}
 	if (zip64) {
@@ -1565,15 +1587,15 @@ function updateLocalHeader({
 	encrypted,
 	zip64,
 	localExtraFieldZip64Length,
-	signature,
+	crc32,
 	compressedSize,
 	uncompressedSize,
 	zip64UncompressedSize,
 	zip64CompressedSize
-}, localHeaderView, { dataDescriptor }) {
+}, localHeaderView, { dataDescriptor, passThrough }) {
 	if (!dataDescriptor) {
-		if (!encrypted) {
-			setUint32(localHeaderView, HEADER_OFFSET_SIGNATURE + LOCAL_HEADER_COMMON_OFFSET, signature);
+		if (!encrypted || (passThrough && crc32 !== UNDEFINED_VALUE)) {
+			setUint32(localHeaderView, HEADER_OFFSET_SIGNATURE + LOCAL_HEADER_COMMON_OFFSET, crc32);
 		}
 		if (!zip64CompressedSize) {
 			setUint32(localHeaderView, HEADER_OFFSET_COMPRESSED_SIZE + LOCAL_HEADER_COMMON_OFFSET, compressedSize);
@@ -1882,7 +1904,8 @@ async function flushBufferedData(readable, writer, signal, onChunkWritten) {
 
 function getTimeNTFS(date) {
 	if (date) {
-		return ((BigInt(date.getTime()) + BigInt(11644473600000)) * BigInt(10000));
+		const timeNTFS = ((BigInt(date.getTime()) + BigInt(11644473600000)) * BigInt(10000));
+		return timeNTFS < MIN_NTFS_TIME ? MIN_NTFS_TIME : timeNTFS > MAX_NTFS_TIME ? MAX_NTFS_TIME : timeNTFS;
 	}
 }
 

package/lib/zip-core-external.js

@@ -1,3 +1,5 @@
+/// <reference types="../index.d.ts" />
+
 /*
  Copyright (c) 2025 Gildas Lormeau. All rights reserved.
 

package/lib/zip-core-reader.js

@@ -39,6 +39,8 @@ export {
 	ERR_UNSUPPORTED_ENCRYPTION,
 	ERR_UNSUPPORTED_COMPRESSION,
 	ERR_INVALID_SIGNATURE,
+	ERR_INVALID_CRC32,
+	ERR_INVALID_AUTHENTICATION_CODE,
 	ERR_INVALID_UNCOMPRESSED_SIZE,
 	ERR_INVALID_PASSWORD,
 	ERR_INVALID_COMPRESSED_DATA,

package/lib/zip-fs-core-external.js

@@ -1,3 +1,5 @@
+/// <reference types="../index.d.ts" />
+
 /*
  Copyright (c) 2025 Gildas Lormeau. All rights reserved.
 

package/lib/zip-fs-external.js

@@ -1,3 +1,5 @@
+/// <reference types="../index.d.ts" />
+
 /*
  Copyright (c) 2025 Gildas Lormeau. All rights reserved.
 

package/lib/zip-mime-types.js

@@ -1,3 +1,5 @@
+/// <reference types="../index.d.ts" />
+
 /*
  Copyright (c) 2025 Gildas Lormeau. All rights reserved.
 

package/package.json

@@ -3,7 +3,7 @@
   "description": "A JavaScript library to zip and unzip files in the browser, Deno and Node.js",
   "author": "Gildas Lormeau",
   "license": "BSD-3-Clause",
-  "version": "2.8.43",
+  "version": "2.8.45",
   "type": "module",
   "keywords": [
     "zip",
@@ -34,6 +34,10 @@
     "bun": ">=0.7.0"
   },
   "scripts": {
+    "lint": "npx eslint . && deno lint",
+    "test": "npm run test-node && npm run test-deno && npm run test-bun && npm run test-node-dist && npm run test-deno-dist && npm run test-bun-dist && npm run test-web-streams-polyfill && npm run test-types",
+    "test-browsers": "npm run test-chrome && npm run test-firefox && npm run test-webkit",
+    "test-all": "npm run lint && npm run test && npm run test-browsers",
     "build": "npx rollup -c",
     "build-dev": "npx rollup -c rollup.config.dev.js",
     "build-doc-api": "npx typedoc",
@@ -46,8 +50,9 @@
     "test-node-dist": "./tests/dist-runner.sh node",
     "test-bun-dist": "./tests/dist-runner.sh bun",
     "test-types": "tsc -p ./tests/types/tsconfig.json",
-    "test-firefox": "firefox http://localhost:8081/tests/ & npx http-server -p=8081 & wait $!",
-    "test-chrome": "google-chrome http://localhost:8081/tests/ & npx http-server -p=8081 & wait $!"
+    "test-firefox": "node ./tests/browser-runner.js firefox",
+    "test-chrome": "node ./tests/browser-runner.js chrome",
+    "test-webkit": "node ./tests/browser-runner.js webkit"
   },
   "main": "./index.cjs",
   "module": "./index.js",
@@ -236,6 +241,7 @@
     "@rollup/plugin-terser": "^1.0.0",
     "eslint": "^10.8.1",
     "http-server": "^14.1.1",
+    "playwright": "^1.62.1",
     "rollup": "^4.62.4",
     "typedoc": "^0.28.20",
     "typedoc-plugin-markdown": "^4.12.0",

package/worker-message-property-names.js

@@ -1,3 +1,3 @@
-const WORKER_MESSAGE_PROPERTY_NAMES = ["baseURI", "cause", "checkPasswordOnly", "chunkSize", "code", "codecType", "codecURI", "compressed", "compressionMethod", "config", "deflate64", "done", "encrypted", "encryptionStrength", "error", "format", "inputSize", "level", "message", "messageId", "name", "options", "outputSize", "password", "passwordVerification", "rawBitFlag", "rawPassword", "readable", "result", "signature", "signed", "stack", "transferStreams", "type", "useCompressionStream", "useWebWorkers", "value", "wasmURI", "workerStartupTimeout", "writable", "zipCrypto"];
+const WORKER_MESSAGE_PROPERTY_NAMES = ["baseURI", "cause", "checkAuthenticationCode", "checkCrc32", "checkPasswordOnly", "chunkSize", "code", "codecType", "codecURI", "compressed", "compressionMethod", "computeCrc32", "config", "crc32", "deflate64", "done", "encrypted", "encryptionStrength", "error", "format", "inputSize", "level", "message", "messageId", "name", "options", "outputSize", "password", "passwordVerification", "rawBitFlag", "rawPassword", "readable", "result", "stack", "transferStreams", "type", "useCompressionStream", "useWebWorkers", "value", "wasmURI", "workerStartupTimeout", "writable", "zipCrypto"];
 
 export { WORKER_MESSAGE_PROPERTY_NAMES };