=== WebApkVerifySignature.read2() sign-extension POC === [primitive] read2() on bytes 00 80 (uint16 0x8000) returned -32768 (0xffff8000) [primitive] expected if correctly masked: 32768; actual: -32768 => SIGN-EXTENDED (BUG) [control] CD file-comment-length = 0x0001 -> read() = 3 (FILE_COMMENT_TOO_LARGE) [bug] CD file-comment-length = 0x8000 -> read() = 7 (BAD_BLANK_SPACE) [result] read2() sign-extends uint16 ...................... CONFIRMED [result] MAX_FILE_COMMENT_LENGTH check bypassed for 0x8000 . CONFIRMED [result] seekDelta() moved backward past line 344 .......... CONFIRMED (got BAD_BLANK_SPACE from later check)