KAEGzip's Processing Logic on the Length Field at the Tail of a File

Symptom

After the length field in the tail of a Gzip file is tampered with, the Gzip tool reports an error. However, KAEGzip can decompress the file correctly.

For the test.gz file, the length field at its tail is changed from 05 00 00 00 to 02 00 00 00.

The Gzip tool reports an error due to this change. On the contrary, KAEGzip decompresses the correct raw data that complies with standards.

Cause Analysis

The Gzip tool verifies the length field during decompression. However, the current hardware and driver cannot implement this function. KAEGzip uses different processing logic. For intact, core data segments that comply with standards, KAEGzip decompresses the correct raw data.