> This "check the block signature and then read another one" bug is incredibly common I don't have links handy, but Android fell prey to this bug twice checkin

> This "check the block signature and then read another one" bug is incredibly common I don't have links handy, but Android fell prey to this bug twice checking .apk signatures due to .zip files having duplicated copies of the manifest