When ZipEntry::entries is called, the returned ZipEntry contains metadata such as the name, uncompressed size, etc read from its CEN record. However, the position (which record in the CEN) is not included. Next, when we call getInputStream on this ZipEntry, only the name is used to locate the CEN record and the result could be another one (with the same name). The most observable change is that the uncompressed size does not match the bytes available.