Serialization regression

[r4gus]

There has been a regression in the newly released version that leads to malformed databases. This leads to KeePass(XC) not being able to open a database saved using this package.

[r4gus]

When building KeePassXC from source, one can read the XML binary stream using qWarning() << xmlDevice->readAll(); within Kdbx4Reader::readDatabaseImpl. The stream ends at:

...
</String>\n          <String>\n            <Key>Title</Key>\n            <Value>passkey.org (Passkey)</Value>\n          </String>\n          <String>\n            <Key>URL<

This confirms the following error message:

The error message is a little bit misleading and originates from KdbxXmlReader::parseEntryString. The error is thrown within this method because the binary stream ends in the middle of a entry string, i.e. the value is missing because the stream has ended.

This means that there must be an issue reading the complete file, i.e. all blocks. When reading the same file using the module provided with this package, one can not recreate the issue, i.e. the module is capable of reading and decrypting the file without issues. KeePass and KeePassXC on the other hand seem to have issues.

The most straight forward answer is that KeePass(XC) is not reading every block. This has to be further investigated. One question would be, why KeePass(XC) is not complaining about the last block (length: 00 00 00 00) missing unless there are some zero bytes that trick KeePassXC from stopping prematurely...

[r4gus]

By looking at the file using a hex editor, the one occurrence of 00 00 00 00 is at the bottom of the file ...

[r4gus]

The error doesn't occur by disabling (gzip) compression for the kdbx4 database (at least in the test I did), i.e. it's probably an issue with the packages compression implementation.

[r4gus]

When I use this package to open the database, the decompression outputs all XML data as expected. I can't understand what the KeePass(es) issue is.

[r4gus]

I'll disable gzip compression support for the upcoming release and look for alternative gzip implementations.