> This "check the block signature and then read another one" bug is incredibly common

I don't have links handy, but Android fell prey to this bug twice checking .apk signatures due to .zip files having duplicated copies of the manifest