From 00033e92b53bf37e16aa3834f148f6bc3f108a1c Mon Sep 17 00:00:00 2001
From: "Val S." <mx.val@icloud.com>
Date: Thu, 9 Oct 2025 21:27:18 -0400
Subject: [PATCH] Fix issue recording OOXML document metadata

The ZIP single record search feature is used to find specific files when
parsing OOXML documents. I observed that the core properties for a
PowerPoint file were missing in a test as compared with the previous
release.

The error handling check for the unzip search returns CL_VIRUS when
there is a match, not CL_SUCCESS!

CLAM-2886
---
 libclamav/unzip.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libclamav/unzip.c b/libclamav/unzip.c
index d635522b8..a68e305ec 100644
--- a/libclamav/unzip.c
+++ b/libclamav/unzip.c
@@ -2109,7 +2109,7 @@ cl_error_t unzip_search_single(cli_ctx *ctx, const char *name, size_t nlen, uint
 
     // Search for the zip file entry in the current layer.
     status = unzip_search(ctx, &requests);
-    if (CL_SUCCESS == status) {
+    if (CL_VIRUS == status) {
         *loff = requests.loff;
     }