As far as I can see, when checksumming is turned off or there's a collision, it is possible that lzjb_uncompress is fed with corrupted data. Source length is entirely ignored and since source has to be shorter than dest, it is broken. -- Twoje radio