Github user dweiss commented on the issue: https://github.com/apache/commons-compress/pull/60 Also, to be honest -- this boundedinputstream has synchronized read methods and I've no idea why they're there. I don't think we have to create thread-safe streams here (is this a requirement anyhow?). This isn't included in the patch, but I'd drop synchronized from boundedinputstream entirely.
---