.ipa QA Fixtures DevTools, Captures & Bundles CC0 Public Domain · CI/CD Safe

Sample .ipa (iOS IPA) Test Files & Edge Cases

Deterministic Apple iOS App Store Package fixtures engineered for automated unit tests, parser fuzzing, and upload validation pipelines. Pull directly in GitHub Actions with immutable SHA-256 verification.

minimalexpect: valid

minimal-app.ipa

UNSIGNED container-structure fixture: real ZIP with Payload/DemoApp.app/Info.plist (binary plist via plistlib) and a Mach-O arm64 header stub. NOT a signed installable app.

↓ Download (694 B)

SHA-256: 85778c5134a0d4c6235923fcfd82c823b35e2e9577a5fd61f7c8b5226000d479

Exact: 694 bytes

curl -fsSL https://fileformat.co/fixtures/v1/ipa/minimal-app.ipa -o minimal-app.ipa \
  && echo "85778c5134a0d4c6235923fcfd82c823b35e2e9577a5fd61f7c8b5226000d479  minimal-app.ipa" | shasum -a 256 -c

realisticexpect: valid

observatory-ios-bundle.ipa

UNSIGNED container-structure fixture: binary-plist Info.plist + PkgInfo + Mach-O stub for mobile CI artifact scanner tests. NOT a signed installable app.

↓ Download (777 B)

SHA-256: 53e13f6ea9bf56efe9c454706fa93e38d45bd77fa86d033b9cba843202a66348

Exact: 777 bytes

curl -fsSL https://fileformat.co/fixtures/v1/ipa/observatory-ios-bundle.ipa -o observatory-ios-bundle.ipa \
  && echo "53e13f6ea9bf56efe9c454706fa93e38d45bd77fa86d033b9cba843202a66348  observatory-ios-bundle.ipa" | shasum -a 256 -c

edge-caseMissing ZIP EOCDexpect: parser_error

truncated-eocd.ipa

Interrupted-upload fixture: ZIP container missing the EOCD record — zipfile must raise.

↓ Download (678 B)

SHA-256: c4abf5147786a39819f7c469079e22f72bfa617f2d9a7d10641c99c41a7c0717

Exact: 678 bytes

curl -fsSL https://fileformat.co/fixtures/v1/ipa/truncated-eocd.ipa -o truncated-eocd.ipa \
  && echo "c4abf5147786a39819f7c469079e22f72bfa617f2d9a7d10641c99c41a7c0717  truncated-eocd.ipa" | shasum -a 256 -c

Safe-by-Design Client-Side Synthesizer

In-Browser Edge-Case & Malformed Fixture Mutator

Zero Upload · Generated in RAM

Need negative test fixtures for parser fuzzing or upload gateway validation? Mutate minimal-app.ipa directly in your browser without hosting unsafe payloads on public URLs.

1. Base Input Source

Default Fixture: minimal-app.ipa

2. Select Mutation Operator

Tests graceful EOF / footer corruption handling without process panic or OOM.