fix(wheelfile): resolve .dist-info path case-insensitively when reading wheels (#686)

A wheel filename may contain non-lowercase characters (e.g. Django-3.2.5.whl) while the .dist-info directory inside uses normalized lowercase naming (django-3.2.5.dist-info/). WheelFile previously derived dist_info_path strictly from the filename, causing a 'Missing RECORD file' error on open.

Resolve the actual .dist-info/RECORD path case-insensitively from the zip namelist when the expected path is not found.

Fixes #411.

---------

Co-authored-by: Alex Grönholm <alex.gronholm@nextday.fi>

Author: armorbreak001

docs/news.rst

@@ -3,6 +3,10 @@ Release Notes
 
 **UNRELEASED**
 
+- Fixed ``WheelFile`` raising ``Missing RECORD file`` when the wheel filename
+  contains uppercase characters (e.g. ``Django-3.2.5.whl``) but the
+  ``.dist-info`` directory inside uses normalized lowercase naming
+  (`#411 <https://github.com/pypa/wheel/issues/411>`_)
 - Added the ``wheel info`` subcommand to display metadata about wheel files without
   unpacking them (`#639 <https://github.com/pypa/wheel/issues/639>`_)
 

src/wheel/wheelfile.py

@@ -82,6 +82,17 @@ def __init__(
         self._file_hashes: dict[str, tuple[None, None] | tuple[int, bytes]] = {}
         self._file_sizes = {}
         if mode == "r":
+            # The .dist-info directory inside the wheel may use normalized
+            # (lowercase) naming even when the filename does not. Resolve the
+            # actual path case-insensitively.
+            if self.record_path not in self.namelist():
+                lowered = self.dist_info_path.lower() + "/record"
+                for name in self.namelist():
+                    if name.lower() == lowered:
+                        self.dist_info_path = name.rsplit("/RECORD", 1)[0]
+                        self.record_path = name
+                        break
+
             # Ignore RECORD and any embedded wheel signatures
             self._file_hashes[self.record_path] = None, None
             self._file_hashes[self.record_path + ".jws"] = None, None

tests/test_wheelfile.py

@@ -54,6 +54,33 @@ def test_missing_record(wheel_path: Path) -> None:
     exc.match("^Missing test-1.0.dist-info/RECORD file$")
 
 
+def test_mixed_case_dist_info(tmp_path: Path) -> None:
+    """Regression test: wheel filename has uppercase but .dist-info dir is lowercase.
+
+    A wheel named ``Django-3.2.5.whl`` may contain ``django-3.2.5.dist-info/``
+    inside (normalized). WheelFile should find RECORD case-insensitively.
+    See `#411 <https://github.com/pypa/wheel/issues/411>`_.
+    """
+    wheel_path = tmp_path / "MixedCase-1.0-py3-none-any.whl"
+    with ZipFile(wheel_path, "w", ZIP_DEFLATED) as zf:
+        zf.writestr("mixedcase/__init__.py", "")
+        # Use lowercase dist-info (as pip/build tools produce)
+        zf.writestr("mixedcase-1.0.dist-info/WHEEL", "Wheel-Version: 1.0\n")
+        zf.writestr(
+            "mixedcase-1.0.dist-info/METADATA",
+            "Metadata-Version: 2.1\nName: MixedCase\nVersion: 1.0\n",
+        )
+        zf.writestr(
+            "mixedcase-1.0.dist-info/RECORD",
+            "mixedcase/__init__.py,,\n",
+        )
+
+    # Should not raise — this is the fix
+    with WheelFile(wheel_path) as wf:
+        assert wf.dist_info_path == "mixedcase-1.0.dist-info"
+        assert wf.record_path == "mixedcase-1.0.dist-info/RECORD"
+
+
 def test_unsupported_hash_algorithm(wheel_path: Path) -> None:
     with ZipFile(wheel_path, "w") as zf:
         zf.writestr("hello/héllö.py", 'print("Héllö, w0rld!")\n')