Virgin import of FILE 3.32
This commit is contained in:
parent
094f1e246b
commit
75a6cdb3a2
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/vendor/file/dist/; revision=68349 svn path=/vendor/file/3.32/; revision=68351; tag=vendor/file/3.32
5
contrib/file/Header
Normal file
5
contrib/file/Header
Normal file
@ -0,0 +1,5 @@
|
||||
# Magic
|
||||
# Magic data for file(1) command.
|
||||
# Machine-generated from src/cmd/file/magdir/*; edit there only!
|
||||
# Format is described in magic(files), where:
|
||||
# files is 5 on V7 and BSD, 4 on SV, and ?? in the SVID.
|
34
contrib/file/LEGAL.NOTICE
Normal file
34
contrib/file/LEGAL.NOTICE
Normal file
@ -0,0 +1,34 @@
|
||||
$Id: LEGAL.NOTICE,v 1.11 1999/01/14 16:30:12 christos Exp $
|
||||
Copyright (c) Ian F. Darwin 1986, 1987, 1989, 1990, 1991, 1992, 1994, 1995.
|
||||
Software written by Ian F. Darwin and others;
|
||||
maintained 1994-1999 Christos Zoulas.
|
||||
|
||||
This software is not subject to any export provision of the United States
|
||||
Department of Commerce, and may be exported to any country or planet.
|
||||
|
||||
Redistribution and use in source and binary forms, with or without
|
||||
modification, are permitted provided that the following conditions
|
||||
are met:
|
||||
1. Redistributions of source code must retain the above copyright
|
||||
notice immediately at the beginning of the file, without modification,
|
||||
this list of conditions, and the following disclaimer.
|
||||
2. Redistributions in binary form must reproduce the above copyright
|
||||
notice, this list of conditions and the following disclaimer in the
|
||||
documentation and/or other materials provided with the distribution.
|
||||
3. All advertising materials mentioning features or use of this software
|
||||
must display the following acknowledgement:
|
||||
This product includes software developed by Ian F. Darwin and others.
|
||||
4. The name of the author may not be used to endorse or promote products
|
||||
derived from this software without specific prior written permission.
|
||||
|
||||
THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
||||
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||||
ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
|
||||
ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
||||
OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||
LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
||||
OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
||||
SUCH DAMAGE.
|
@ -1,4 +1,4 @@
|
||||
$Id: MAINT,v 1.2 1993/09/23 21:47:01 christos Exp $
|
||||
$Id: MAINT,v 1.4 2000/04/11 02:43:51 christos Exp $
|
||||
|
||||
Maintenance notes:
|
||||
|
||||
@ -29,5 +29,5 @@ your changed version.
|
||||
|
||||
Thank you for your assistance and cooperation.
|
||||
|
||||
Mark Moraes Christos Zoulas
|
||||
moraes@deshaw.com christos@deshaw.com
|
||||
Christos Zoulas
|
||||
christos@astron.com
|
39
contrib/file/Magdir/adventure
Normal file
39
contrib/file/Magdir/adventure
Normal file
@ -0,0 +1,39 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# adventure: file(1) magic for Adventure game files
|
||||
#
|
||||
# from Allen Garvin <earendil@faeryland.tamu-commerce.edu>
|
||||
# Edited by Dave Chapeskie <dchapes@ddm.on.ca> Jun 28, 1998
|
||||
#
|
||||
# ALAN
|
||||
# I assume there are other, lower versions, but these are the only ones I
|
||||
# saw in the archive.
|
||||
0 beshort 0x0206 ALAN text adventure code data
|
||||
>2 byte <10 version 2.6%d
|
||||
|
||||
# Conflicts with too much other stuff!
|
||||
# Infocom
|
||||
# (Note: to avoid false matches Z-machine version 1 and 2 are not
|
||||
# recognized since only the oldest Zork I and II used them. Similarly
|
||||
# there are 4 Infocom games that use verion 4 that are not recognized.)
|
||||
#0 byte 3 Infocom game data (Z-machine 3,
|
||||
#>2 beshort <0x7fff Release %3d,
|
||||
#>26 beshort >0 Size %d*2
|
||||
#>18 string >\0 Serial %.6s)
|
||||
#0 byte 5 Infocom game data (Z-machine 5,
|
||||
#>2 beshort <0x7fff Release %3d,
|
||||
#>26 beshort >0 Size %d*4
|
||||
#>18 string >\0 Serial %.6s)
|
||||
#0 byte 6 Infocom game data (Z-machine 6,
|
||||
#>2 beshort <0x7fff Release %3d,
|
||||
#>26 beshort >0 Size %d*8
|
||||
#>18 string >\0 Serial %.6s)
|
||||
#0 byte 8 Infocom game data (Z-machine 8,
|
||||
#>2 beshort <0x7fff Release %3d,
|
||||
#>26 beshort >0 Size %d*8
|
||||
#>18 string >\0 Serial %.6s)
|
||||
|
||||
# TADS (Text Adventure Development System)
|
||||
0 string TADS TADS game data
|
||||
>13 string >\0 (ver. %.6s,
|
||||
>22 string >\0 date %s)
|
7
contrib/file/Magdir/allegro
Normal file
7
contrib/file/Magdir/allegro
Normal file
@ -0,0 +1,7 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# allegro: file(1) magic for Allegro datafiles
|
||||
# Toby Deshane <hac@shoelace.digivill.net>
|
||||
#
|
||||
0 belong 0x736C6821 Allegro datafile (packed)
|
||||
0 belong 0x736C682E Allegro datafile (not packed/autodetect)
|
||||
0 belong 0x736C682B Allegro datafile (appended exe data)
|
30
contrib/file/Magdir/alpha
Normal file
30
contrib/file/Magdir/alpha
Normal file
@ -0,0 +1,30 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# alpha architecture description
|
||||
#
|
||||
|
||||
0 leshort 0603 COFF format alpha
|
||||
>22 leshort&030000 !020000 executable
|
||||
>24 leshort 0410 pure
|
||||
>24 leshort 0413 paged
|
||||
>22 leshort&020000 !0 dynamically linked
|
||||
>16 lelong !0 not stripped
|
||||
>16 lelong 0 stripped
|
||||
>22 leshort&030000 020000 shared library
|
||||
>24 leshort 0407 object
|
||||
>27 byte x - version %d
|
||||
>26 byte x .%d
|
||||
>28 byte x -%d
|
||||
|
||||
# Basic recognition of Digital UNIX core dumps - Mike Bremford <mike@opac.bl.uk>
|
||||
#
|
||||
# The actual magic number is just "Core", followed by a 2-byte version
|
||||
# number; however, treating any file that begins with "Core" as a Digital
|
||||
# UNIX core dump file may produce too many false hits, so we include one
|
||||
# byte of the version number as well; DU 5.0 appears only to be up to
|
||||
# version 2.
|
||||
#
|
||||
0 string Core\001 Alpha COFF format core dump (Digital UNIX)
|
||||
>24 string >\0 \b, from '%s'
|
||||
0 string Core\002 Alpha COFF format core dump (Digital UNIX)
|
||||
>24 string >\0 \b, from '%s'
|
||||
|
10
contrib/file/Magdir/amanda
Normal file
10
contrib/file/Magdir/amanda
Normal file
@ -0,0 +1,10 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# amanda: file(1) magic for amanda file format
|
||||
#
|
||||
0 string AMANDA:\ AMANDA
|
||||
>8 string TAPESTART\ DATE tape header file,
|
||||
>>23 string X
|
||||
>>>25 string >\ Unused %s
|
||||
>>23 string >\ DATE %s
|
||||
>8 string FILE\ dump file,
|
||||
>>13 string >\ DATE %s
|
142
contrib/file/Magdir/animation
Normal file
142
contrib/file/Magdir/animation
Normal file
@ -0,0 +1,142 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# animation: file(1) magic for animation/movie formats
|
||||
#
|
||||
# animation formats
|
||||
# MPEG, FLI, DL originally from vax@ccwf.cc.utexas.edu (VaX#n8)
|
||||
# FLC, SGI, Apple originally from Daniel Quinlan (quinlan@yggdrasil.com)
|
||||
|
||||
# MPEG animation format
|
||||
0 belong 0x000001b3 MPEG video stream data
|
||||
#>4 beshort&0xfff0 x (%d x
|
||||
#>5 beshort&0x0fff x %d)
|
||||
0 belong 0x000001ba MPEG system stream data
|
||||
|
||||
# MPEG Audio (*.mpx)
|
||||
# from dreesen@math.fu-berlin.de
|
||||
|
||||
# XXX
|
||||
# This conflicts with the FF FE signature for UTF-16-encoded Unicode
|
||||
# text, which will be identified as an MP3 file. I don't have any MP3s
|
||||
# so I don't know how to (or even if it's possible to) change this to
|
||||
# tell the two apart. enf@pobox.com
|
||||
|
||||
0 beshort &0xfff0 MP
|
||||
# MPEG 1.0
|
||||
>1 byte&0x08 =0x08 \b
|
||||
# Layer 3
|
||||
>>1 byte &0x02 \b3
|
||||
>>>2 byte&0xf0 =0x10 \b, 32 kBits
|
||||
>>>2 byte&0xf0 =0x20 \b, 40 kBits
|
||||
>>>2 byte&0xf0 =0x30 \b, 48 kBits
|
||||
>>>2 byte&0xf0 =0x40 \b, 56 kBits
|
||||
>>>2 byte&0xf0 =0x50 \b, 64 kBits
|
||||
>>>2 byte&0xf0 =0x60 \b, 80 kBits
|
||||
>>>2 byte&0xf0 =0x70 \b, 96 kBits
|
||||
>>>2 byte&0xf0 =0x80 \b, 112 kBits
|
||||
>>>2 byte&0xf0 =0x90 \b, 128 kBits
|
||||
>>>2 byte&0xf0 =0xA0 \b, 160 kBits
|
||||
>>>2 byte&0xf0 =0xB0 \b, 192 kBits
|
||||
>>>2 byte&0xf0 =0xC0 \b, 224 kBits
|
||||
>>>2 byte&0xf0 =0xD0 \b, 256 kBits
|
||||
>>>2 byte&0xf0 =0xE0 \b, 320 kBits
|
||||
# Layer 2
|
||||
>>1 byte &0x04 \b2
|
||||
>>>2 byte&0xf0 =0x10 \b, 32 kBits
|
||||
>>>2 byte&0xf0 =0x20 \b, 48 kBits
|
||||
>>>2 byte&0xf0 =0x30 \b, 56 kBits
|
||||
>>>2 byte&0xf0 =0x40 \b, 64 kBits
|
||||
>>>2 byte&0xf0 =0x50 \b, 80 kBits
|
||||
>>>2 byte&0xf0 =0x60 \b, 96 kBits
|
||||
>>>2 byte&0xf0 =0x70 \b, 112 kBits
|
||||
>>>2 byte&0xf0 =0x80 \b, 128 kBits
|
||||
>>>2 byte&0xf0 =0x90 \b, 160 kBits
|
||||
>>>2 byte&0xf0 =0xA0 \b, 192 kBits
|
||||
>>>2 byte&0xf0 =0xB0 \b, 224 kBits
|
||||
>>>2 byte&0xf0 =0xC0 \b, 256 kBits
|
||||
>>>2 byte&0xf0 =0xD0 \b, 320 kBits
|
||||
>>>2 byte&0xf0 =0xE0 \b, 384 kBits
|
||||
# freq
|
||||
>>2 byte&0x0C =0x00 \b, 44.1 kHz
|
||||
>>2 byte&0x0C =0x04 \b, 48 kHz
|
||||
>>2 byte&0x0C =0x08 \b, 32 kHz
|
||||
# MPEG 2.0
|
||||
>1 byte&0x08 =0x00 \b
|
||||
# Layer 3
|
||||
>>1 byte &0x02 \b3
|
||||
# Layer 2
|
||||
>>1 byte &0x04 \b2
|
||||
>>2 byte&0xf0 =0x10 \b, 8 kBits
|
||||
>>2 byte&0xf0 =0x20 \b, 16 kBits
|
||||
>>2 byte&0xf0 =0x30 \b, 24 kBits
|
||||
>>2 byte&0xf0 =0x40 \b, 32 kBits
|
||||
>>2 byte&0xf0 =0x50 \b, 40 kBits
|
||||
>>2 byte&0xf0 =0x60 \b, 48 kBits
|
||||
>>2 byte&0xf0 =0x70 \b, 56 kBits
|
||||
>>2 byte&0xf0 =0x80 \b, 64 kBits
|
||||
>>2 byte&0xf0 =0x90 \b, 80 kBits
|
||||
>>2 byte&0xf0 =0xA0 \b, 96 kBits
|
||||
>>2 byte&0xf0 =0xB0 \b, 112 kBits
|
||||
>>2 byte&0xf0 =0xC0 \b, 128 kBits
|
||||
>>2 byte&0xf0 =0xD0 \b, 144 kBits
|
||||
>>2 byte&0xf0 =0xE0 \b, 160 kBits
|
||||
# freq
|
||||
>>2 byte&0x0C =0x00 \b, 22.05 kHz
|
||||
>>2 byte&0x0C =0x04 \b, 24 kHz
|
||||
>>2 byte&0x0C =0x08 \b, 16 kHz
|
||||
# misc
|
||||
>3 byte&0xC0 =0x00 \b, Stereo
|
||||
>3 byte&0xC0 =0x40 \b, JStereo
|
||||
>3 byte&0xC0 =0x80 \b, Dual-Ch
|
||||
>3 byte&0xC0 =0xC0 \b, Mono
|
||||
#>1 byte&0x01 =0x00 \b, Error Protection
|
||||
#>2 byte&0x02 =0x02 \b, Padding
|
||||
#>2 byte&0x01 =0x01 \b, Private
|
||||
#>3 byte&0x08 =0x08 \b, Copyright
|
||||
#>3 byte&0x04 =0x04 \b, Original
|
||||
#>3 byte&0x03 1 \b, Emphasis 5
|
||||
#>3 byte&0x03 3 \b, Emphasis c
|
||||
|
||||
# FLI animation format
|
||||
4 leshort 0xAF11 FLI file
|
||||
>6 leshort x - %d frames,
|
||||
>8 leshort x width=%d pixels,
|
||||
>10 leshort x height=%d pixels,
|
||||
>12 leshort x depth=%d,
|
||||
>16 leshort x ticks/frame=%d
|
||||
# FLC animation format
|
||||
4 leshort 0xAF12 FLC file
|
||||
>6 leshort x - %d frames
|
||||
>8 leshort x width=%d pixels,
|
||||
>10 leshort x height=%d pixels,
|
||||
>12 leshort x depth=%d,
|
||||
>16 leshort x ticks/frame=%d
|
||||
|
||||
# DL animation format
|
||||
# XXX - collision with most `mips' magic
|
||||
#
|
||||
# I couldn't find a real magic number for these, however, this
|
||||
# -appears- to work. Note that it might catch other files, too, so be
|
||||
# careful!
|
||||
#
|
||||
# Note that title and author appear in the two 20-byte chunks
|
||||
# at decimal offsets 2 and 22, respectively, but they are XOR'ed with
|
||||
# 255 (hex FF)! The DL format is really bad.
|
||||
#
|
||||
#0 byte 1 DL version 1, medium format (160x100, 4 images/screen)
|
||||
#>42 byte x - %d screens,
|
||||
#>43 byte x %d commands
|
||||
#0 byte 2 DL version 2
|
||||
#>1 byte 1 - large format (320x200,1 image/screen),
|
||||
#>1 byte 2 - medium format (160x100,4 images/screen),
|
||||
#>1 byte >2 - unknown format,
|
||||
#>42 byte x %d screens,
|
||||
#>43 byte x %d commands
|
||||
# Based on empirical evidence, DL version 3 have several nulls following the
|
||||
# \003. Most of them start with non-null values at hex offset 0x34 or so.
|
||||
#0 string \3\0\0\0\0\0\0\0\0\0\0\0 DL version 3
|
||||
|
||||
# SGI and Apple formats
|
||||
0 string MOVI Silicon Graphics movie file
|
||||
4 string moov Apple QuickTime movie file (moov)
|
||||
4 string mdat Apple QuickTime movie file (mdat)
|
116
contrib/file/Magdir/apple
Normal file
116
contrib/file/Magdir/apple
Normal file
@ -0,0 +1,116 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# apple: file(1) magic for Apple file formats
|
||||
#
|
||||
0 string FiLeStArTfIlEsTaRt binscii (apple ][) text
|
||||
0 string \x0aGL Binary II (apple ][) data
|
||||
0 string \x76\xff Squeezed (apple ][) data
|
||||
0 string NuFile NuFile archive (apple ][) data
|
||||
0 string N\xf5F\xe9l\xe5 NuFile archive (apple ][) data
|
||||
0 belong 0x00051600 AppleSingle encoded Macintosh file
|
||||
0 belong 0x00051607 AppleDouble encoded Macintosh file
|
||||
|
||||
# magic for Newton PDA package formats
|
||||
# from Ruda Moura <ruda@helllabs.org>
|
||||
0 string package Newton package,
|
||||
>7 byte 48 NOS 1.x,
|
||||
>7 byte 49 NOS 2.x,
|
||||
>12 belong &0x80000000 AutoRemove,
|
||||
>12 belong &0x40000000 CopyProtect,
|
||||
>12 belong &0x10000000 NoCompression,
|
||||
>12 belong &0x04000000 Relocation,
|
||||
>12 belong &0x02000000 UseFasterCompression,
|
||||
>16 belong x version %d
|
||||
|
||||
# The following entries for the Apple II are for files that have
|
||||
# been transferred as raw binary data from an Apple, without having
|
||||
# been encapsulated by any of the above archivers.
|
||||
#
|
||||
# In general, Apple II formats are hard to identify because Apple DOS
|
||||
# and especially Apple ProDOS have strong typing in the file system and
|
||||
# therefore programmers never felt much need to include type information
|
||||
# in the files themselves.
|
||||
#
|
||||
# Eric Fischer <enf@pobox.com>
|
||||
|
||||
# AppleWorks word processor:
|
||||
#
|
||||
# This matches the standard tab stops for an AppleWorks file, but if
|
||||
# a file has a tab stop set in the first four columns this will fail.
|
||||
#
|
||||
# The "O" is really the magic number, but that's so common that it's
|
||||
# necessary to check the tab stops that follow it to avoid false positives.
|
||||
|
||||
4 string O==== AppleWorks word processor data
|
||||
>85 byte&0x01 >0 \b, zoomed
|
||||
>90 byte&0x01 >0 \b, paginated
|
||||
>92 byte&0x01 >0 \b, with mail merge
|
||||
#>91 byte x \b, left margin %d
|
||||
|
||||
# AppleWorks database:
|
||||
#
|
||||
# This isn't really a magic number, but it's the closest thing to one
|
||||
# that I could find. The 1 and 2 really mean "order in which you defined
|
||||
# categories" and "left to right, top to bottom," respectively; the D and R
|
||||
# mean that the cursor should move either down or right when you press Return.
|
||||
|
||||
30 string \x01D AppleWorks database data
|
||||
30 string \x02D AppleWorks database data
|
||||
30 string \x01R AppleWorks database data
|
||||
30 string \x02R AppleWorks database data
|
||||
|
||||
# AppleWorks spreadsheet:
|
||||
#
|
||||
# Likewise, this isn't really meant as a magic number. The R or C means
|
||||
# row- or column-order recalculation; the A or M means automatic or manual
|
||||
# recalculation.
|
||||
|
||||
131 string RA AppleWorks spreadsheet data
|
||||
131 string RM AppleWorks spreadsheet data
|
||||
131 string CA AppleWorks spreadsheet data
|
||||
131 string CM AppleWorks spreadsheet data
|
||||
|
||||
# Applesoft BASIC:
|
||||
#
|
||||
# This is incredibly sloppy, but will be true if the program was
|
||||
# written at its usual memory location of 2048 and its first line
|
||||
# number is less than 256. Yuck.
|
||||
|
||||
0 belong&0xff00ff 0x80000 Applesoft BASIC program data
|
||||
#>2 leshort x \b, first line number %d
|
||||
|
||||
# ORCA/EZ assembler:
|
||||
#
|
||||
# This will not identify ORCA/M source files, since those have
|
||||
# some sort of date code instead of the two zero bytes at 6 and 7
|
||||
# XXX Conflicts with ELF
|
||||
#4 belong&0xff00ffff 0x01000000 ORCA/EZ assembler source data
|
||||
#>5 byte x \b, build number %d
|
||||
|
||||
# Broderbund Fantavision
|
||||
#
|
||||
# I don't know what these values really mean, but they seem to recur.
|
||||
# Will they cause too many conflicts?
|
||||
|
||||
# Probably :-)
|
||||
#2 belong&0xFF00FF 0x040008 Fantavision movie data
|
||||
|
||||
# Some attempts at images.
|
||||
#
|
||||
# These are actually just bit-for-bit dumps of the frame buffer, so
|
||||
# there's really no reasonably way to distinguish them except for their
|
||||
# address (if preserved) -- 8192 or 16384 -- and their length -- 8192
|
||||
# or, occasionally, 8184.
|
||||
#
|
||||
# Nevertheless this will manage to catch a lot of images that happen
|
||||
# to have a solid-colored line at the bottom of the screen.
|
||||
|
||||
8144 string \x7F\x7F\x7F\x7F\x7F\x7F\x7F\x7F Apple II image with white background
|
||||
8144 string \x55\x2A\x55\x2A\x55\x2A\x55\x2A Apple II image with purple background
|
||||
8144 string \x2A\x55\x2A\x55\x2A\x55\x2A\x55 Apple II image with green background
|
||||
8144 string \xD5\xAA\xD5\xAA\xD5\xAA\xD5\xAA Apple II image with blue background
|
||||
8144 string \xAA\xD5\xAA\xD5\xAA\xD5\xAA\xD5 Apple II image with orange background
|
||||
|
||||
# Beagle Bros. Apple Mechanic fonts
|
||||
|
||||
0 belong&0xFF00FFFF 0x6400D000 Apple Mechanic font
|
12
contrib/file/Magdir/applix
Normal file
12
contrib/file/Magdir/applix
Normal file
@ -0,0 +1,12 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# applix: file(1) magic for Applixware
|
||||
# From: Peter Soos <sp@osb.hu>
|
||||
#
|
||||
0 string *BEGIN Applixware
|
||||
>7 string WORDS Words Document
|
||||
>7 string GRAPHICS Graphic
|
||||
>7 string RASTER Bitmap
|
||||
>7 string SPREADSHEETS Spreadsheet
|
||||
>7 string MACRO Macro
|
||||
>7 string BUILDER Builder Object
|
@ -27,6 +27,14 @@
|
||||
0 string 070701 ASCII cpio archive (SVR4 with no CRC)
|
||||
0 string 070702 ASCII cpio archive (SVR4 with CRC)
|
||||
|
||||
# Debian package (needs to go before regular portable archives)
|
||||
#
|
||||
0 string !<arch>\ndebian
|
||||
>8 string debian-split part of multipart Debian package
|
||||
>8 string debian-binary Debian binary package
|
||||
>68 string >\n (format %s)
|
||||
>136 ledate x created: %s
|
||||
|
||||
# other archives
|
||||
0 long 0177555 very old archive
|
||||
0 short 0177555 very old PDP-11 archive
|
||||
@ -35,7 +43,7 @@
|
||||
0 long 0100554 apl workspace
|
||||
0 string =<ar> archive
|
||||
|
||||
# MIPS archive (needs to go first)
|
||||
# MIPS archive (needs to go before regular portable archives)
|
||||
#
|
||||
0 string !<arch>\n__________E MIPS archive
|
||||
>20 string U with MIPS Ucode members
|
||||
@ -65,8 +73,6 @@
|
||||
#
|
||||
0 string !<arch> current ar archive
|
||||
>8 string __.SYMDEF random library
|
||||
>8 string debian-split part of multipart Debian package
|
||||
>8 string debian-binary Debian binary package
|
||||
>0 belong =65538 - pre SR9.5
|
||||
>0 belong =65539 - post SR9.5
|
||||
>0 beshort 2 - object archive
|
||||
@ -170,7 +176,7 @@
|
||||
2 string -lz5- LHarc 1.x archive data [lz5]
|
||||
# [never seen any but the last; -lh4- reported in comp.compression:]
|
||||
2 string -lzs- LHa 2.x? archive data [lzs]
|
||||
2 string -lh - LHa 2.x? archive data [lh ]
|
||||
2 string -lh\40- LHa 2.x? archive data [lh ]
|
||||
2 string -lhd- LHa 2.x? archive data [lhd]
|
||||
2 string -lh2- LHa 2.x? archive data [lh2]
|
||||
2 string -lh3- LHa 2.x? archive data [lh3]
|
||||
@ -208,3 +214,23 @@
|
||||
|
||||
# Shell archives
|
||||
10 string #\ This\ is\ a\ shell\ archive shell archive text
|
||||
|
||||
#
|
||||
# LBR. NB: May conflict with the questionable
|
||||
# "binary Computer Graphics Metafile" format.
|
||||
#
|
||||
0 string \0\ \ \ \ \ \ \ \ \ \ \ \0\0 LBR archive data
|
||||
#
|
||||
# PMA (CP/M derivative of LHA)
|
||||
#
|
||||
2 string -pm0- PMarc archive data [pm0]
|
||||
2 string -pm1- PMarc archive data [pm1]
|
||||
2 string -pm2- PMarc archive data [pm2]
|
||||
2 string -pms- PMarc SFX archive (CP/M, DOS)
|
||||
5 string -pc1- PopCom compressed executable (CP/M)
|
||||
|
||||
# From rafael@icp.inpg.fr (Rafael Laboissiere)
|
||||
# The Project Revision Control System (see
|
||||
# http://www.XCF.Berkeley.EDU/~jmacd/prcs.html) generates a packaged project
|
||||
# file which is recognized by the following entry:
|
||||
0 leshort 0xeb81 PRCS packaged project
|
@ -7,11 +7,12 @@
|
||||
#
|
||||
# 3B20
|
||||
#
|
||||
0 beshort 0550 3b20 COFF executable
|
||||
>12 belong >0 not stripped
|
||||
# The 3B20 conflicts with SCCS.
|
||||
#0 beshort 0550 3b20 COFF executable
|
||||
#>12 belong >0 not stripped
|
||||
#>22 beshort >0 - version %ld
|
||||
0 beshort 0551 3b20 COFF executable (TV)
|
||||
>12 belong >0 not stripped
|
||||
#0 beshort 0551 3b20 COFF executable (TV)
|
||||
#>12 belong >0 not stripped
|
||||
#>22 beshort >0 - version %ld
|
||||
#
|
||||
# WE32K
|
@ -44,7 +44,7 @@
|
||||
# Creative Labs AUDIO stuff
|
||||
0 string MThd Standard MIDI data
|
||||
>9 byte >0 (format %d)
|
||||
>11 byte >1 using %d channels
|
||||
>11 byte >1 using %d tracks
|
||||
0 string CTMF Creative Music (CMF) data
|
||||
0 string SBI SoundBlaster instrument data
|
||||
0 string Creative\ Voice\ File Creative Labs voice data
|
||||
@ -57,17 +57,6 @@
|
||||
0 belong 0x4e54524b MultiTrack sound data
|
||||
>4 belong x - version %ld
|
||||
|
||||
# Microsoft WAVE format (*.wav)
|
||||
0 string RIFF Microsoft RIFF
|
||||
>8 string WAVE \b, WAVE audio data
|
||||
>>34 leshort >0 \b, %d bit
|
||||
>>22 leshort =1 \b, mono
|
||||
>>22 leshort =2 \b, stereo
|
||||
>>22 leshort >2 \b, %d channels
|
||||
>>24 lelong >0 %d Hz
|
||||
# AVI == Audio Video Interleave
|
||||
>8 string AVI\ \b, AVI data
|
||||
|
||||
# Extended MOD format (*.emd) (Greg Roelofs, newt@uchicago.edu); NOT TESTED
|
||||
# [based on posting 940824 by "Dirk/Elastik", husberg@lehtori.cc.tut.fi]
|
||||
0 string EMOD Extended MOD sound data,
|
||||
@ -78,13 +67,54 @@
|
||||
>83 byte 1 (song)
|
||||
|
||||
# Real Audio (Magic .ra\0375)
|
||||
0 belong 0x2e7261fd realaudio sound file
|
||||
0 belong 0x2e7261fd RealAudio sound file
|
||||
0 string .RMF RealMedia file
|
||||
|
||||
# MTM/669/FAR/S3M/ULT/XM format checking [Aaron Eppert, aeppert@dialin.ind.net]
|
||||
# Oct 31, 1995
|
||||
0 string MTM MultiTracker Module sound file
|
||||
0 string if Composer 669 Module sound data
|
||||
#0 string if Composer 669 Module sound data
|
||||
0 string FAR Module sound data
|
||||
0 string MAS_U ULT(imate) Module sound data
|
||||
0x2c string SCRM ScreamTracker III Module sound data
|
||||
0 string Extended Module Extended Module sound data
|
||||
|
||||
# Gravis UltraSound patches
|
||||
# From <ache@nagual.ru>
|
||||
|
||||
0 string GF1PATCH110\0ID#000002\0 GUS patch
|
||||
0 string GF1PATCH100\0ID#000002\0 Old GUS patch
|
||||
|
||||
#
|
||||
# Taken from loader code from mikmod version 2.14
|
||||
# by Steve McIntyre (stevem@chiark.greenend.org.uk)
|
||||
0 string JN extended 669 module data
|
||||
0 string MAS_UTrack_V00
|
||||
>14 string >/0 ultratracker V1.%.1s module sound data
|
||||
0 string UN05 MikMod UNI format module sound data
|
||||
0 string Extended\ Module: Fasttracker II module sound data
|
||||
21 string !SCREAM! Screamtracker 2 module sound data
|
||||
1080 string M.K. 4-channel Protracker module sound data
|
||||
1080 string M!K! 4-channel Protracker module sound data
|
||||
1080 string FLT4 4-channel Startracker module sound data
|
||||
1080 string 4CHN 4-channel Fasttracker module sound data
|
||||
1080 string 6CHN 6-channel Fasttracker module sound data
|
||||
1080 string 8CHN 8-channel Fasttracker module sound data
|
||||
1080 string CD81 8-channel Oktalyzer module sound data
|
||||
1080 string OKTA 8-channel Oktalyzer module sound data
|
||||
1082 string CH
|
||||
>1080 string >/0 %.2s-channel Fasttracker "oktalyzer" module sound data
|
||||
1080 string 16CN 16-channel Taketracker module sound data
|
||||
1080 string 32CN 32-channel Taketracker module sound data
|
||||
|
||||
# TOC sound files -Trevor Johnson <trevor@jpj.net>
|
||||
#
|
||||
0 string TOC TOC sound file
|
||||
|
||||
# sidfiles <pooka@iki.fi>
|
||||
0 string SIDPLAY\ INFOFILE Sidplay info file
|
||||
0 string PSID PlaySID v2.2+ (AMIGA) sidtune
|
||||
>4 beshort >0 w/ header v%d,
|
||||
>14 beshort =1 single song,
|
||||
>14 beshort >1 %d songs,
|
||||
>16 beshort >0 default song: %d
|
17
contrib/file/Magdir/blender
Normal file
17
contrib/file/Magdir/blender
Normal file
@ -0,0 +1,17 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# blender: file(1) magic for Blender 3D data files
|
||||
#
|
||||
# Coded by Guillermo S. Romero <gsromero@alumnos.euitt.upm.es> using the
|
||||
# data from Ton Roosendaal <ton@blender.nl>. Ton or his company do not
|
||||
# support the rule, so mail GSR if problems with it. Rule version: 1.1.
|
||||
# You can get latest version with comments and details about the format
|
||||
# at http://acd.asoc.euitt.upm.es/~gsromero/3d/blender/magic.blender
|
||||
|
||||
0 string =BLENDER Blender3D,
|
||||
>7 string =_ saved as 32-bits
|
||||
>7 string =- saved as 64-bits
|
||||
>8 string =v little endian
|
||||
>8 string =V big endian
|
||||
>9 byte x with version %c.
|
||||
>10 byte x \b%c
|
||||
>11 byte x \b%c
|
41
contrib/file/Magdir/bsdi
Normal file
41
contrib/file/Magdir/bsdi
Normal file
@ -0,0 +1,41 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# bsdi: file(1) magic for BSD/OS (from BSDI) objects
|
||||
#
|
||||
|
||||
0 lelong 0314 386 compact demand paged pure executable
|
||||
>16 lelong >0 not stripped
|
||||
>32 byte 0x6a (uses shared libs)
|
||||
|
||||
0 lelong 0407 386 executable
|
||||
>16 lelong >0 not stripped
|
||||
>32 byte 0x6a (uses shared libs)
|
||||
|
||||
0 lelong 0410 386 pure executable
|
||||
>16 lelong >0 not stripped
|
||||
>32 byte 0x6a (uses shared libs)
|
||||
|
||||
0 lelong 0413 386 demand paged pure executable
|
||||
>16 lelong >0 not stripped
|
||||
>32 byte 0x6a (uses shared libs)
|
||||
|
||||
# same as in SunOS 4.x, except for static shared libraries
|
||||
0 belong&077777777 0600413 sparc demand paged
|
||||
>0 byte &0x80
|
||||
>>20 belong <4096 shared library
|
||||
>>20 belong =4096 dynamically linked executable
|
||||
>>20 belong >4096 dynamically linked executable
|
||||
>0 byte ^0x80 executable
|
||||
>16 belong >0 not stripped
|
||||
>36 belong 0xb4100001 (uses shared libs)
|
||||
|
||||
0 belong&077777777 0600410 sparc pure
|
||||
>0 byte &0x80 dynamically linked executable
|
||||
>0 byte ^0x80 executable
|
||||
>16 belong >0 not stripped
|
||||
>36 belong 0xb4100001 (uses shared libs)
|
||||
|
||||
0 belong&077777777 0600407 sparc
|
||||
>0 byte &0x80 dynamically linked executable
|
||||
>0 byte ^0x80 executable
|
||||
>16 belong >0 not stripped
|
||||
>36 belong 0xb4100001 (uses shared libs)
|
10
contrib/file/Magdir/cisco
Normal file
10
contrib/file/Magdir/cisco
Normal file
@ -0,0 +1,10 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# cisco: file(1) magic for cisco Systems routers
|
||||
#
|
||||
# Most cisco file-formats are covered by the generic elf code
|
||||
#
|
||||
# Microcode files are non-ELF, 0x8501 conflicts with NetBSD/alpha.
|
||||
0 belong&0xffffff00 0x85011400 cisco IOS microcode
|
||||
>7 string >\0 for '%s'
|
||||
0 belong&0xffffff00 0x8501cb00 cisco IOS experimental microcode
|
||||
>7 string >\0 for '%s'
|
46
contrib/file/Magdir/claris
Normal file
46
contrib/file/Magdir/claris
Normal file
@ -0,0 +1,46 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# claris: file(1) magic for claris
|
||||
# "H. Nanosecond" <aldomel@ix.netcom.com>
|
||||
# Claris Works a word processor, etc.
|
||||
# Version 3.0
|
||||
|
||||
# .pct claris works clip art files
|
||||
#0000000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000 000
|
||||
#*
|
||||
#0001000 #010 250 377 377 377 377 000 213 000 230 000 021 002 377 014 000
|
||||
#null to byte 1000 octal
|
||||
514 string \377\377\377\377\000 Claris clip art?
|
||||
>0 string \0\0\0\0\0\0\0\0\0\0\0\0\0 yes.
|
||||
514 string \377\377\377\377\001 Claris clip art?
|
||||
>0 string \0\0\0\0\0\0\0\0\0\0\0\0\0 yes.
|
||||
|
||||
# Claris works files
|
||||
# .cwk
|
||||
0 string \002\000\210\003\102\117\102\117\000\001\206 Claris works document
|
||||
# .plt
|
||||
0 string \020\341\000\000\010\010 Claris Works pallete files .plt
|
||||
|
||||
# .msp a dictionary file I am not sure about this I have only one .msp file
|
||||
0 string \002\271\262\000\040\002\000\164 Claris works dictionary
|
||||
|
||||
# .usp are user dictionary bits
|
||||
# I am not sure about a magic header:
|
||||
#0000000 001 123 160 146 070 125 104 040 136 123 015 012 160 157 144 151
|
||||
# soh S p f 8 U D sp ^ S cr nl p o d i
|
||||
#0000020 141 164 162 151 163 164 040 136 123 015 012 144 151 166 040 043
|
||||
# a t r i s t sp ^ S cr nl d i v sp #
|
||||
|
||||
# .mth Thesaurus
|
||||
# statrts with \0 but no magic header
|
||||
|
||||
# .chy Hyphenation file
|
||||
# I am not sure: 000 210 034 000 000
|
||||
|
||||
# other claris files
|
||||
#./windows/claris/useng.ndx: data
|
||||
#./windows/claris/xtndtran.l32: data
|
||||
#./windows/claris/xtndtran.lst: data
|
||||
#./windows/claris/clworks.lbl: data
|
||||
#./windows/claris/clworks.prf: data
|
||||
#./windows/claris/userd.spl: data
|
62
contrib/file/Magdir/commands
Normal file
62
contrib/file/Magdir/commands
Normal file
@ -0,0 +1,62 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# commands: file(1) magic for various shells and interpreters
|
||||
#
|
||||
0 string :\ shell archive or script for antique kernel text
|
||||
0 string/b #!\ /bin/sh Bourne shell script text executable
|
||||
0 string/b #!\ /bin/csh C shell script text executable
|
||||
# korn shell magic, sent by George Wu, gwu@clyde.att.com
|
||||
0 string/b #!\ /bin/ksh Korn shell script text executable
|
||||
0 string/b #!\ /bin/tcsh Tenex C shell script text executable
|
||||
0 string/b #!\ /usr/local/tcsh Tenex C shell script text executable
|
||||
0 string/b #!\ /usr/local/bin/tcsh Tenex C shell script text executable
|
||||
|
||||
#
|
||||
# zsh/ash/ae/nawk/gawk magic from cameron@cs.unsw.oz.au (Cameron Simpson)
|
||||
0 string/b #!\ /usr/local/bin/zsh Paul Falstad's zsh script text executable
|
||||
0 string/b #!\ /usr/local/bin/ash Neil Brown's ash script text executable
|
||||
0 string/b #!\ /usr/local/bin/ae Neil Brown's ae script text executable
|
||||
0 string/b #!\ /bin/nawk new awk script text executable
|
||||
0 string/b #!\ /usr/bin/nawk new awk script text executable
|
||||
0 string/b #!\ /usr/local/bin/nawk new awk script text executable
|
||||
0 string/b #!\ /bin/gawk GNU awk script text executable
|
||||
0 string/b #!\ /usr/bin/gawk GNU awk script text executable
|
||||
0 string/b #!\ /usr/local/bin/gawk GNU awk script text executable
|
||||
#
|
||||
0 string/b #!\ /bin/awk awk script text executable
|
||||
0 string/b #!\ /usr/bin/awk awk script text executable
|
||||
0 string BEGIN awk script text
|
||||
|
||||
# For Larry Wall's perl language. The ``eval'' line recognizes an
|
||||
# outrageously clever hack for USG systems.
|
||||
# Keith Waclena <keith@cerberus.uchicago.edu>
|
||||
0 string/b #!\ /bin/perl perl script text executable
|
||||
0 string eval\ "exec\ /bin/perl perl script text
|
||||
0 string/b #!\ /usr/bin/perl perl script text executable
|
||||
0 string eval\ "exec\ /usr/bin/perl perl script text
|
||||
0 string/b #!\ /usr/local/bin/perl perl script text
|
||||
0 string eval\ "exec\ /usr/local/bin/perl perl script text executable
|
||||
|
||||
# AT&T Bell Labs' Plan 9 shell
|
||||
0 string/b #!\ /bin/rc Plan 9 rc shell script text executable
|
||||
|
||||
# bash shell magic, from Peter Tobias (tobias@server.et-inf.fho-emden.de)
|
||||
0 string/b #!\ /bin/bash Bourne-Again shell script text executable
|
||||
0 string/b #!\ /usr/local/bin/bash Bourne-Again shell script text executable
|
||||
|
||||
# using env
|
||||
0 string #!/usr/bin/env a
|
||||
>15 string >\0 %s script text executable
|
||||
0 string #!\ /usr/bin/env a
|
||||
>16 string >\0 %s script text executable
|
||||
|
||||
|
||||
# generic shell magic
|
||||
0 string #!\ / a
|
||||
>3 string >\0 %s script text executable
|
||||
0 string #!\ / a
|
||||
>3 string >\0 %s script text executable
|
||||
0 string #!/ a
|
||||
>2 string >\0 %s script text executable
|
||||
0 string #!\ script text executable
|
||||
>3 string >\0 for %s
|
@ -21,6 +21,7 @@
|
||||
>3 byte &0x02 continuation,
|
||||
>3 byte &0x04 extra field,
|
||||
>3 byte &0x08 original filename,
|
||||
>>10 string x `%s',
|
||||
>3 byte &0x10 comment,
|
||||
>3 byte &0x20 encrypted,
|
||||
>4 ledate x last modified: %s,
|
||||
@ -55,13 +56,18 @@
|
||||
0 string \377\037 compacted data
|
||||
0 short 0145405 huf output
|
||||
|
||||
# Squeeze and Crunch...
|
||||
# These numbers were gleaned from the Unix versions of the programs to
|
||||
# handle these formats. Note that I can only uncrunch, not crunch, and
|
||||
# I didn't have a crunched file handy, so the crunch number is untested.
|
||||
# Keith Waclena <keith@cerberus.uchicago.edu>
|
||||
0 leshort 0x76FF squeezed data (CP/M, DOS)
|
||||
0 leshort 0x76FE crunched data (CP/M, DOS)
|
||||
# bzip2
|
||||
0 string BZh bzip2 compressed data
|
||||
>3 byte >47 \b, block size = %c00k
|
||||
|
||||
# squeeze and crunch
|
||||
# Michael Haardt <michael@cantor.informatik.rwth-aachen.de>
|
||||
0 beshort 0x76FF squeezed data,
|
||||
>4 string x original name %s
|
||||
0 beshort 0x76FE crunched data,
|
||||
>2 string x original name %s
|
||||
0 beshort 0x76FD LZH compressed data,
|
||||
>2 string x original name %s
|
||||
|
||||
# Freeze
|
||||
0 string \037\237 frozen file 2.1
|
||||
@ -85,8 +91,56 @@
|
||||
#>99 byte&0xF0 0xd0
|
||||
#>132 byte&0xF0 0xd0 GSM 06.10 compressed audio
|
||||
|
||||
# Bzip from ulmo@Q.Net
|
||||
0 string BZ bzip compressed data,
|
||||
>2 byte x format v. %c,
|
||||
>3 byte x block size indicator %c
|
||||
# bzip a block-sorting file compressor
|
||||
# by Julian Seward <sewardj@cs.man.ac.uk> and others
|
||||
#
|
||||
0 string BZ bzip compressed data
|
||||
>2 byte x \b, version: %c
|
||||
>3 string =1 \b, compression block size 100k
|
||||
>3 string =2 \b, compression block size 200k
|
||||
>3 string =3 \b, compression block size 300k
|
||||
>3 string =4 \b, compression block size 400k
|
||||
>3 string =5 \b, compression block size 500k
|
||||
>3 string =6 \b, compression block size 600k
|
||||
>3 string =7 \b, compression block size 700k
|
||||
>3 string =8 \b, compression block size 800k
|
||||
>3 string =9 \b, compression block size 900k
|
||||
|
||||
# lzop from <markus.oberhumer@jk.uni-linz.ac.at>
|
||||
0 string \x89\x4c\x5a\x4f\x00\x0d\x0a\x1a\x0a lzop compressed data
|
||||
>9 beshort <0x0940
|
||||
>>9 byte&0xf0 =0x00 - version 0.
|
||||
>>9 beshort&0x0fff x \b%03x,
|
||||
>>13 byte 1 LZO1X-1,
|
||||
>>13 byte 2 LZO1X-1(15),
|
||||
>>13 byte 3 LZO1X-999,
|
||||
## >>22 bedate >0 last modified: %s,
|
||||
>>14 byte =0x00 os: MS-DOS
|
||||
>>14 byte =0x01 os: Amiga
|
||||
>>14 byte =0x02 os: VMS
|
||||
>>14 byte =0x03 os: Unix
|
||||
>>14 byte =0x05 os: Atari
|
||||
>>14 byte =0x06 os: OS/2
|
||||
>>14 byte =0x07 os: MacOS
|
||||
>>14 byte =0x0A os: Tops/20
|
||||
>>14 byte =0x0B os: WinNT
|
||||
>>14 byte =0x0E os: Win32
|
||||
>9 beshort >0x0939
|
||||
>>9 byte&0xf0 =0x00 - version 0.
|
||||
>>9 byte&0xf0 =0x10 - version 1.
|
||||
>>9 byte&0xf0 =0x20 - version 2.
|
||||
>>9 beshort&0x0fff x \b%03x,
|
||||
>>15 byte 1 LZO1X-1,
|
||||
>>15 byte 2 LZO1X-1(15),
|
||||
>>15 byte 3 LZO1X-999,
|
||||
## >>25 bedate >0 last modified: %s,
|
||||
>>17 byte =0x00 os: MS-DOS
|
||||
>>17 byte =0x01 os: Amiga
|
||||
>>17 byte =0x02 os: VMS
|
||||
>>17 byte =0x03 os: Unix
|
||||
>>17 byte =0x05 os: Atari
|
||||
>>17 byte =0x06 os: OS/2
|
||||
>>17 byte =0x07 os: MacOS
|
||||
>>17 byte =0x0A os: Tops/20
|
||||
>>17 byte =0x0B os: WinNT
|
||||
>>17 byte =0x0E os: Win32
|
122
contrib/file/Magdir/console
Normal file
122
contrib/file/Magdir/console
Normal file
@ -0,0 +1,122 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# Console game magic
|
||||
# Toby Deshane <hac@shoelace.digivill.net>
|
||||
# ines: file(1) magic for Marat's iNES Nintendo Entertainment System
|
||||
# ROM dump format
|
||||
|
||||
0 string NES\032 iNES ROM dump,
|
||||
>4 byte x %dx16k PRG
|
||||
>5 byte x \b, %dx8k CHR
|
||||
>6 byte&0x01 =0x1 \b, [Vert.]
|
||||
>6 byte&0x01 =0x0 \b, [Horiz.]
|
||||
>6 byte&0x02 =0x2 \b, [SRAM]
|
||||
>6 byte&0x04 =0x4 \b, [Trainer]
|
||||
>6 byte&0x04 =0x8 \b, [4-Scr]
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# gameboy: file(1) magic for the Nintendo (Color) Gameboy raw ROM format
|
||||
#
|
||||
0x104 belong 0xCEED6666 Gameboy ROM:
|
||||
>0x134 string >\0 "%.16s"
|
||||
>0x146 byte 0x03 \b,[SGB]
|
||||
>0x147 byte 0x00 \b, [ROM ONLY]
|
||||
>0x147 byte 0x01 \b, [ROM+MBC1]
|
||||
>0x147 byte 0x02 \b, [ROM+MBC1+RAM]
|
||||
>0x147 byte 0x03 \b, [ROM+MBC1+RAM+BATT]
|
||||
>0x147 byte 0x05 \b, [ROM+MBC2]
|
||||
>0x147 byte 0x06 \b, [ROM+MBC2+BATTERY]
|
||||
>0x147 byte 0x08 \b, [ROM+RAM]
|
||||
>0x147 byte 0x09 \b, [ROM+RAM+BATTERY]
|
||||
>0x147 byte 0x0B \b, [ROM+MMM01]
|
||||
>0x147 byte 0x0C \b, [ROM+MMM01+SRAM]
|
||||
>0x147 byte 0x0D \b, [ROM+MMM01+SRAM+BATT]
|
||||
>0x147 byte 0x0F \b, [ROM+MBC3+TIMER+BATT]
|
||||
>0x147 byte 0x10 \b, [ROM+MBC3+TIMER+RAM+BATT]
|
||||
>0x147 byte 0x11 \b, [ROM+MBC3]
|
||||
>0x147 byte 0x12 \b, [ROM+MBC3+RAM]
|
||||
>0x147 byte 0x13 \b, [ROM+MBC3+RAM+BATT]
|
||||
>0x147 byte 0x19 \b, [ROM+MBC5]
|
||||
>0x147 byte 0x1A \b, [ROM+MBC5+RAM]
|
||||
>0x147 byte 0x1B \b, [ROM+MBC5+RAM+BATT]
|
||||
>0x147 byte 0x1C \b, [ROM+MBC5+RUMBLE]
|
||||
>0x147 byte 0x1D \b, [ROM+MBC5+RUMBLE+SRAM]
|
||||
>0x147 byte 0x1E \b, [ROM+MBC5+RUMBLE+SRAM+BATT]
|
||||
>0x147 byte 0x1F \b, [Pocket Camera]
|
||||
>0x147 byte 0xFD \b, [Bandai TAMA5]
|
||||
>0x147 byte 0xFE \b, [Hudson HuC-3]
|
||||
>0x147 byte 0xFF \b, [Hudson HuC-1]
|
||||
|
||||
>0x148 byte 0 \b, ROM: 256Kbit
|
||||
>0x148 byte 1 \b, ROM: 512Kbit
|
||||
>0x148 byte 2 \b, ROM: 1Mbit
|
||||
>0x148 byte 3 \b, ROM: 2Mbit
|
||||
>0x148 byte 4 \b, ROM: 4Mbit
|
||||
>0x148 byte 5 \b, ROM: 8Mbit
|
||||
>0x148 byte 6 \b, ROM: 16Mbit
|
||||
>0x148 byte 0x52 \b, ROM: 9Mbit
|
||||
>0x148 byte 0x53 \b, ROM: 10Mbit
|
||||
>0x148 byte 0x54 \b, ROM: 12Mbit
|
||||
|
||||
>0x149 byte 1 \b, RAM: 16Kbit
|
||||
>0x149 byte 2 \b, RAM: 64Kbit
|
||||
>0x149 byte 3 \b, RAM: 128Kbit
|
||||
>0x149 byte 4 \b, RAM: 1Mbit
|
||||
|
||||
#>0x14e long x \b, CRC: %x
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# genesis: file(1) magic for the Sega MegaDrive/Genesis raw ROM format
|
||||
#
|
||||
0x100 string SEGA Sega MegaDrive/Genesis raw ROM dump
|
||||
>0x120 string >\0 Name: "%.16s"
|
||||
>0x110 string >\0 %.16s
|
||||
>0x1B0 string RA with SRAM
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# genesis: file(1) magic for the Super MegaDrive ROM dump format
|
||||
#
|
||||
0x280 string EAGN Super MagicDrive ROM dump
|
||||
>0 byte x %dx16k blocks
|
||||
>2 byte 0 \b, last in series or standalone
|
||||
>2 byte >0 \b, split ROM
|
||||
>8 byte 0xAA
|
||||
>9 byte 0xBB
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# genesis: file(1) alternate magic for the Super MegaDrive ROM dump format
|
||||
#
|
||||
0x280 string EAMG Super MagicDrive ROM dump
|
||||
>0 byte x %dx16k blocks
|
||||
>2 byte x \b, last in series or standalone
|
||||
>8 byte 0xAA
|
||||
>9 byte 0xBB
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# smsgg: file(1) magic for Sega Master System and Game Gear ROM dumps
|
||||
#
|
||||
# Does not detect all images. Very preliminary guesswork. Need more data
|
||||
# on format.
|
||||
#
|
||||
# FIXME: need a little more info...;P
|
||||
#
|
||||
#0 byte 0xF3
|
||||
#>1 byte 0xED Sega Master System/Game Gear ROM dump
|
||||
#>1 byte 0x31 Sega Master System/Game Gear ROM dump
|
||||
#>1 byte 0xDB Sega Master System/Game Gear ROM dump
|
||||
#>1 byte 0xAF Sega Master System/Game Gear ROM dump
|
||||
#>1 byte 0xC3 Sega Master System/Game Gear ROM dump
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# dreamcast: file(1) uncertain magic for the Sega Dreamcast VMU image format
|
||||
#
|
||||
0 belong 0x21068028 Sega Dreamcast VMU game image
|
||||
0 string LCDi Dream Animator file
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# v64: file(1) uncertain magic for the V64 format N64 ROM dumps
|
||||
#
|
||||
0 belong 0x37804012 V64 Nintendo 64 ROM dump
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# msx: file(1) magic for MSX game cartridge dumps
|
||||
0 beshort 0x4142 MSX game cartridge dump
|
70
contrib/file/Magdir/database
Normal file
70
contrib/file/Magdir/database
Normal file
@ -0,0 +1,70 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# database: file(1) magic for various databases
|
||||
#
|
||||
# extracted from header/code files by Graeme Wilford (eep2gw@ee.surrey.ac.uk)
|
||||
#
|
||||
#
|
||||
# GDBM magic numbers
|
||||
# Will be maintained as part of the GDBM distribution in the future.
|
||||
# <downsj@teeny.org>
|
||||
0 belong 0x13579ace GNU dbm 1.x or ndbm database, big endian
|
||||
0 lelong 0x13579ace GNU dbm 1.x or ndbm database, little endian
|
||||
0 string GDBM GNU dbm 2.x database
|
||||
#
|
||||
# Berkeley DB
|
||||
#
|
||||
# Ian Darwin's file /etc/magic files: big/little-endian version.
|
||||
#
|
||||
# Hash 1.85/1.86 databases store metadata in network byte order.
|
||||
# Btree 1.85/1.86 databases store the metadata in host byte order.
|
||||
# Hash and Btree 2.X and later databases store the metadata in host byte order.
|
||||
|
||||
0 long 0x00061561 Berkeley DB
|
||||
>8 belong 4321
|
||||
>>4 belong >2 1.86
|
||||
>>4 belong <3 1.85
|
||||
>>4 belong >0 (Hash, version %d, native byte-order)
|
||||
>8 belong 1234
|
||||
>>4 belong >2 1.86
|
||||
>>4 belong <3 1.85
|
||||
>>4 belong >0 (Hash, version %d, little-endian)
|
||||
|
||||
0 belong 0x00061561 Berkeley DB
|
||||
>8 belong 4321
|
||||
>>4 belong >2 1.86
|
||||
>>4 belong <3 1.85
|
||||
>>4 belong >0 (Hash, version %d, big-endian)
|
||||
>8 belong 1234
|
||||
>>4 belong >2 1.86
|
||||
>>4 belong <3 1.85
|
||||
>>4 belong >0 (Hash, version %d, native byte-order)
|
||||
|
||||
0 long 0x00053162 Berkeley DB 1.85/1.86
|
||||
>4 long >0 (Btree, version %d, native byte-order)
|
||||
0 belong 0x00053162 Berkeley DB 1.85/1.86
|
||||
>4 belong >0 (Btree, version %d, big-endian)
|
||||
0 lelong 0x00053162 Berkeley DB 1.85/1.86
|
||||
>4 lelong >0 (Btree, version %d, little-endian)
|
||||
|
||||
12 long 0x00061561 Berkeley DB
|
||||
>16 long >0 (Hash, version %d, native byte-order)
|
||||
12 belong 0x00061561 Berkeley DB
|
||||
>16 belong >0 (Hash, version %d, big-endian)
|
||||
12 lelong 0x00061561 Berkeley DB
|
||||
>16 lelong >0 (Hash, version %d, little-endian)
|
||||
|
||||
12 long 0x00053162 Berkeley DB
|
||||
>16 long >0 (Btree, version %d, native byte-order)
|
||||
12 belong 0x00053162 Berkeley DB
|
||||
>16 belong >0 (Btree, version %d, big-endian)
|
||||
12 lelong 0x00053162 Berkeley DB
|
||||
>16 lelong >0 (Btree, version %d, little-endian)
|
||||
|
||||
12 long 0x00042253 Berkeley DB
|
||||
>16 long >0 (Queue, version %d, native byte-order)
|
||||
12 belong 0x00042253 Berkeley DB
|
||||
>16 belong >0 (Queue, version %d, big-endian)
|
||||
12 lelong 0x00042253 Berkeley DB
|
||||
>16 lelong >0 (Queue, version %d, little-endian)
|
||||
|
@ -6,3 +6,8 @@
|
||||
0 string ***\ 'diff' output text
|
||||
0 string Only\ in\ 'diff' output text
|
||||
0 string Common\ subdirectories:\ 'diff' output text
|
||||
|
||||
# xdelta is like diff(1) for binary files (works for text, too).
|
||||
# Available from: ftp://ftp.xcf.berkeley.edu/pub/xdelta/
|
||||
0 string %XDZ xdelta diff file
|
||||
>4 string >% version %.3s
|
@ -1,6 +1,6 @@
|
||||
# Digital UNIX - Info
|
||||
#
|
||||
0 string ^!<arch>\n_______64E Alpha archive
|
||||
0 string !<arch>\n________64E Alpha archive
|
||||
>22 string X -- out of date
|
||||
#
|
||||
# Alpha COFF Based Executables
|
145
contrib/file/Magdir/elf
Normal file
145
contrib/file/Magdir/elf
Normal file
@ -0,0 +1,145 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# elf: file(1) magic for ELF executables
|
||||
#
|
||||
# We have to check the byte order flag to see what byte order all the
|
||||
# other stuff in the header is in.
|
||||
#
|
||||
# MIPS R3000 may also be for MIPS R2000.
|
||||
# What're the correct byte orders for the nCUBE and the Fujitsu VPP500?
|
||||
#
|
||||
# updated by Daniel Quinlan (quinlan@yggdrasil.com)
|
||||
0 string \177ELF ELF
|
||||
>4 byte 0 invalid class
|
||||
>4 byte 1 32-bit
|
||||
# only for MIPS R3000_BE
|
||||
>>18 beshort 8
|
||||
>>>36 belong &0x20 N32
|
||||
>4 byte 2 64-bit
|
||||
>5 byte 0 invalid byte order
|
||||
>5 byte 1 LSB
|
||||
>>16 leshort 0 no file type,
|
||||
>>16 leshort 1 relocatable,
|
||||
>>16 leshort 2 executable,
|
||||
>>16 leshort 3 shared object,
|
||||
# Core handling from Peter Tobias <tobias@server.et-inf.fho-emden.de>
|
||||
# corrections by Christian 'Dr. Disk' Hechelmann <drdisk@ds9.au.s.shuttle.de>
|
||||
>>16 leshort 4 core file
|
||||
>>>(0x38+0xcc) string >\0 of '%s'
|
||||
>>>(0x38+0x10) lelong >0 (signal %d),
|
||||
>>16 leshort &0xff00 processor-specific,
|
||||
>>18 leshort 0 no machine,
|
||||
>>18 leshort 1 AT&T WE32100 - invalid byte order,
|
||||
>>18 leshort 2 SPARC - invalid byte order,
|
||||
>>18 leshort 3 Intel 80386,
|
||||
>>18 leshort 4 Motorola 68000 - invalid byte order,
|
||||
>>18 leshort 5 Motorola 88000 - invalid byte order,
|
||||
>>18 leshort 6 Intel 80486,
|
||||
>>18 leshort 7 Intel 80860,
|
||||
>>18 leshort 8 MIPS R3000_BE - invalid byte order,
|
||||
>>18 leshort 9 Amdahl - invalid byte order,
|
||||
>>18 leshort 10 MIPS R3000_LE,
|
||||
>>18 leshort 11 RS6000 - invalid byte order,
|
||||
>>18 leshort 15 PA-RISC - invalid byte order,
|
||||
>>18 leshort 16 nCUBE,
|
||||
>>18 leshort 17 Fujitsu VPP500,
|
||||
>>18 leshort 18 SPARC32PLUS,
|
||||
>>18 leshort 20 PowerPC,
|
||||
>>18 leshort 36 NEC V800,
|
||||
>>18 leshort 37 Fujitsu FR20,
|
||||
>>18 leshort 38 TRW RH-32,
|
||||
>>18 leshort 39 Motorola RCE,
|
||||
>>18 leshort 40 Advanced RISC Machines ARM,
|
||||
>>18 leshort 41 Alpha,
|
||||
>>18 leshort 42 Hitachi SH,
|
||||
>>18 leshort 43 SPARC V9 - invalid byte order,
|
||||
>>18 leshort 44 Siemens Tricore Embedded Processor,
|
||||
>>18 leshort 45 Argonaut RISC Core, Argonaut Technologies Inc.,
|
||||
>>18 leshort 46 Hitachi H8/300,
|
||||
>>18 leshort 47 Hitachi H8/300H,
|
||||
>>18 leshort 48 Hitachi H8S,
|
||||
>>18 leshort 49 Hitachi H8/500,
|
||||
>>18 leshort 50 IA-64 (Intel 64 bit architecture)
|
||||
>>18 leshort 51 Stanford MIPS-X,
|
||||
>>18 leshort 52 Motorola Coldfire,
|
||||
>>18 leshort 53 Motorola M68HC12,
|
||||
>>18 leshort 75 Digital VAX,
|
||||
>>18 leshort 0x9026 Alpha (unofficial),
|
||||
>>20 lelong 0 invalid version
|
||||
>>20 lelong 1 version 1
|
||||
>>36 lelong 1 MathCoPro/FPU/MAU Required
|
||||
>8 string >\0 (%s)
|
||||
>5 byte 2 MSB
|
||||
# only for MIPS R3000_BE
|
||||
>>18 beshort 8
|
||||
# only for 32-bit
|
||||
>>>4 byte 1
|
||||
>>>>36 belong&0xf0000000 0x00000000 mips-1
|
||||
>>>>36 belong&0xf0000000 0x10000000 mips-2
|
||||
>>>>36 belong&0xf0000000 0x20000000 mips-3
|
||||
>>>>36 belong&0xf0000000 0x30000000 mips-4
|
||||
>>>>36 belong&0xf0000000 0x40000000 mips-5
|
||||
>>>>36 belong&0xf0000000 0x50000000 mips-6
|
||||
# only for 64-bit
|
||||
>>>4 byte 2
|
||||
>>>>48 belong&0xf0000000 0x00000000 mips-1
|
||||
>>>>48 belong&0xf0000000 0x10000000 mips-2
|
||||
>>>>48 belong&0xf0000000 0x20000000 mips-3
|
||||
>>>>48 belong&0xf0000000 0x30000000 mips-4
|
||||
>>>>48 belong&0xf0000000 0x40000000 mips-5
|
||||
>>>>48 belong&0xf0000000 0x50000000 mips-6
|
||||
>>16 beshort 0 no file type,
|
||||
>>16 beshort 1 relocatable,
|
||||
>>16 beshort 2 executable,
|
||||
>>16 beshort 3 shared object,
|
||||
>>16 beshort 4 core file,
|
||||
>>>(0x38+0xcc) string >\0 of '%s'
|
||||
>>>(0x38+0x10) belong >0 (signal %d),
|
||||
>>16 beshort &0xff00 processor-specific,
|
||||
>>18 beshort 0 no machine,
|
||||
>>18 beshort 1 AT&T WE32100,
|
||||
>>18 beshort 2 SPARC,
|
||||
>>18 beshort 3 Intel 80386 - invalid byte order,
|
||||
>>18 beshort 4 Motorola 68000,
|
||||
>>18 beshort 5 Motorola 88000,
|
||||
>>18 beshort 6 Intel 80486 - invalid byte order,
|
||||
>>18 beshort 7 Intel 80860,
|
||||
>>18 beshort 8 MIPS R3000_BE,
|
||||
>>18 beshort 9 Amdahl,
|
||||
>>18 beshort 10 MIPS R3000_LE - invalid byte order,
|
||||
>>18 beshort 11 RS6000,
|
||||
>>18 beshort 15 PA-RISC,
|
||||
>>18 beshort 16 nCUBE,
|
||||
>>18 beshort 17 Fujitsu VPP500,
|
||||
>>18 beshort 18 SPARC32PLUS,
|
||||
>>>36 belong&0xffff00 &0x000100 V8+ Required,
|
||||
>>>36 belong&0xffff00 &0x000200 Sun UltraSPARC1 Extensions Required,
|
||||
>>>36 belong&0xffff00 &0x000400 HaL R1 Extensions Required,
|
||||
>>>36 belong&0xffff00 &0x000800 Sun UltraSPARC3 Extensions Required,
|
||||
>>18 beshort 20 PowerPC or cisco 4500,
|
||||
>>18 beshort 21 cisco 7500,
|
||||
>>18 beshort 24 cisco SVIP,
|
||||
>>18 beshort 25 cisco 7200,
|
||||
>>18 beshort 36 NEC V800 or cisco 12000,
|
||||
>>18 beshort 37 Fujitsu FR20,
|
||||
>>18 beshort 38 TRW RH-32,
|
||||
>>18 beshort 39 Motorola RCE,
|
||||
>>18 beshort 40 Advanced RISC Machines ARM,
|
||||
>>18 beshort 41 Alpha,
|
||||
>>18 beshort 42 Hitachi SH,
|
||||
>>18 beshort 43 SPARC V9,
|
||||
>>18 beshort 44 Siemens Tricore Embedded Processor,
|
||||
>>18 beshort 45 Argonaut RISC Core, Argonaut Technologies Inc.,
|
||||
>>18 beshort 46 Hitachi H8/300,
|
||||
>>18 beshort 47 Hitachi H8/300H,
|
||||
>>18 beshort 48 Hitachi H8S,
|
||||
>>18 beshort 49 Hitachi H8/500,
|
||||
>>18 beshort 50 Intel Merced Processor,
|
||||
>>18 beshort 51 Stanford MIPS-X,
|
||||
>>18 beshort 52 Motorola Coldfire,
|
||||
>>18 beshort 53 Motorola M68HC12,
|
||||
>>18 beshort 75 Digital VAX,
|
||||
>>18 beshort 0x9026 Alpha (unofficial),
|
||||
>>20 belong 0 invalid version
|
||||
>>20 belong 1 version 1
|
||||
>>36 belong 1 MathCoPro/FPU/MAU Required
|
10
contrib/file/Magdir/epoc
Normal file
10
contrib/file/Magdir/epoc
Normal file
@ -0,0 +1,10 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# Epoc 32 : file(1) magic for Epoc Documents [psion/osaris
|
||||
# Stefan Praszalowicz (hpicollo@worldnet.fr)
|
||||
#0 lelong 0x10000037 Epoc32
|
||||
>4 lelong 0x1000006D
|
||||
>>8 lelong 0x1000007F Word
|
||||
>>8 lelong 0x10000088 Sheet
|
||||
>>8 lelong 0x1000007D Sketch
|
||||
>>8 lelong 0x10000085 TextEd
|
91
contrib/file/Magdir/filesystems
Normal file
91
contrib/file/Magdir/filesystems
Normal file
@ -0,0 +1,91 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# filesystems: file(1) magic for different filesystems
|
||||
#
|
||||
0 string \366\366\366\366 PC formatted floppy with no filesystem
|
||||
# Sun disk labels
|
||||
# From /usr/include/sun/dklabel.h:
|
||||
0774 beshort 0xdabe Sun disk label
|
||||
>0 string x '%s
|
||||
>>31 string >\0 \b%s
|
||||
>>>63 string >\0 \b%s
|
||||
>>>>95 string >\0 \b%s
|
||||
>0 string x \b'
|
||||
>0734 short >0 %d rpm,
|
||||
>0736 short >0 %d phys cys,
|
||||
>0740 short >0 %d alts/cyl,
|
||||
>0746 short >0 %d interleave,
|
||||
>0750 short >0 %d data cyls,
|
||||
>0752 short >0 %d alt cyls,
|
||||
>0754 short >0 %d heads/partition,
|
||||
>0756 short >0 %d sectors/track,
|
||||
>0764 long >0 start cyl %ld,
|
||||
>0770 long x %ld blocks
|
||||
# Is there a boot block written 1 sector in?
|
||||
>512 belong&077777777 0600407 \b, boot block present
|
||||
0x1FE leshort 0xAA55 x86 boot sector
|
||||
>2 string OSBS \b, OS/BS MBR
|
||||
>0x8C string Invalid\ partition\ table \b, MS-DOS MBR
|
||||
>0 string \0\0\0\0 \b, extended partition table
|
||||
>0 leshort 0x3CEB \b, system
|
||||
>>3 string >\0 %s
|
||||
>>0x36 string FAT \b, %s
|
||||
>>>0x39 string 12 (%s bit)
|
||||
>>>0x39 string 16 (%s bit)
|
||||
>0x52 string FAT32 \b, FAT (32 bit)
|
||||
>>>43 string >NO\ NAME label: %.11s,
|
||||
>>>43 string <NO\ NAME label: %.11s,
|
||||
>>>43 string NO\ NAME unlabeled,
|
||||
>>>19 leshort >0 %d sectors
|
||||
>>>19 leshort 0
|
||||
>>>>32 lelong x %d sectors
|
||||
>0x200 lelong 0x82564557 \b, BSD disklabel
|
||||
|
||||
# Minix filesystems - Juan Cespedes <cespedes@debian.org>
|
||||
0x410 leshort 0x137f Minix filesystem
|
||||
0x410 leshort 0x138f Minix filesystem, 30 char names
|
||||
0x410 leshort 0x2468 Minix filesystem, version 2
|
||||
0x410 leshort 0x2478 Minix filesystem, version 2, 30 char names
|
||||
|
||||
# romfs filesystems - Juan Cespedes <cespedes@debian.org>
|
||||
0 string -rom1fs-\0 romfs filesystem, version 1
|
||||
>8 belong x %d bytes,
|
||||
>16 string x named %s.
|
||||
|
||||
# netboot image - Juan Cespedes <cespedes@debian.org>
|
||||
0 lelong 0x1b031336L Netboot image,
|
||||
>4 lelong&0xFFFFFF00 0
|
||||
>>4 lelong&0x100 0x000 mode 2
|
||||
>>4 lelong&0x100 0x100 mode 3
|
||||
>4 lelong&0xFFFFFF00 !0 unknown mode
|
||||
|
||||
0x18b string OS/2 OS/2 Boot Manager
|
||||
|
||||
9564 lelong 0x00011954 Unix Fast File system,
|
||||
>8404 string x last mounted on %s,
|
||||
>9504 ledate x last checkd at %s,
|
||||
>8224 ledate x last writen at %s,
|
||||
>8228 lelong x number of blocks %d,
|
||||
>8232 lelong x number of data blocks %d,
|
||||
>8236 lelong x number of cylinder groups %d,
|
||||
>8240 lelong x number of basic blocks %d,
|
||||
>8244 lelong x number of fragment blocks %d,
|
||||
>8248 lelong x minimum percentage of free blocks %d,
|
||||
>8252 lelong x rotational delay %dms,
|
||||
>8256 lelong x disk rotational speed %drps,
|
||||
>8320 lelong 0 TIME optimization
|
||||
>8320 lelong 1 SPACE optimization
|
||||
|
||||
# ext2/ext3 filesystems - Andreas Dilger <adilger@turbolabs.com>
|
||||
0x438 leshort 0xEF53 Linux
|
||||
>0x44c lelong x rev %d
|
||||
>0x43e leshort x \b.%d
|
||||
>0x45c lelong ^0x0000004 ext2 filesystem data
|
||||
>>0x43a leshort ^0x0000001 (mounted or unclean)
|
||||
>0x45c lelong &0x0000004 ext3 filesystem data
|
||||
>>0x460 lelong &0x0000004 (needs journal recovery)
|
||||
>0x43a leshort &0x0000002 (errors)
|
||||
>0x460 lelong &0x0000001 (compressed)
|
||||
#>0x460 lelong &0x0000002 (filetype)
|
||||
#>0x464 lelong &0x0000001 (sparse_super)
|
||||
>0x464 lelong &0x0000002 (large files)
|
10
contrib/file/Magdir/flash
Normal file
10
contrib/file/Magdir/flash
Normal file
@ -0,0 +1,10 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# flash: file(1) magic for Macromedia Flash file format
|
||||
#
|
||||
# See
|
||||
#
|
||||
# http://www.macromedia.com/software/flash/open/
|
||||
#
|
||||
0 string FWS Macromedia Flash data,
|
||||
>3 byte x version %d
|
@ -24,3 +24,28 @@
|
||||
>12 byte 0x02 \b, LSB first
|
||||
>12 byte 0x0a \b, MSB first
|
||||
0 string D1.0\015 X11 Speedo font data
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# FIGlet fonts and controlfiles
|
||||
# From figmagic supplied with Figlet version 2.2
|
||||
# "David E. O'Brien" <obrien@FreeBSD.ORG>
|
||||
0 string flf FIGlet font
|
||||
>3 string >2a version %-2.2s
|
||||
0 string flc FIGlet controlfile
|
||||
>3 string >2a version %-2.2s
|
||||
|
||||
# libGrx graphics lib fonts, from Albert Cahalan (acahalan@cs.uml.edu)
|
||||
# Used with djgpp (DOS Gnu C++), sometimes Linux or Turbo C++
|
||||
0 belong 0x14025919 libGrx font data,
|
||||
>8 leshort x %dx
|
||||
>10 leshort x \b%d
|
||||
>40 string x %s
|
||||
# Misc. DOS VGA fonts, from Albert Cahalan (acahalan@cs.uml.edu)
|
||||
0 belong 0xff464f4e DOS code page font data collection
|
||||
7 belong 0x00454741 DOS code page font data
|
||||
7 belong 0x00564944 DOS code page font data (from Linux?)
|
||||
4098 string DOSFONT DOSFONT2 encrypted font data
|
||||
|
||||
# downloadable fonts for browser (prints type) anthon@mnt.org
|
||||
0 string PFR1 PFR1 font
|
||||
>102 string >0 \b: %s
|
@ -6,6 +6,8 @@
|
||||
# copyright, but this file is "published" as witness the following:
|
||||
#
|
||||
0 string \<MakerFile FrameMaker document
|
||||
>11 string 5.5 (5.5
|
||||
>11 string 5.0 (5.0
|
||||
>11 string 4.0 (4.0
|
||||
>11 string 3.0 (3.0
|
||||
>11 string 2.0 (2.0
|
27
contrib/file/Magdir/fsav
Normal file
27
contrib/file/Magdir/fsav
Normal file
@ -0,0 +1,27 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# fsav: file(1) magic for datafellows fsav virus definition files
|
||||
# Anthon van der Neut (anthon@mnt.org)
|
||||
0 beshort 0x1575 fsav (linux) macro virus
|
||||
>8 leshort >0 (%d-
|
||||
>11 byte >0 \b%02d-
|
||||
>10 byte >0 \b%02d)
|
||||
|
||||
# comment this out for now because it regognizes every file where
|
||||
# the eighth character is \n
|
||||
#8 byte 0x0a
|
||||
#>12 byte 0x07
|
||||
#>11 leshort >0 fsav (linux) virus (%d-
|
||||
#>10 byte 0 \b01-
|
||||
#>10 byte 1 \b02-
|
||||
#>10 byte 2 \b03-
|
||||
#>10 byte 3 \b04-
|
||||
#>10 byte 4 \b05-
|
||||
#>10 byte 5 \b06-
|
||||
#>10 byte 6 \b07-
|
||||
#>10 byte 7 \b08-
|
||||
#>10 byte 8 \b08-
|
||||
#>10 byte 9 \b10-
|
||||
#>10 byte 10 \b11-
|
||||
#>10 byte 11 \b12-
|
||||
#>9 byte >0 \b%02d)
|
36
contrib/file/Magdir/gimp
Normal file
36
contrib/file/Magdir/gimp
Normal file
@ -0,0 +1,36 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# GIMP Gradient: file(1) magic for the GIMP's gradient data files
|
||||
# by Federico Mena <federico@nuclecu.unam.mx>
|
||||
|
||||
0 string GIMP\ Gradient GIMP gradient data
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# XCF: file(1) magic for the XCF image format used in the GIMP developed
|
||||
# by Spencer Kimball and Peter Mattis
|
||||
# ('Bucky' LaDieu, nega@vt.edu)
|
||||
|
||||
0 string gimp\ xcf GIMP XCF image data,
|
||||
>9 string file version 0,
|
||||
>9 string v version
|
||||
>>10 string >\0 %s,
|
||||
>14 belong x %lu x
|
||||
>18 belong x %lu,
|
||||
>22 belong 0 RGB Color
|
||||
>22 belong 1 Greyscale
|
||||
>22 belong 2 Indexed Color
|
||||
>22 belong >2 Unknown Image Type.
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# XCF: file(1) magic for the patterns used in the GIMP, developed
|
||||
# by Spencer Kimball and Peter Mattis
|
||||
# ('Bucky' LaDieu, nega@vt.edu)
|
||||
|
||||
20 string GPAT GIMP pattern data,
|
||||
>24 string x %s
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# XCF: file(1) magic for the brushes used in the GIMP, developed
|
||||
# by Spencer Kimball and Peter Mattis
|
||||
# ('Bucky' LaDieu, nega@vt.edu)
|
||||
|
||||
20 string GIMP GIMP brush data
|
12
contrib/file/Magdir/gnu
Normal file
12
contrib/file/Magdir/gnu
Normal file
@ -0,0 +1,12 @@
|
||||
#
|
||||
# GNU nlsutils message catalog file format
|
||||
#
|
||||
0 string \336\22\4\225 GNU message catalog (little endian),
|
||||
>4 lelong x revision %d,
|
||||
>8 lelong x %d messages
|
||||
0 string \225\4\22\336 GNU message catalog (big endian),
|
||||
>4 belong x revision %d,
|
||||
>8 belong x %d messages
|
||||
# message catalogs, from Mitchum DSouza <m.dsouza@mrc-apu.cam.ac.uk>
|
||||
0 string *nazgul* Nazgul style compiled message catalog
|
||||
>8 lelong >0 \b, version %ld
|
20
contrib/file/Magdir/grace
Normal file
20
contrib/file/Magdir/grace
Normal file
@ -0,0 +1,20 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# ACE/gr and Grace type files - PLEASE DO NOT REMOVE THIS LINE
|
||||
#
|
||||
# ACE/gr binary
|
||||
0 string \000\000\0001\000\000\0000\000\000\0000\000\000\0002\000\000\0000\000\000\0000\000\000\0003 old ACE/gr binary file
|
||||
>39 byte >0 - version %c
|
||||
# ACE/gr ascii
|
||||
0 string #\ xvgr\ parameter\ file ACE/gr ascii file
|
||||
0 string #\ xmgr\ parameter\ file ACE/gr ascii file
|
||||
0 string #\ ACE/gr\ parameter\ file ACE/gr ascii file
|
||||
# Grace projects
|
||||
0 string #\ Grace\ project\ file Grace project file
|
||||
>23 string @version\ (version
|
||||
>>32 byte >0 %c
|
||||
>>33 string >\0 \b.%.2s
|
||||
>>35 string >\0 \b.%.2s)
|
||||
# ACE/gr fit description files
|
||||
0 string #\ ACE/gr\ fit\ description\ ACE/gr fit description file
|
||||
# end of ACE/gr and Grace type files - PLEASE DO NOT REMOVE THIS LINE
|
@ -48,10 +48,10 @@
|
||||
0 long 01702407010 TML 1032 byte-order format
|
||||
0 long 01003405017 TML 2301 byte-order format
|
||||
0 long 01602007412 TML 3210 byte-order format
|
||||
#### PA-RISC
|
||||
#### PA-RISC 1.1
|
||||
0 belong 0x02100106 PA-RISC1.1 relocatable object
|
||||
0 belong 0x02100107 PA-RISC1.1 executable
|
||||
>168 belong &=0x00000004 dynamically linked
|
||||
>168 belong &0x00000004 dynamically linked
|
||||
>(144) belong 0x054ef630 dynamically linked
|
||||
>96 belong >0 - not stripped
|
||||
|
||||
@ -71,6 +71,30 @@
|
||||
0 belong 0x0210010d PA-RISC1.1 dynamic load library
|
||||
>96 belong >0 - not stripped
|
||||
|
||||
#### PA-RISC 2.0
|
||||
0 belong 0x02140106 PA-RISC2.0 relocatable object
|
||||
|
||||
0 belong 0x02140107 PA-RISC2.0 executable
|
||||
>168 belong &0x00000004 dynamically linked
|
||||
>(144) belong 0x054ef630 dynamically linked
|
||||
>96 belong >0 - not stripped
|
||||
|
||||
0 belong 0x02140108 PA-RISC2.0 shared executable
|
||||
>168 belong &0x00000004 dynamically linked
|
||||
>(144) belong 0x054ef630 dynamically linked
|
||||
>96 belong >0 - not stripped
|
||||
|
||||
0 belong 0x0214010b PA-RISC2.0 demand-load executable
|
||||
>168 belong &0x00000004 dynamically linked
|
||||
>(144) belong 0x054ef630 dynamically linked
|
||||
>96 belong >0 - not stripped
|
||||
|
||||
0 belong 0x0214010e PA-RISC2.0 shared library
|
||||
>96 belong >0 - not stripped
|
||||
|
||||
0 belong 0x0214010d PA-RISC2.0 dynamic load library
|
||||
>96 belong >0 - not stripped
|
||||
|
||||
#### 800
|
||||
0 belong 0x020b0106 PA-RISC1.0 relocatable object
|
||||
|
||||
@ -181,30 +205,30 @@
|
||||
# addendum to /etc/magic with HP-48sx file-types by phk@data.fls.dk 1jan92
|
||||
0 string HPHP48- HP48 binary
|
||||
>7 byte >0 - Rev %c
|
||||
>8 short 0x1129 (ADR)
|
||||
>8 short 0x3329 (REAL)
|
||||
>8 short 0x5529 (LREAL)
|
||||
>8 short 0x7729 (COMPLX)
|
||||
>8 short 0x9d29 (LCOMPLX)
|
||||
>8 short 0xbf29 (CHAR)
|
||||
>8 short 0xe829 (ARRAY)
|
||||
>8 short 0x0a2a (LNKARRAY)
|
||||
>8 short 0x2c2a (STRING)
|
||||
>8 short 0x4e2a (HXS)
|
||||
>8 short 0x742a (LIST)
|
||||
>8 short 0x962a (DIR)
|
||||
>8 short 0xb82a (ALG)
|
||||
>8 short 0xda2a (UNIT)
|
||||
>8 short 0xfc2a (TAGGED)
|
||||
>8 short 0x1e2b (GROB)
|
||||
>8 short 0x402b (LIB)
|
||||
>8 short 0x622b (BACKUP)
|
||||
>8 short 0x882b (LIBDATA)
|
||||
>8 short 0x9d2d (PROG)
|
||||
>8 short 0xcc2d (CODE)
|
||||
>8 short 0x482e (GNAME)
|
||||
>8 short 0x6d2e (LNAME)
|
||||
>8 short 0x922e (XLIB)
|
||||
>8 beshort 0x1129 (ADR)
|
||||
>8 beshort 0x3329 (REAL)
|
||||
>8 beshort 0x5529 (LREAL)
|
||||
>8 beshort 0x7729 (COMPLX)
|
||||
>8 beshort 0x9d29 (LCOMPLX)
|
||||
>8 beshort 0xbf29 (CHAR)
|
||||
>8 beshort 0xe829 (ARRAY)
|
||||
>8 beshort 0x0a2a (LNKARRAY)
|
||||
>8 beshort 0x2c2a (STRING)
|
||||
>8 beshort 0x4e2a (HXS)
|
||||
>8 beshort 0x742a (LIST)
|
||||
>8 beshort 0x962a (DIR)
|
||||
>8 beshort 0xb82a (ALG)
|
||||
>8 beshort 0xda2a (UNIT)
|
||||
>8 beshort 0xfc2a (TAGGED)
|
||||
>8 beshort 0x1e2b (GROB)
|
||||
>8 beshort 0x402b (LIB)
|
||||
>8 beshort 0x622b (BACKUP)
|
||||
>8 beshort 0x882b (LIBDATA)
|
||||
>8 beshort 0x9d2d (PROG)
|
||||
>8 beshort 0xcc2d (CODE)
|
||||
>8 beshort 0x482e (GNAME)
|
||||
>8 beshort 0x6d2e (LNAME)
|
||||
>8 beshort 0x922e (XLIB)
|
||||
0 string %%HP: HP48 text
|
||||
>6 string T(0) - T(0)
|
||||
>6 string T(1) - T(1)
|
||||
@ -225,4 +249,3 @@
|
||||
>2 beshort 0407 impure binary
|
||||
>2 beshort 0410 read-only binary
|
||||
>2 beshort 0413 demand paged binary
|
||||
|
@ -7,7 +7,20 @@
|
||||
# merging several one- and two-line files into here.
|
||||
#
|
||||
# little magic: PCX (first byte is 0x0a)
|
||||
# no magic: Targa
|
||||
|
||||
# Targa - matches `povray', `ppmtotga' and `xv' outputs
|
||||
# by Philippe De Muyter <phdm@macqel.be>
|
||||
# at 2, byte ImgType must be 1, 2, 3, 9, 10 or 11
|
||||
# at 1, byte CoMapType must be 1 if ImgType is 1 or 9, 0 otherwise
|
||||
# at 3, leshort Index is 0 for povray, ppmtotga and xv outputs
|
||||
# `xv' recognizes only a subset of the following (RGB with pixelsize = 24)
|
||||
# `tgatoppm' recognizes a superset (Index may be anything)
|
||||
1 belong&0xfff7ffff 0x01010000 Targa image data - Map
|
||||
>2 byte&8 8 - RLE
|
||||
1 belong&0xfff7ffff 0x00020000 Targa image data - RGB
|
||||
>2 byte&8 8 - RLE
|
||||
1 belong&0xfff7ffff 0x00030000 Targa image data - Mono
|
||||
>2 byte&8 8 - RLE
|
||||
|
||||
# PBMPLUS images
|
||||
# The next byte following the magic is always whitespace.
|
||||
@ -29,22 +42,25 @@
|
||||
|
||||
# PNG [Portable Network Graphics, or "PNG's Not GIF"] images
|
||||
# (Greg Roelofs, newt@uchicago.edu)
|
||||
# (Albert Cahalan, acahalan@cs.uml.edu)
|
||||
#
|
||||
# 137 P N G \r \n ^Z \n [4-byte length] H E A D [HEAD data] [HEAD crc] ...
|
||||
#
|
||||
0 string \x89PNG PNG image data,
|
||||
>4 belong !0x0d0a1a0a CORRUPTED,
|
||||
>16 belong x %ld x
|
||||
>20 belong x %ld,
|
||||
>24 byte x %d-bit
|
||||
>25 byte 0 grayscale,
|
||||
>25 byte 2 \b/color RGB,
|
||||
>25 byte 3 colormap,
|
||||
>25 byte 4 gray+alpha,
|
||||
>25 byte 6 \b/color RGBA,
|
||||
#>26 byte 0 deflate/32K,
|
||||
>28 byte 0 non-interlaced
|
||||
>28 byte 1 interlaced
|
||||
>4 belong 0x0d0a1a0a
|
||||
>>16 belong x %ld x
|
||||
>>20 belong x %ld,
|
||||
>>24 byte x %d-bit
|
||||
>>25 byte 0 grayscale,
|
||||
>>25 byte 2 \b/color RGB,
|
||||
>>25 byte 3 colormap,
|
||||
>>25 byte 4 gray+alpha,
|
||||
>>25 byte 6 \b/color RGBA,
|
||||
#>>26 byte 0 deflate/32K,
|
||||
>>28 byte 0 non-interlaced
|
||||
>>28 byte 1 interlaced
|
||||
1 string PNG PNG image data, CORRUPTED
|
||||
|
||||
# GIF
|
||||
0 string GIF8 GIF image data
|
||||
@ -115,19 +131,6 @@
|
||||
>29 byte 0 \b, normal resolution (204x98 DPI)
|
||||
>29 byte 1 \b, fine resolution (204x196 DPI)
|
||||
|
||||
# JPEG images
|
||||
# SunOS 5.5.1 had
|
||||
#
|
||||
# 0 string \377\330\377\340 JPEG file
|
||||
# 0 string \377\330\377\356 JPG file
|
||||
#
|
||||
# both of which turn into "JPEG image data" here.
|
||||
#
|
||||
0 beshort 0xffd8 JPEG image data
|
||||
>6 string JFIF \b, JFIF standard
|
||||
# HSI is Handmade Software's proprietary JPEG encoding scheme
|
||||
0 string hsi1 JPEG image data, HSI proprietary
|
||||
|
||||
# PC bitmaps (OS/2, Windoze BMP files) (Greg Roelofs, newt@uchicago.edu)
|
||||
0 string BM PC bitmap data
|
||||
>14 leshort 12 \b, OS/2 1.x format
|
||||
@ -147,6 +150,19 @@
|
||||
# Conflicts with other entries [BABYL]
|
||||
#0 string BA PC bitmap array data
|
||||
|
||||
# JPEG images
|
||||
# SunOS 5.5.1 had
|
||||
#
|
||||
# 0 string \377\330\377\340 JPEG file
|
||||
# 0 string \377\330\377\356 JPG file
|
||||
#
|
||||
# both of which turn into "JPEG image data" here.
|
||||
#
|
||||
0 beshort 0xffd8 JPEG image data
|
||||
>6 string JFIF \b, JFIF standard
|
||||
# HSI is Handmade Software's proprietary JPEG encoding scheme
|
||||
0 string hsi1 JPEG image data, HSI proprietary
|
||||
|
||||
# XPM icons (Greg Roelofs, newt@uchicago.edu)
|
||||
# note possible collision with C/REXX entry in c-lang; currently commented out
|
||||
0 string /*\ XPM\ */ X pixmap image text
|
||||
@ -189,7 +205,10 @@
|
||||
#>28 belong >0 colormap is %d bytes long
|
||||
|
||||
# SGI image file format, from Daniel Quinlan (quinlan@yggdrasil.com)
|
||||
# file://sgi.com/graphics/SGIIMAGESPEC
|
||||
#
|
||||
# See
|
||||
# http://reality.sgi.com/grafica/sgiimage.html
|
||||
#
|
||||
0 beshort 474 SGI image data
|
||||
#>2 byte 0 \b, verbatim
|
||||
>2 byte 1 \b, RLE
|
||||
@ -234,3 +253,12 @@
|
||||
# stuff.
|
||||
#
|
||||
0 beshort 0x1010 PEX Binary Archive
|
||||
|
||||
# Visio drawings
|
||||
03000 string Visio\ (TM)\ Drawing %s
|
||||
|
||||
# Tgif files
|
||||
0 string \%TGIF\ x Tgif file version %s
|
||||
|
||||
# DICOM medical imaging data
|
||||
128 string DICM DICOM medical imaging data
|
@ -52,3 +52,11 @@
|
||||
>2 beshort 0x0E 8-bit, capitalization, 256 flags
|
||||
>2 beshort 0x0F 7-bit, capitalization, 256 flags
|
||||
>4 beshort >0 and %d string characters
|
||||
# ispell 4.0 hash files kromJx <kromJx@crosswinds.net>
|
||||
# Ispell 4.0
|
||||
0 string ISPL ispell
|
||||
>4 long x hash file version %d,
|
||||
>8 long x lexletters %d,
|
||||
>12 long x lexsize %d,
|
||||
>16 long x hashsize %d,
|
||||
>20 long x stblsize %d
|
11
contrib/file/Magdir/java
Normal file
11
contrib/file/Magdir/java
Normal file
@ -0,0 +1,11 @@
|
||||
#------------------------------------------------------------
|
||||
# Java ByteCode
|
||||
# From Larry Schwimmer (schwim@cs.stanford.edu)
|
||||
0 belong 0xcafebabe compiled Java class data,
|
||||
>6 beshort x version %d.
|
||||
>4 beshort x \b%d
|
||||
#------------------------------------------------------------
|
||||
# Java serialization
|
||||
# From Martin Pool (m.pool@pharos.com.au)
|
||||
0 beshort 0xaced Java serialization data
|
||||
>2 beshort >0x0004 \b, version %d
|
61
contrib/file/Magdir/jpeg
Normal file
61
contrib/file/Magdir/jpeg
Normal file
@ -0,0 +1,61 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# JPEG images
|
||||
# SunOS 5.5.1 had
|
||||
#
|
||||
# 0 string \377\330\377\340 JPEG file
|
||||
# 0 string \377\330\377\356 JPG file
|
||||
#
|
||||
# both of which turn into "JPEG image data" here.
|
||||
#
|
||||
0 beshort 0xffd8 JPEG image data
|
||||
>6 string JFIF \b, JFIF standard
|
||||
|
||||
# The following added by Erik Rossen <rossen@freesurf.ch> 1999-09-06
|
||||
# in a vain attempt to add image size reporting for JFIF. Note that these
|
||||
# tests are not fool-proof since some perfectly valid JPEGs are currently
|
||||
# impossible to specify in magic(4) format.
|
||||
# First, a little JFIF version info:
|
||||
>11 byte x \b %d.
|
||||
>12 byte x \b%02d
|
||||
# Next, the resolution or aspect ratio of the image:
|
||||
>13 byte 0 \b, aspect ratio
|
||||
>13 byte 1 \b, resolution (DPI)
|
||||
>13 byte 2 \b, resolution (DPCM)
|
||||
>14 beshort x \b X%d:
|
||||
>16 beshort x \bY%d
|
||||
#>4 beshort x \b, segment length %d
|
||||
# Next, show thumbnail info, if it exists:
|
||||
>18 byte !0 \b, thumbnail %dx
|
||||
>>19 byte x \b%d
|
||||
# Here things get sticky. We can do ONE MORE marker segment with
|
||||
# indirect addressing, and that's all. It would be great if we could
|
||||
# do pointer arithemetic like in an assembler language. Christos?
|
||||
# And if there was some sort of looping construct to do searches, plus a few
|
||||
# named accumulators, it would be even more effective...
|
||||
# At least we can show a comment if no other segments got inserted before:
|
||||
>(4.S+5) byte 0xFE
|
||||
>>(4.S+8) string >\0 \b, "%s"
|
||||
#>(4.S+5) byte 0xFE \b, comment
|
||||
#>>(4.S+6) beshort x \b length=%d
|
||||
#>>(4.S+8) string >\0 \b, "%s"
|
||||
# Or, we can show the encoding type (I've included only the three most common)
|
||||
# and image dimensions if we are lucky and the SOFn (image segment) is here:
|
||||
>(4.S+5) byte 0xC0 \b, baseline
|
||||
>>(4.S+6) byte x \b, precision %d
|
||||
>>(4.S+7) beshort x \b, %dx
|
||||
>>(4.S+9) beshort x \b%d
|
||||
>(4.S+5) byte 0xC1 \b, extended sequential
|
||||
>>(4.S+6) byte x \b, precision %d
|
||||
>>(4.S+7) beshort x \b, %dx
|
||||
>>(4.S+9) beshort x \b%d
|
||||
>(4.S+5) byte 0xC2 \b, progressive
|
||||
>>(4.S+6) byte x \b, precision %d
|
||||
>>(4.S+7) beshort x \b, %dx
|
||||
>>(4.S+9) beshort x \b%d
|
||||
# I've commented-out quantisation table reporting. I doubt anyone cares yet.
|
||||
#>(4.S+5) byte 0xDB \b, quantisation table
|
||||
#>>(4.S+6) beshort x \b length=%d
|
||||
|
||||
# HSI is Handmade Software's proprietary JPEG encoding scheme
|
||||
0 string hsi1 JPEG image data, HSI proprietary
|
@ -5,4 +5,4 @@
|
||||
# From <rgooch@atnf.csiro.au>
|
||||
|
||||
0 string KarmaRHD Version Karma Data Structure Version
|
||||
>16 long x %lu
|
||||
>16 belong x %lu
|
4
contrib/file/Magdir/lecter
Normal file
4
contrib/file/Magdir/lecter
Normal file
@ -0,0 +1,4 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# DEC SRC Virtual Paper: Lectern files
|
||||
# Karl M. Hegbloom <karlheg@inetarena.com>
|
||||
0 string lect DEC SRC Virtual Paper Lectern file
|
@ -2,6 +2,6 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# lif: file(1) magic for lif
|
||||
#
|
||||
# XXX - byte order? (Probably beshort, Daniel Quinlan <quinlan@yggdrasil.com>)
|
||||
# (Daniel Quinlan <quinlan@yggdrasil.com>)
|
||||
#
|
||||
0 short 0x8000 lif file
|
||||
0 beshort 0x8000 lif file
|
@ -23,9 +23,18 @@
|
||||
#
|
||||
0 string \007\001\000 Linux/i386 object file
|
||||
>20 lelong >0x1020 \b, DLL library
|
||||
# message catalogs, from Mitchum DSouza <m.dsouza@mrc-apu.cam.ac.uk>
|
||||
0 string *nazgul* Linux compiled message catalog
|
||||
>8 lelong >0 \b, version %ld
|
||||
# Linux-8086 stuff:
|
||||
0 string \01\03\020\04 Linux-8086 impure executable
|
||||
>28 long !0 not stripped
|
||||
0 string \01\03\040\04 Linux-8086 executable
|
||||
>28 long !0 not stripped
|
||||
#
|
||||
0 string \243\206\001\0 Linux-8086 object file
|
||||
#
|
||||
0 string \01\03\020\20 Minix-386 impure executable
|
||||
>28 long !0 not stripped
|
||||
0 string \01\03\040\20 Minix-386 executable
|
||||
>28 long !0 not stripped
|
||||
# core dump file, from Bill Reynolds <bill@goshawk.lanl.gov>
|
||||
216 lelong 0421 Linux/i386 core file
|
||||
>220 string >\0 of '%s'
|
||||
@ -37,7 +46,7 @@
|
||||
#
|
||||
# Debian Packages, from Peter Tobias <tobias@server.et-inf.fho-emden.de>
|
||||
0 string 0.9
|
||||
>8 byte 0x0a Debian Binary Package
|
||||
>8 byte 0x0a old Debian Binary Package
|
||||
>>3 byte >0 \b, created by dpkg 0.9%c
|
||||
>>4 byte >0 pl%c
|
||||
# PSF fonts, from H. Peter Anvin <hpa@yggdrasil.com>
|
||||
@ -63,11 +72,30 @@
|
||||
>8 long >0 not stripped
|
||||
>8 long 0 stripped
|
||||
>23 leshort >0 - version %ld.
|
||||
# linux Kernel images version 1.3.80 - ?
|
||||
# from Axel Kohlmeyer <akohlmey@rincewind.chemie.uni-ulm.de>
|
||||
0 belong 0xb8c0078e Linux/x86 kernel image,
|
||||
#
|
||||
# Linux kernel boot images, from Albert Cahalan <acahalan@cs.uml.edu>
|
||||
# and others such as Axel Kohlmeyer <akohlmey@rincewind.chemie.uni-ulm.de>
|
||||
# and Nicolás Lichtmaier <nick@debian.org>
|
||||
# All known start with: b8 c0 07 8e d8 b8 00 90 8e c0 b9 00 01 29 f6 29
|
||||
514 string HdrS Linux kernel
|
||||
>518 leshort >0
|
||||
>>529 byte 0 zImage data,
|
||||
>>529 byte 1 bzImage data,
|
||||
>0x048c byte 0x31
|
||||
>>0x048c string x version %s
|
||||
>0x0493 byte 0x31
|
||||
>>0x0493 string x version %s
|
||||
#
|
||||
>0x048c byte 0x32
|
||||
>>0x048c string x version %s
|
||||
>0x0493 byte 0x32
|
||||
>>0x0493 string x version %s
|
||||
>0x04df byte 0x32
|
||||
>>0x04df string x version %s
|
||||
>0x04fb byte 0x32
|
||||
>>0x04fb string x version %s
|
||||
# This also matches new kernels, which were caught above by "HdrS".
|
||||
0 belong 0xb8c0078e Linux kernel
|
||||
>0x1e3 string Loading version 1.3.79 or older
|
||||
>0x1e9 string Loading from prehistoric times
|
||||
# LSM entries - Nicolás Lichtmaier <nick@feedback.net.ar>
|
||||
0 string Begin3 Linux Software Map entry text
|
21
contrib/file/Magdir/lisp
Normal file
21
contrib/file/Magdir/lisp
Normal file
@ -0,0 +1,21 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# lisp: file(1) magic for lisp programs
|
||||
#
|
||||
# various lisp types, from Daniel Quinlan (quinlan@yggdrasil.com)
|
||||
0 string ;; Lisp/Scheme program text
|
||||
# Emacs 18 - this is always correct, but not very magical.
|
||||
0 string \012( byte-compiled Emacs-Lisp program data
|
||||
# Emacs 19
|
||||
0 string ;ELC\023\000\000\000 byte-compiled Emacs-Lisp program data
|
||||
#
|
||||
# Files produced by CLISP Common Lisp From: Bruno Haible <haible@ilog.fr>
|
||||
0 string (SYSTEM::VERSION\040' CLISP byte-compiled Lisp program text
|
||||
0 long 0x70768BD2 CLISP memory image data
|
||||
0 long 0xD28B7670 CLISP memory image data, other endian
|
||||
# Files produced by GNU gettext
|
||||
0 long 0xDE120495 GNU-format message catalog data
|
||||
0 long 0x950412DE GNU-format message catalog data
|
||||
|
||||
#.com and .bin for MIT scheme
|
||||
0 string \372\372\372\372 MIT scheme (library?)
|
@ -1,12 +1,12 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# mach file description
|
||||
#
|
||||
0 belong 0xcafebabe mach-o fat file
|
||||
0 belong 0xcafebabe Mach-O fat file
|
||||
>4 belong 1 with 1 architecture
|
||||
>4 belong >1
|
||||
>>4 belong x with %ld architectures
|
||||
#
|
||||
0 belong 0xfeedface mach-o
|
||||
0 belong 0xfeedface Mach-O
|
||||
>12 belong 1 object
|
||||
>12 belong 2 executable
|
||||
>12 belong 3 shared library
|
||||
@ -22,6 +22,11 @@
|
||||
>4 belong 4 ns32032
|
||||
>4 belong 5 ns32332
|
||||
>4 belong 6 for m68k architecture
|
||||
# from NeXTstep 3.0 <mach/machine.h>
|
||||
# i.e. mc680x0_all, ignore
|
||||
# >>8 belong 1 (mc68030)
|
||||
>>8 belong 2 (mc68040)
|
||||
>>8 belong 3 (mc68030 only)
|
||||
>4 belong 7 i386
|
||||
>4 belong 8 mips
|
||||
>4 belong 9 ns32532
|
224
contrib/file/Magdir/macintosh
Normal file
224
contrib/file/Magdir/macintosh
Normal file
@ -0,0 +1,224 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# macintosh description
|
||||
#
|
||||
# BinHex is the Macintosh ASCII-encoded file format (see also "apple")
|
||||
# Daniel Quinlan, quinlan@yggdrasil.com
|
||||
11 string must\ be\ converted\ with\ BinHex BinHex binary text
|
||||
>41 string x \b, version %.3s
|
||||
|
||||
# Stuffit archives are the de facto standard of compression for Macintosh
|
||||
# files obtained from most archives. (franklsm@tuns.ca)
|
||||
0 string SIT! StuffIt Archive (data)
|
||||
>2 string x : %s
|
||||
0 string SITD StuffIt Deluxe (data)
|
||||
>2 string x : %s
|
||||
0 string Seg StuffIt Deluxe Segment (data)
|
||||
>2 string x : %s
|
||||
|
||||
# Macintosh Applications and Installation binaries (franklsm@tuns.ca)
|
||||
0 string APPL Macintosh Application (data)
|
||||
>2 string x \b: %s
|
||||
|
||||
# Macintosh System files (franklsm@tuns.ca)
|
||||
0 string zsys Macintosh System File (data)
|
||||
0 string FNDR Macintosh Finder (data)
|
||||
0 string libr Macintosh Library (data)
|
||||
>2 string x : %s
|
||||
0 string shlb Macintosh Shared Library (data)
|
||||
>2 string x : %s
|
||||
0 string cdev Macintosh Control Panel (data)
|
||||
>2 string x : %s
|
||||
0 string INIT Macintosh Extension (data)
|
||||
>2 string x : %s
|
||||
0 string FFIL Macintosh Truetype Font (data)
|
||||
>2 string x : %s
|
||||
0 string LWFN Macintosh Postscript Font (data)
|
||||
>2 string x : %s
|
||||
|
||||
# Additional Macintosh Files (franklsm@tuns.ca)
|
||||
0 string PACT Macintosh Compact Pro Archive (data)
|
||||
>2 string x : %s
|
||||
0 string ttro Macintosh TeachText File (data)
|
||||
>2 string x : %s
|
||||
0 string TEXT Macintosh TeachText File (data)
|
||||
>2 string x : %s
|
||||
0 string PDF Macintosh PDF File (data)
|
||||
>2 string x : %s
|
||||
|
||||
# MacBinary format (Eric Fischer, enf@pobox.com)
|
||||
#
|
||||
# Unfortunately MacBinary doesn't really have a magic number prior
|
||||
# to the MacBinary III format. The checksum is really the way to
|
||||
# do it, but the magic file format isn't up to the challenge.
|
||||
#
|
||||
# 0 byte 0
|
||||
# 1 byte # filename length
|
||||
# 2 string # filename
|
||||
# 65 string # file type
|
||||
# 69 string # file creator
|
||||
# 73 byte # Finder flags
|
||||
# 74 byte 0
|
||||
# 75 beshort # vertical posn in window
|
||||
# 77 beshort # horiz posn in window
|
||||
# 79 beshort # window or folder ID
|
||||
# 81 byte # protected?
|
||||
# 82 byte 0
|
||||
# 83 belong # length of data segment
|
||||
# 87 belong # length of resource segment
|
||||
# 91 belong # file creation date
|
||||
# 95 belong # file modification date
|
||||
# 99 beshort # length of comment after resource
|
||||
# 101 byte # new Finder flags
|
||||
# 102 string mBIN # (only in MacBinary III)
|
||||
# 106 byte # char. code of file name
|
||||
# 107 byte # still more Finder flags
|
||||
# 116 belong # total file length
|
||||
# 120 beshort # length of add'l header
|
||||
# 122 byte 129 # for MacBinary II
|
||||
# 122 byte 130 # for MacBinary III
|
||||
# 123 byte 129 # minimum version that can read fmt
|
||||
# 124 beshort # checksum
|
||||
#
|
||||
# This attempts to use the version numbers as a magic number, requiring
|
||||
# that the first one be 0x80, 0x81, 0x82, or 0x83, and that the second
|
||||
# be 0x81. This works for the files I have, but maybe not for everyone's.
|
||||
|
||||
122 beshort&0xFCFF 0x8081 Macintosh MacBinary data
|
||||
|
||||
# MacBinary I doesn't have the version number field at all, but MacBinary II
|
||||
# has been in use since 1987 so I hope there aren't many really old files
|
||||
# floating around that this will miss. The original spec calls for using
|
||||
# the nulls in 0, 74, and 82 as the magic number.
|
||||
#
|
||||
# Another possibility, that would also work for MacBinary I, is to use
|
||||
# the assumption that 65-72 will all be ASCII (0x20-0x7F), that 73 will
|
||||
# have bits 1 (changed), 2 (busy), 3 (bozo), and 6 (invisible) unset,
|
||||
# and that 74 will be 0. So something like
|
||||
#
|
||||
# 71 belong&0x80804EFF 0x00000000 Macintosh MacBinary data
|
||||
#
|
||||
# >73 byte&0x01 0x01 \b, inited
|
||||
# >73 byte&0x02 0x02 \b, changed
|
||||
# >73 byte&0x04 0x04 \b, busy
|
||||
# >73 byte&0x08 0x08 \b, bozo
|
||||
# >73 byte&0x10 0x10 \b, system
|
||||
# >73 byte&0x10 0x20 \b, bundle
|
||||
# >73 byte&0x10 0x40 \b, invisible
|
||||
# >73 byte&0x10 0x80 \b, locked
|
||||
|
||||
>65 string x \b, type "%4.4s"
|
||||
|
||||
>65 string 8BIM (PhotoShop)
|
||||
>65 string ALB3 (PageMaker 3)
|
||||
>65 string ALB4 (PageMaker 4)
|
||||
>65 string ALT3 (PageMaker 3)
|
||||
>65 string APPL (application)
|
||||
>65 string AWWP (AppleWorks word processor)
|
||||
>65 string CIRC (simulated circuit)
|
||||
>65 string DRWG (MacDraw)
|
||||
>65 string EPSF (Encapsulated PostScript)
|
||||
>65 string FFIL (font suitcase)
|
||||
>65 string FKEY (function key)
|
||||
>65 string FNDR (Macintosh Finder)
|
||||
>65 string GIFf (GIF image)
|
||||
>65 string Gzip (GNU gzip)
|
||||
>65 string INIT (system extension)
|
||||
>65 string LIB\ (library)
|
||||
>65 string LWFN (PostScript font)
|
||||
>65 string MSBC (Microsoft BASIC)
|
||||
>65 string PACT (Compact Pro archive)
|
||||
>65 string PDF\ (Portable Document Format)
|
||||
>65 string PICT (picture)
|
||||
>65 string PNTG (MacPaint picture)
|
||||
>65 string PREF (preferences)
|
||||
>65 string PROJ (Think C project)
|
||||
>65 string QPRJ (Think Pascal project)
|
||||
>65 string SCFL (Defender scores)
|
||||
>65 string SCRN (startup screen)
|
||||
>65 string SITD (StuffIt Deluxe)
|
||||
>65 string SPn3 (SuperPaint)
|
||||
>65 string STAK (HyperCard stack)
|
||||
>65 string Seg\ (StuffIt segment)
|
||||
>65 string TARF (Unix tar archive)
|
||||
>65 string TEXT (ASCII)
|
||||
>65 string TIFF (TIFF image)
|
||||
>65 string TOVF (Eudora table of contents)
|
||||
>65 string WDBN (Microsoft Word word processor)
|
||||
>65 string WORD (MacWrite word processor)
|
||||
>65 string XLS\ (Microsoft Excel)
|
||||
>65 string ZIVM (compress (.Z))
|
||||
>65 string ZSYS (Pre-System 7 system file)
|
||||
>65 string acf3 (Aldus FreeHand)
|
||||
>65 string cdev (control panel)
|
||||
>65 string dfil (Desk Acessory suitcase)
|
||||
>65 string libr (library)
|
||||
>65 string nX^d (WriteNow word processor)
|
||||
>65 string nX^w (WriteNow dictionary)
|
||||
>65 string rsrc (resource)
|
||||
>65 string scbk (Scrapbook)
|
||||
>65 string shlb (shared library)
|
||||
>65 string ttro (SimpleText read-only)
|
||||
>65 string zsys (system file)
|
||||
|
||||
>69 string x \b, creator "%4.4s"
|
||||
|
||||
# Somewhere, Apple has a repository of registered Creator IDs. These are
|
||||
# just the ones that I happened to have files from and was able to identify.
|
||||
|
||||
>69 string 8BIM (Adobe Photoshop)
|
||||
>69 string ALD3 (PageMaker 3)
|
||||
>69 string ALD4 (PageMaker 4)
|
||||
>69 string ALFA (Alpha editor)
|
||||
>69 string APLS (Apple Scanner)
|
||||
>69 string APSC (Apple Scanner)
|
||||
>69 string BRKL (Brickles)
|
||||
>69 string BTFT (BitFont)
|
||||
>69 string CCL2 (Common Lisp 2)
|
||||
>69 string CCL\ (Common Lisp)
|
||||
>69 string CDmo (The Talking Moose)
|
||||
>69 string CPCT (Compact Pro)
|
||||
>69 string CSOm (Eudora)
|
||||
>69 string DMOV (Font/DA Mover)
|
||||
>69 string DSIM (DigSim)
|
||||
>69 string EDIT (Macintosh Edit)
|
||||
>69 string ERIK (Macintosh Finder)
|
||||
>69 string EXTR (self-extracting archive)
|
||||
>69 string Gzip (GNU gzip)
|
||||
>69 string KAHL (Think C)
|
||||
>69 string LWFU (LaserWriter Utility)
|
||||
>69 string LZIV (compress)
|
||||
>69 string MACA (MacWrite)
|
||||
>69 string MACS (Macintosh operating system)
|
||||
>69 string MAcK (MacKnowledge terminal emulator)
|
||||
>69 string MLND (Defender)
|
||||
>69 string MPNT (MacPaint)
|
||||
>69 string MSBB (Microsoft BASIC (binary))
|
||||
>69 string MSWD (Microsoft Word)
|
||||
>69 string NCSA (NCSA Telnet)
|
||||
>69 string PJMM (Think Pascal)
|
||||
>69 string PSAL (Hunt the Wumpus)
|
||||
>69 string PSI2 (Apple File Exchange)
|
||||
>69 string R*ch (BBEdit)
|
||||
>69 string RMKR (Resource Maker)
|
||||
>69 string RSED (Resource Editor)
|
||||
>69 string Rich (BBEdit)
|
||||
>69 string SIT! (StuffIt)
|
||||
>69 string SPNT (SuperPaint)
|
||||
>69 string Unix (NeXT Mac filesystem)
|
||||
>69 string VIM! (Vim editor)
|
||||
>69 string WILD (HyperCard)
|
||||
>69 string XCEL (Microsoft Excel)
|
||||
>69 string aCa2 (Fontographer)
|
||||
>69 string aca3 (Aldus FreeHand)
|
||||
>69 string dosa (Macintosh MS-DOS file system)
|
||||
>69 string movr (Font/DA Mover)
|
||||
>69 string nX^n (WriteNow)
|
||||
>69 string pdos (Apple ProDOS file system)
|
||||
>69 string scbk (Scrapbook)
|
||||
>69 string ttxt (SimpleText)
|
||||
>69 string ufox (Foreign File Access)
|
||||
|
||||
# Just in case...
|
||||
|
||||
102 string mBIN MacBinary III data with surprising version number
|
@ -18,4 +18,7 @@
|
||||
0 string BABYL Emacs RMAIL text
|
||||
0 string Received: RFC 822 mail text
|
||||
0 string MIME-Version: MIME entity text
|
||||
0 string Content- MIME entity text
|
||||
#0 string Content- MIME entity text
|
||||
|
||||
# TNEF files...
|
||||
0 lelong 0x223E9F78 Transport Neutral Encapsulation Format
|
57
contrib/file/Magdir/maple
Normal file
57
contrib/file/Magdir/maple
Normal file
@ -0,0 +1,57 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# maple: file(1) magic for maple files
|
||||
# "H. Nanosecond" <aldomel@ix.netcom.com>
|
||||
# Maple V release 4, a multi-purpose math program
|
||||
#
|
||||
|
||||
# maple library .lib
|
||||
0 string \000MVR4\nI MapleVr4 library
|
||||
|
||||
# .ind
|
||||
# no magic for these :-(
|
||||
# they are compiled indexes for maple files
|
||||
|
||||
# .hdb
|
||||
0 string \000\004\000\000 Maple help database
|
||||
|
||||
# .mhp
|
||||
# this has the form <PACKAGE=name>
|
||||
0 string \<PACKAGE= Maple help file
|
||||
0 string \<HELP\ NAME= Maple help file
|
||||
0 string \n\<HELP\ NAME= Maple help file with extra carriage return at start (yuck)
|
||||
0 string #\ Newton Maple help file, old style
|
||||
0 string #\ daub Maple help file, old style
|
||||
0 string #=========== Maple help file, old style
|
||||
|
||||
# .mws
|
||||
0 string \000\000\001\044\000\221 Maple worksheet
|
||||
#this is anomalous
|
||||
0 string WriteNow\000\002\000\001\000\000\000\000\100\000\000\000\000\000 Maple worksheet, but weird
|
||||
# this has the form {VERSION 2 3 "IBM INTEL NT" "2.3" }\n
|
||||
# that is {VERSION major_version miunor_version computer_type version_string}
|
||||
0 string {VERSION\ Maple worksheet
|
||||
>9 string >\0 version %.1s.
|
||||
>>10 string
|
||||
>>>11 string >\0 %.1s
|
||||
|
||||
# .mps
|
||||
0 string \0\0\001$ Maple something
|
||||
# from byte 4 it is either 'nul E' or 'soh R'
|
||||
# I think 'nul E' means a file that was saved as a different name
|
||||
# a sort of revision marking
|
||||
# 'soh R' means new
|
||||
>4 string \000\105 An old revision
|
||||
>4 string \001\122 The latest save
|
||||
|
||||
# .mpl
|
||||
# some of these are the same as .mps above
|
||||
#0000000 000 000 001 044 000 105 same as .mps
|
||||
#0000000 000 000 001 044 001 122 same as .mps
|
||||
|
||||
0 string #\n##\ <SHAREFILE= Maple something
|
||||
0 string \n#\n##\ <SHAREFILE= Maple something
|
||||
0 string ##\ <SHAREFILE= Maple something
|
||||
0 string #\r##\ <SHAREFILE= Maple something
|
||||
0 string \r#\r##\ <SHAREFILE= Maple something
|
||||
0 string #\ \r##\ <DESCRIBE> Maple something anomalous.
|
59
contrib/file/Magdir/mathematica
Normal file
59
contrib/file/Magdir/mathematica
Normal file
@ -0,0 +1,59 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# mathematica: file(1) magic for mathematica files
|
||||
# "H. Nanosecond" <aldomel@ix.netcom.com>
|
||||
# Mathematica a multi-purpose math program
|
||||
# versions 2.2 and 3.0
|
||||
|
||||
#mathematica .mb
|
||||
0 string \064\024\012\000\035\000\000\000 Mathematica version 2 notebook
|
||||
0 string \064\024\011\000\035\000\000\000 Mathematica version 2 notebook
|
||||
|
||||
# .ma
|
||||
# multiple possibilites:
|
||||
|
||||
0 string (*^\n\n::[\011frontEndVersion\ =\ Mathematica notebook
|
||||
#>41 string >\0 %s
|
||||
|
||||
#0 string (*^\n\n::[\011palette Mathematica notebook version 2.x
|
||||
|
||||
#0 string (*^\n\n::[\011Information Mathematica notebook version 2.x
|
||||
#>675 string >\0 %s #doesn't work well
|
||||
|
||||
# there may be 'cr' instread of 'nl' in some does this matter?
|
||||
|
||||
# generic:
|
||||
0 string (*^\r\r::[\011 Mathematica notebook version 2.x
|
||||
0 string \(\*\^\r\n\r\n\:\:\[\011 Mathematica notebook version 2.x
|
||||
0 string (*^\015 Mathematica notebook version 2.x
|
||||
0 string (*^\n\r\n\r::[\011 Mathematica notebook version 2.x
|
||||
0 string (*^\r::[\011 Mathematica notebook version 2.x
|
||||
0 string (*^\r\n::[\011 Mathematica notebook version 2.x
|
||||
0 string (*^\n\n::[\011 Mathematica notebook version 2.x
|
||||
0 string (*^\n::[\011 Mathematica notebook version 2.x
|
||||
|
||||
|
||||
# Mathematica .mx files
|
||||
|
||||
#0 string (*This\ is\ a\ Mathematica\ binary\ dump\ file.\ It\ can\ be\ loaded\ with\ Get.*) Mathematica binary file
|
||||
0 string (*This\ is\ a\ Mathematica\ binary\ Mathematica binary file
|
||||
#>71 string \000\010\010\010\010\000\000\000\000\000\000\010\100\010\000\000\000
|
||||
# >71... is optional
|
||||
>88 string >\0 from %s
|
||||
|
||||
|
||||
# Mathematica files PBF:
|
||||
# 115 115 101 120 102 106 000 001 000 000 000 203 000 001 000
|
||||
0 string MMAPBF\000\001\000\000\000\203\000\001\000 Mathematica PBF (fonts I think)
|
||||
|
||||
# .ml files These are menu resources I think
|
||||
# these start with "[0-9][0-9][0-9]\ A~[0-9][0-9][0-9]\
|
||||
# how to put that into a magic rule?
|
||||
4 string \ A~ MAthematica .ml file
|
||||
|
||||
# .nb files
|
||||
#too long 0 string (***********************************************************************\n\n\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ Mathematica-Compatible Notebook Mathematica 3.0 notebook
|
||||
0 string (*********************** Mathematica 3.0 notebook
|
||||
|
||||
# other (* matches it is a comment start in these langs
|
||||
0 string (* Mathematica, or Pascal, Modula-2 or 3 code
|
31
contrib/file/Magdir/mcrypt
Normal file
31
contrib/file/Magdir/mcrypt
Normal file
@ -0,0 +1,31 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# Mavroyanopoulos Nikos <nmav@hellug.gr>
|
||||
# mcrypt: file(1) magic for mcrypt 2.2.x;
|
||||
0 string \0m\2 mcrypt 2.2 encrypted data,
|
||||
>3 byte 0 algorithm: blowfish-448,
|
||||
>3 byte 1 algorithm: DES,
|
||||
>3 byte 2 algorithm: 3DES,
|
||||
>3 byte 3 algorithm: 3-WAY,
|
||||
>3 byte 4 algorithm: GOST,
|
||||
>3 byte 6 algorithm: SAFER-SK64,
|
||||
>3 byte 7 algorithm: SAFER-SK128,
|
||||
>3 byte 8 algorithm: CAST-128,
|
||||
>3 byte 9 algorithm: xTEA,
|
||||
>3 byte 10 algorithm: TWOFISH-128,
|
||||
>3 byte 11 algorithm: RC2,
|
||||
>3 byte 12 algorithm: TWOFISH-192,
|
||||
>3 byte 13 algorithm: TWOFISH-256,
|
||||
>3 byte 14 algorithm: blowfish-128,
|
||||
>3 byte 15 algorithm: blowfish-192,
|
||||
>3 byte 16 algorithm: blowfish-256,
|
||||
>3 byte 100 algorithm: RC6,
|
||||
>3 byte 101 algorithm: IDEA,
|
||||
>4 byte 0 mode: CBC,
|
||||
>4 byte 1 mode: ECB,
|
||||
>4 byte 2 mode: CFB,
|
||||
>4 byte 3 mode: OFB,
|
||||
>4 byte 4 mode: nOFB,
|
||||
>5 byte 0 keymode: 8bit
|
||||
>5 byte 1 keymode: 4bit
|
||||
>5 byte 2 keymode: SHA-1 hash
|
||||
>5 byte 3 keymode: MD5 hash
|
7
contrib/file/Magdir/mime
Normal file
7
contrib/file/Magdir/mime
Normal file
@ -0,0 +1,7 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# mime: file(1) magic for MIME encoded files
|
||||
#
|
||||
0 string Content-Type:\
|
||||
>14 string >\0 %s
|
||||
0 string Content-Type:
|
||||
>13 string >\0 %s
|
33
contrib/file/Magdir/modem
Normal file
33
contrib/file/Magdir/modem
Normal file
@ -0,0 +1,33 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# modem: file(1) magic for modem programs
|
||||
#
|
||||
# From: Florian La Roche <florian@knorke.saar.de>
|
||||
4 string Research, Digifax-G3-File
|
||||
>29 byte 1 , fine resolution
|
||||
>29 byte 0 , normal resolution
|
||||
|
||||
0 short 0x0100 raw G3 data, byte-padded
|
||||
0 short 0x1400 raw G3 data
|
||||
#
|
||||
# Magic data for vgetty voice formats
|
||||
# (Martin Seine & Marc Eberhard)
|
||||
|
||||
#
|
||||
# raw modem data version 1
|
||||
#
|
||||
0 string RMD1 raw modem data
|
||||
>4 string >\0 (%s /
|
||||
>20 short >0 compression type 0x%04x)
|
||||
|
||||
#
|
||||
# portable voice format 1
|
||||
#
|
||||
0 string PVF1\n portable voice format
|
||||
>5 string >\0 (binary %s)
|
||||
|
||||
#
|
||||
# portable voice format 2
|
||||
#
|
||||
0 string PVF2\n portable voice format
|
||||
>5 string >\0 (ascii %s)
|
||||
|
268
contrib/file/Magdir/msdos
Normal file
268
contrib/file/Magdir/msdos
Normal file
@ -0,0 +1,268 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# msdos: file(1) magic for MS-DOS files
|
||||
#
|
||||
|
||||
# .BAT files (Daniel Quinlan, quinlan@yggdrasil.com)
|
||||
0 string @echo\ off MS-DOS batch file text
|
||||
|
||||
# XXX - according to Microsoft's spec, at an offset of 0x3c in a
|
||||
# PE-format executable is the offset in the file of the PE header;
|
||||
# unfortunately, that's a little-endian offset, and there's no way
|
||||
# to specify an indirect offset with a specified byte order.
|
||||
# So, for now, we assume the standard MS-DOS stub, which puts the
|
||||
# PE header at 0x80 = 128.
|
||||
#
|
||||
# Required OS version and subsystem version were 4.0 on some NT 3.51
|
||||
# executables built with Visual C++ 4.0, so it's not clear that
|
||||
# they're interesting. The user version was 0.0, but there's
|
||||
# probably some linker directive to set it. The linker version was
|
||||
# 3.0, except for one ".exe" which had it as 4.20 (same damn linker!).
|
||||
#
|
||||
128 string PE\0\0 MS Windows PE
|
||||
>150 leshort&0x0100 >0 32-bit
|
||||
>132 leshort 0x0 unknown processor
|
||||
>132 leshort 0x14c Intel 80386
|
||||
>132 leshort 0x166 MIPS R4000
|
||||
>132 leshort 0x184 Alpha
|
||||
>132 leshort 0x268 Motorola 68000
|
||||
>132 leshort 0x1f0 PowerPC
|
||||
>132 leshort 0x290 PA-RISC
|
||||
>148 leshort >27
|
||||
>>220 leshort 0 unknown subsystem
|
||||
>>220 leshort 1 native
|
||||
>>220 leshort 2 GUI
|
||||
>>220 leshort 3 console
|
||||
>>220 leshort 7 POSIX
|
||||
>150 leshort&0x2000 =0 executable
|
||||
#>>136 ledate x stamp %s,
|
||||
>>150 leshort&0x0001 >0 not relocatable
|
||||
#>>150 leshort&0x0004 =0 with line numbers,
|
||||
#>>150 leshort&0x0008 =0 with local symbols,
|
||||
#>>150 leshort&0x0200 =0 with debug symbols,
|
||||
>>150 leshort&0x1000 >0 system file
|
||||
#>>148 leshort >0
|
||||
#>>>154 byte x linker %d
|
||||
#>>>155 byte x \b.%d,
|
||||
#>>148 leshort >27
|
||||
#>>>192 leshort x requires OS %d
|
||||
#>>>194 leshort x \b.%d,
|
||||
#>>>196 leshort x user version %d
|
||||
#>>>198 leshort x \b.%d,
|
||||
#>>>200 leshort x subsystem version %d
|
||||
#>>>202 leshort x \b.%d,
|
||||
>150 leshort&0x2000 >0 DLL
|
||||
#>>136 ledate x stamp %s,
|
||||
>>150 leshort&0x0001 >0 not relocatable
|
||||
#>>150 leshort&0x0004 =0 with line numbers,
|
||||
#>>150 leshort&0x0008 =0 with local symbols,
|
||||
#>>150 leshort&0x0200 =0 with debug symbols,
|
||||
>>150 leshort&0x1000 >0 system file
|
||||
#>>148 leshort >0
|
||||
#>>>154 byte x linker %d
|
||||
#>>>155 byte x \b.%d,
|
||||
#>>148 leshort >27
|
||||
#>>>192 leshort x requires OS %d
|
||||
#>>>194 leshort x \b.%d,
|
||||
#>>>196 leshort x user version %d
|
||||
#>>>198 leshort x \b.%d,
|
||||
#>>>200 leshort x subsystem version %d
|
||||
#>>>202 leshort x \b.%d,
|
||||
0 leshort 0x14c MS Windows COFF Intel 80386 object file
|
||||
#>4 ledate x stamp %s
|
||||
0 leshort 0x166 MS Windows COFF MIPS R4000 object file
|
||||
#>4 ledate x stamp %s
|
||||
0 leshort 0x184 MS Windows COFF Alpha object file
|
||||
#>4 ledate x stamp %s
|
||||
0 leshort 0x268 MS Windows COFF Motorola 68000 object file
|
||||
#>4 ledate x stamp %s
|
||||
0 leshort 0x1f0 MS Windows COFF PowerPC object file
|
||||
#>4 ledate x stamp %s
|
||||
0 leshort 0x290 MS Windows COFF PA-RISC object file
|
||||
#>4 ledate x stamp %s
|
||||
|
||||
# .EXE formats (Greg Roelofs, newt@uchicago.edu)
|
||||
#
|
||||
0 string MZ MS-DOS executable (EXE)
|
||||
>24 string @ \b, OS/2 or MS Windows
|
||||
>>0xe7 string LH/2\ Self-Extract \b, %s
|
||||
>>0xe9 string PKSFX2 \b, %s
|
||||
>>122 string Windows\ self-extracting\ ZIP \b, %s
|
||||
>0x1c string RJSX\xff\xff \b, ARJ SFX
|
||||
>0x1c string diet\xf9\x9c \b, diet compressed
|
||||
>0x1e string Copyright\ 1989-1990\ PKWARE\ Inc. \b, PKSFX
|
||||
# JM: 0x1e "PKLITE Copr. 1990-92 PKWARE Inc. All Rights Reserved\7\0\0\0"
|
||||
>0x1e string PKLITE\ Copr. \b, %.6s compressed
|
||||
>0x24 string LHa's\ SFX \b, %.15s
|
||||
>0x24 string LHA's\ SFX \b, %.15s
|
||||
>1638 string -lh5- \b, LHa SFX archive v2.13S
|
||||
>7195 string Rar! \b, RAR self-extracting archive
|
||||
#
|
||||
# [GRR 950118: file 3.15 has a buffer-size limitation; offsets bigger than
|
||||
# 8161 bytes are ignored. To make the following entries work, increase
|
||||
# HOWMANY in file.h to 32K at least, and maybe to 70K or more for OS/2,
|
||||
# NT/Win32 and VMS.]
|
||||
# [GRR: some company sells a self-extractor/displayer for image data(!)]
|
||||
#
|
||||
>11696 string PK\003\004 \b, PKZIP SFX archive v1.1
|
||||
>13297 string PK\003\004 \b, PKZIP SFX archive v1.93a
|
||||
>15588 string PK\003\004 \b, PKZIP2 SFX archive v1.09
|
||||
>15770 string PK\003\004 \b, PKZIP SFX archive v2.04g
|
||||
>28374 string PK\003\004 \b, PKZIP2 SFX archive v1.02
|
||||
#
|
||||
# Info-ZIP self-extractors
|
||||
# these are the DOS versions:
|
||||
>25115 string PK\003\004 \b, Info-ZIP SFX archive v5.12
|
||||
>26331 string PK\003\004 \b, Info-ZIP SFX archive v5.12 w/decryption
|
||||
# these are the OS/2 versions (OS/2 is flagged above):
|
||||
>47031 string PK\003\004 \b, Info-ZIP SFX archive v5.12
|
||||
>49845 string PK\003\004 \b, Info-ZIP SFX archive v5.12 w/decryption
|
||||
# this is the NT/Win32 version:
|
||||
>69120 string PK\003\004 \b, Info-ZIP NT SFX archive v5.12 w/decryption
|
||||
#
|
||||
# TELVOX Teleinformatica CODEC self-extractor for OS/2:
|
||||
>49801 string \x79\xff\x80\xff\x76\xff \b, CODEC archive v3.21
|
||||
>>49824 leshort =1 \b, 1 file
|
||||
>>49824 leshort >1 \b, %u files
|
||||
|
||||
# .COM formats (Daniel Quinlan, quinlan@yggdrasil.com)
|
||||
# Uncommenting only the first two lines will cover about 2/3 of COM files,
|
||||
# but it isn't feasible to match all COM files since there must be at least
|
||||
# two dozen different one-byte "magics".
|
||||
#0 byte 0xe9 MS-DOS executable (COM)
|
||||
#>6 string SFX\ of\ LHarc (%s)
|
||||
#0 byte 0x8c MS-DOS executable (COM)
|
||||
# 0xeb conflicts with "sequent" magic
|
||||
#0 byte 0xeb MS-DOS executable (COM)
|
||||
#0 byte 0xb8 MS-DOS executable (COM)
|
||||
|
||||
# miscellaneous formats
|
||||
0 string LZ MS-DOS executable (built-in)
|
||||
#0 byte 0xf0 MS-DOS program library data
|
||||
#
|
||||
|
||||
#
|
||||
# Windows NT Registry files.
|
||||
#
|
||||
0 string regf Windows NT Registry file
|
||||
|
||||
# Popular applications
|
||||
2080 string Microsoft\ Word\ 6.0\ Document %s
|
||||
2080 string Documento\ Microsoft\ Word\ 6 Spanish Microsoft Word 6 document data
|
||||
# Pawel Wiecek <coven@i17linuxb.ists.pwr.wroc.pl> (for polish Word)
|
||||
2112 string MSWordDoc Microsoft Word document data
|
||||
#
|
||||
0 belong 0x31be0000 Microsoft Word Document
|
||||
#
|
||||
0 string PO^Q` Microsoft Word 6.0 Document
|
||||
#
|
||||
0 string \376\067\0\043 Microsoft Office Document
|
||||
0 string \320\317\021\340\241\261 Microsoft Office Document
|
||||
0 string \333\245-\0\0\0 Microsoft Office Document
|
||||
#
|
||||
2080 string Microsoft\ Excel\ 5.0\ Worksheet %s
|
||||
#
|
||||
# Pawel Wiecek <coven@i17linuxb.ists.pwr.wroc.pl> (for polish Excel)
|
||||
2114 string Biff5 Microsoft Excel 5.0 Worksheet
|
||||
#
|
||||
0 belong 0x00001a00 Lotus 1-2-3
|
||||
>4 belong 0x00100400 wk3 document data
|
||||
>4 belong 0x02100400 wk4 document data
|
||||
>4 belong 0x07800100 fm3 or fmb document data
|
||||
>4 belong 0x07800000 fm3 or fmb document data
|
||||
#
|
||||
0 belong 0x00000200 Lotus 1-2-3
|
||||
>4 belong 0x06040600 wk1 document data
|
||||
>4 belong 0x06800200 fmt document data
|
||||
|
||||
# WordPerfect documents - Trevor Johnson <trevor@jpj.net>
|
||||
#
|
||||
1 string WPC WordPerfect document
|
||||
|
||||
# Help files
|
||||
0 string ?_\3\0 MS Windows Help Data
|
||||
|
||||
# Microsoft CAB distribution format Dale Worley <root@dworley.ny.mediaone.net>
|
||||
0 string MSCF\000\000\000\000 Microsoft CAB file
|
||||
|
||||
# DeIsL1.isu what this is I don't know
|
||||
0 string \161\250\000\000\001\002 DeIsL1.isu whatever that is
|
||||
|
||||
# Winamp .avs
|
||||
#0 string Nullsoft\ AVS\ Preset\ \060\056\061\032 A plug in for Winamp ms-windows Freeware media player
|
||||
0 string Nullsoft\ AVS\ Preset\ Winamp plug in
|
||||
|
||||
# Hyper terminal:
|
||||
0 string HyperTerminal\ hyperterm
|
||||
>15 string 1.0\ --\ HyperTerminal\ data\ file MS-windows Hyperterminal
|
||||
|
||||
# Windows Metafont .WMF
|
||||
0 string \327\315\306\232\000\000\000\000\000\000 ms-windows metafont .wmf
|
||||
|
||||
#tz3 files whatever that is (MS Works files)
|
||||
0 string \003\001\001\004\070\001\000\000 tz3 ms-works file
|
||||
0 string \003\002\001\004\070\001\000\000 tz3 ms-works file
|
||||
0 string \003\003\001\004\070\001\000\000 tz3 ms-works file
|
||||
|
||||
# PGP sig files .sig
|
||||
#0 string \211\000\077\003\005\000\063\237\127 065 to \027\266\151\064\005\045\101\233\021\002 PGP sig
|
||||
0 string \211\000\077\003\005\000\063\237\127\065\027\266\151\064\005\045\101\233\021\002 PGP sig
|
||||
0 string \211\000\077\003\005\000\063\237\127\066\027\266\151\064\005\045\101\233\021\002 PGP sig
|
||||
0 string \211\000\077\003\005\000\063\237\127\067\027\266\151\064\005\045\101\233\021\002 PGP sig
|
||||
0 string \211\000\077\003\005\000\063\237\127\070\027\266\151\064\005\045\101\233\021\002 PGP sig
|
||||
0 string \211\000\077\003\005\000\063\237\127\071\027\266\151\064\005\045\101\233\021\002 PGP sig
|
||||
0 string \211\000\225\003\005\000\062\122\207\304\100\345\042 PGP sig
|
||||
|
||||
# windows zips files .dmf
|
||||
0 string MDIF\032\000\010\000\000\000\372\046\100\175\001\000\001\036\001\000 Ms-windows special zipped file
|
||||
|
||||
|
||||
# Windows help file FTG FTS
|
||||
0 string \164\146\115\122\012\000\000\000\001\000\000\000 ms-windows help cache
|
||||
|
||||
# grp old windows 3.1 group files
|
||||
0 string \120\115\103\103 Ms-windows 3.1 group files
|
||||
|
||||
|
||||
# lnk files windows symlinks
|
||||
0 string \114\000\000\000\001\024\002\000\000\000\000\000\300\000\000\000\000\000\000\106 ms-Windows shortcut
|
||||
|
||||
#ico files
|
||||
0 string \000\000\001\000\001\000\040\040\020\000\000\000\000\000\350\002\000\000 Icon for ms-windows
|
||||
0 string \000\000\001\000\004\000\040\040\020\000\000\000\000\000\350\002 Icon for ms-windows
|
||||
0 string \102\101\050\000\000\000\056\000\000\000\000\000\000\000 Icon for ms-windows
|
||||
0 string \000\000\001\000\002\000\040\040\010\000\000\000\000\000\350\002 Icon for ms-windows
|
||||
0 string \000\000\001\000\006\000\020\020\020\000\000\000\000\000\050\001 Icon for ms-windows
|
||||
0 string \000\000\001\000\002\000\020\020\020\000\000\000\000\000\050\001 Icon for ms-windows
|
||||
|
||||
|
||||
# True Type fonts currently misidentified as raw G3 data
|
||||
|
||||
0 string \000\001\000\000\000 MS-Windows true type font .ttf
|
||||
|
||||
|
||||
# .chr files
|
||||
0 string PK\010\010BGI Borland font
|
||||
>4 string >\0 %s
|
||||
# then there is a copyright notice
|
||||
|
||||
|
||||
# .bgi files
|
||||
0 string pk\010\010BGI Borland device
|
||||
>4 string >\0 %s
|
||||
# then there is a copyright notice
|
||||
|
||||
|
||||
# recycled/info the windows trash bin index
|
||||
9 string \000\000\000\030\001\000\000\000 ms-windows recycled bin info
|
||||
|
||||
|
||||
##### put in Either Magic/font or Magic/news
|
||||
# Acroread or something files wrongly identified as G3 .pfm
|
||||
# these have the form \000 \001 any? \002 \000 \000
|
||||
# or \000 \001 any? \022 \000 \000
|
||||
0 string \000\001 pfm?
|
||||
>3 string \022\000\000Copyright\ yes
|
||||
>3 string \002\000\000Copyright\ yes
|
||||
#>3 string >\0 oops, not a font file. Cancel that.
|
||||
#it clashes with ttf files so put it lower down.
|
44
contrib/file/Magdir/msvc
Normal file
44
contrib/file/Magdir/msvc
Normal file
@ -0,0 +1,44 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# msvc: file(1) magic for msvc
|
||||
# "H. Nanosecond" <aldomel@ix.netcom.com>
|
||||
# Microsoft visual C
|
||||
#
|
||||
# I have version 1.0
|
||||
|
||||
# .aps
|
||||
0 string HWB\000\377\001\000\000\000 Microsoft Visual C .APS file
|
||||
|
||||
# .ide
|
||||
#too long 0 string \102\157\162\154\141\156\144\040\103\053\053\040\120\162\157\152\145\143\164\040\106\151\154\145\012\000\032\000\002\000\262\000\272\276\372\316 MSVC .ide
|
||||
0 string \102\157\162\154\141\156\144\040\103\053\053\040\120\162\157 MSVC .ide
|
||||
|
||||
# .res
|
||||
0 string \000\000\000\000\040\000\000\000\377 MSVC .res
|
||||
0 string \377\003\000\377\001\000\020\020\350 MSVC .res
|
||||
0 string \377\003\000\377\001\000\060\020\350 MSVC .res
|
||||
|
||||
#.lib
|
||||
0 string \360\015\000\000 Microsoft Visual C library
|
||||
0 string \360\075\000\000 Microsoft Visual C library
|
||||
0 string \360\175\000\000 Microsoft Visual C library
|
||||
|
||||
#.pch
|
||||
0 string DTJPCH0\000\022\103\006\200 Microsoft Visual C .pch
|
||||
|
||||
# .pdb
|
||||
# too long 0 string Microsoft\ C/C++\ program\ database\
|
||||
0 string Microsoft\ C/C++\ MSVC program database
|
||||
>18 string program\ database\
|
||||
>33 string >\0 ver %s
|
||||
|
||||
#.sbr
|
||||
0 string \000\002\000\007\000 MSVC .sbr
|
||||
>5 string >\0 %s
|
||||
|
||||
#.bsc
|
||||
0 string \002\000\002\001 MSVC .bsc
|
||||
|
||||
#.wsp
|
||||
0 string 1.00\ .0000.0000\000\003 MSVC .wsp version 1.0000.0000
|
||||
# these seem to start with the version and contain menus
|
@ -30,6 +30,7 @@
|
||||
>16 lelong >0 not stripped
|
||||
0 belong&0377777777 041400507 NetBSD/i386 core
|
||||
>12 string >\0 from '%s'
|
||||
>32 lelong !0 (signal %d)
|
||||
|
||||
0 belong&0377777777 041600413 NetBSD/m68k demand paged
|
||||
>0 byte &0x80
|
||||
@ -51,6 +52,7 @@
|
||||
>16 belong >0 not stripped
|
||||
0 belong&0377777777 041600507 NetBSD/m68k core
|
||||
>12 string >\0 from '%s'
|
||||
>32 belong !0 (signal %d)
|
||||
|
||||
0 belong&0377777777 042000413 NetBSD/m68k4k demand paged
|
||||
>0 byte &0x80
|
||||
@ -72,6 +74,7 @@
|
||||
>16 belong >0 not stripped
|
||||
0 belong&0377777777 042000507 NetBSD/m68k4k core
|
||||
>12 string >\0 from '%s'
|
||||
>32 belong !0 (signal %d)
|
||||
|
||||
0 belong&0377777777 042200413 NetBSD/ns32532 demand paged
|
||||
>0 byte &0x80
|
||||
@ -93,6 +96,7 @@
|
||||
>16 lelong >0 not stripped
|
||||
0 belong&0377777777 042200507 NetBSD/ns32532 core
|
||||
>12 string >\0 from '%s'
|
||||
>32 lelong !0 (signal %d)
|
||||
|
||||
0 belong&0377777777 042400413 NetBSD/sparc demand paged
|
||||
>0 byte &0x80
|
||||
@ -114,6 +118,7 @@
|
||||
>16 belong >0 not stripped
|
||||
0 belong&0377777777 042400507 NetBSD/sparc core
|
||||
>12 string >\0 from '%s'
|
||||
>32 belong !0 (signal %d)
|
||||
|
||||
0 belong&0377777777 042600413 NetBSD/pmax demand paged
|
||||
>0 byte &0x80
|
||||
@ -135,36 +140,61 @@
|
||||
>16 lelong >0 not stripped
|
||||
0 belong&0377777777 042600507 NetBSD/pmax core
|
||||
>12 string >\0 from '%s'
|
||||
>32 lelong !0 (signal %d)
|
||||
|
||||
0 belong&0377777777 043000413 NetBSD/vax demand paged
|
||||
0 belong&0377777777 043000413 NetBSD/vax 1k demand paged
|
||||
>0 byte &0x80
|
||||
>>20 lelong <4096 shared library
|
||||
>>20 lelong =4096 dynamically linked executable
|
||||
>>20 lelong >4096 dynamically linked executable
|
||||
>0 byte ^0x80 executable
|
||||
>16 lelong >0 not stripped
|
||||
0 belong&0377777777 043000410 NetBSD/vax pure
|
||||
0 belong&0377777777 043000410 NetBSD/vax 1k pure
|
||||
>0 byte &0x80 dynamically linked executable
|
||||
>0 byte ^0x80 executable
|
||||
>16 lelong >0 not stripped
|
||||
0 belong&0377777777 043000407 NetBSD/vax
|
||||
0 belong&0377777777 043000407 NetBSD/vax 1k
|
||||
>0 byte &0x80 dynamically linked executable
|
||||
>0 byte ^0x80
|
||||
>>0 byte &0x40 position independent
|
||||
>>20 lelong !0 executable
|
||||
>>20 lelong =0 object file
|
||||
>16 lelong >0 not stripped
|
||||
0 belong&0377777777 043000507 NetBSD/vax core
|
||||
0 belong&0377777777 043000507 NetBSD/vax 1k core
|
||||
>12 string >\0 from '%s'
|
||||
>32 lelong !0 (signal %d)
|
||||
|
||||
0 belong&0377777777 045400413 NetBSD/vax 4k demand paged
|
||||
>0 byte &0x80
|
||||
>>20 lelong <4096 shared library
|
||||
>>20 lelong =4096 dynamically linked executable
|
||||
>>20 lelong >4096 dynamically linked executable
|
||||
>0 byte ^0x80 executable
|
||||
>16 lelong >0 not stripped
|
||||
0 belong&0377777777 045400410 NetBSD/vax 4k pure
|
||||
>0 byte &0x80 dynamically linked executable
|
||||
>0 byte ^0x80 executable
|
||||
>16 lelong >0 not stripped
|
||||
0 belong&0377777777 045400407 NetBSD/vax 4k
|
||||
>0 byte &0x80 dynamically linked executable
|
||||
>0 byte ^0x80
|
||||
>>0 byte &0x40 position independent
|
||||
>>20 lelong !0 executable
|
||||
>>20 lelong =0 object file
|
||||
>16 lelong >0 not stripped
|
||||
0 belong&0377777777 045400507 NetBSD/vax 4k core
|
||||
>12 string >\0 from '%s'
|
||||
>32 lelong !0 (signal %d)
|
||||
|
||||
# NetBSD/alpha does not support (and has never supported) a.out objects,
|
||||
# so no rules are provided for them. NetBSD/alpha ELF objects are
|
||||
# dealt with in "elf".
|
||||
0 leshort 0x00070185 ECOFF NetBSD/alpha binary
|
||||
0 lelong 0x00070185 ECOFF NetBSD/alpha binary
|
||||
>10 leshort 0x0001 not stripped
|
||||
>10 leshort 0x0000 stripped
|
||||
0 belong&0377777777 043200507 NetBSD/alpha core
|
||||
>12 string >\0 from '%s'
|
||||
>32 belong !0 (signal %d)
|
||||
|
||||
0 belong&0377777777 043400413 NetBSD/mips demand paged
|
||||
>0 byte &0x80
|
||||
@ -186,6 +216,7 @@
|
||||
>16 belong >0 not stripped
|
||||
0 belong&0377777777 043400507 NetBSD/mips core
|
||||
>12 string >\0 from '%s'
|
||||
>32 belong !0 (signal %d)
|
||||
|
||||
0 belong&0377777777 043600413 NetBSD/arm32 demand paged
|
||||
>0 byte &0x80
|
||||
@ -207,3 +238,4 @@
|
||||
>16 lelong >0 not stripped
|
||||
0 belong&0377777777 043600507 NetBSD/arm32 core
|
||||
>12 string >\0 from '%s'
|
||||
>32 lelong !0 (signal %d)
|
21
contrib/file/Magdir/netscape
Normal file
21
contrib/file/Magdir/netscape
Normal file
@ -0,0 +1,21 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# netscape: file(1) magic for Netscape files
|
||||
# "H. Nanosecond" <aldomel@ix.netcom.com>
|
||||
# version 3 and 4 I think
|
||||
#
|
||||
|
||||
# Netscape Address book .nab
|
||||
0 string \000\017\102\104\000\000\000\000\000\000\001\000\000\000\000\002\000\000\000\002\000\000\004\000 Netscape Address book
|
||||
|
||||
# .snm Caches
|
||||
0 string #\ Netscape\ folder\ cache Netscape folder cache
|
||||
0 string \000\036\204\220\000 Netscape folder cache
|
||||
# .n2p
|
||||
# Net 2 Phone
|
||||
#0 string 123\130\071\066\061\071\071\071\060\070\061\060\061\063\060
|
||||
0 string SX961999 Net2phone
|
||||
|
||||
#
|
||||
#This is files ending in .art, FIXME add more rules
|
||||
0 string JG\004\016\0\0\0\0 ART
|
4
contrib/file/Magdir/octave
Normal file
4
contrib/file/Magdir/octave
Normal file
@ -0,0 +1,4 @@
|
||||
#------------------------------------------------------------------------------
|
||||
# octave binary data file(1) magic, from Dirk Eddelbuettel <edd@debian.org>
|
||||
0 string Octave-1-L Octave binary data (little endian)
|
||||
0 string Octave-1-B Octave binary data (big endian)
|
@ -1,18 +1,32 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# elf: file(1) magic for ELF executables
|
||||
# olf: file(1) magic for OLF executables
|
||||
#
|
||||
# We have to check the byte order flag to see what byte order all the
|
||||
# other stuff in the header is in.
|
||||
#
|
||||
# MIPS RS3000 may also be for MIPS RS2000.
|
||||
# MIPS R3000 may also be for MIPS R2000.
|
||||
# What're the correct byte orders for the nCUBE and the Fujitsu VPP500?
|
||||
#
|
||||
# updated by Daniel Quinlan (quinlan@yggdrasil.com)
|
||||
0 string \177ELF ELF
|
||||
# Created by Erik Theisen <etheisen@openbsd.org>
|
||||
# Based on elf from Daniel Quinlan <quinlan@yggdrasil.com>
|
||||
0 string \177OLF OLF
|
||||
>4 byte 0 invalid class
|
||||
>4 byte 1 32-bit
|
||||
>4 byte 2 64-bit
|
||||
>7 byte 0 invalid os
|
||||
>7 byte 1 OpenBSD
|
||||
>7 byte 2 NetBSD
|
||||
>7 byte 3 FreeBSD
|
||||
>7 byte 4 4.4BSD
|
||||
>7 byte 5 Linux
|
||||
>7 byte 6 SVR4
|
||||
>7 byte 7 esix
|
||||
>7 byte 8 Solaris
|
||||
>7 byte 9 Irix
|
||||
>7 byte 10 SCO
|
||||
>7 byte 11 Dell
|
||||
>7 byte 12 NCR
|
||||
>5 byte 0 invalid byte order
|
||||
>5 byte 1 LSB
|
||||
>>16 leshort 0 no file type,
|
||||
@ -20,8 +34,10 @@
|
||||
>>16 leshort 2 executable,
|
||||
>>16 leshort 3 shared object,
|
||||
# Core handling from Peter Tobias <tobias@server.et-inf.fho-emden.de>
|
||||
# corrections by Christian 'Dr. Disk' Hechelmann <drdisk@ds9.au.s.shuttle.de>
|
||||
>>16 leshort 4 core file
|
||||
>>>400 lelong >0 (signal %d),
|
||||
>>>(0x38+0xcc) string >\0 of '%s'
|
||||
>>>(0x38+0x10) lelong >0 (signal %d),
|
||||
>>16 leshort &0xff00 processor-specific,
|
||||
>>18 leshort 0 no machine,
|
||||
>>18 leshort 1 AT&T WE32100 - invalid byte order,
|
||||
@ -31,11 +47,11 @@
|
||||
>>18 leshort 5 Motorola 88000 - invalid byte order,
|
||||
>>18 leshort 6 Intel 80486,
|
||||
>>18 leshort 7 Intel 80860,
|
||||
>>18 leshort 8 MIPS RS3000_BE - invalid byte order,
|
||||
>>18 leshort 8 MIPS R3000_BE - invalid byte order,
|
||||
>>18 leshort 9 Amdahl - invalid byte order,
|
||||
>>18 leshort 10 MIPS RS3000_LE,
|
||||
>>18 leshort 10 MIPS R3000_LE,
|
||||
>>18 leshort 11 RS6000 - invalid byte order,
|
||||
>>18 leshort 15 PA_RISC - invalid byte order,
|
||||
>>18 leshort 15 PA-RISC - invalid byte order,
|
||||
>>18 leshort 16 nCUBE,
|
||||
>>18 leshort 17 VPP500,
|
||||
>>18 leshort 18 SPARC32PLUS,
|
||||
@ -44,13 +60,15 @@
|
||||
>>20 lelong 0 invalid version
|
||||
>>20 lelong 1 version 1
|
||||
>>36 lelong 1 MathCoPro/FPU/MAU Required
|
||||
>8 string >\0 (%s)
|
||||
>5 byte 2 MSB
|
||||
>>16 beshort 0 no file type,
|
||||
>>16 beshort 1 relocatable,
|
||||
>>16 beshort 2 executable,
|
||||
>>16 beshort 3 shared object,
|
||||
>>16 beshort 4 core file,
|
||||
>>>400 lelong >0 (signal %d),
|
||||
>>>(0x38+0xcc) string >\0 of '%s'
|
||||
>>>(0x38+0x10) belong >0 (signal %d),
|
||||
>>16 beshort &0xff00 processor-specific,
|
||||
>>18 beshort 0 no machine,
|
||||
>>18 beshort 1 AT&T WE32100,
|
||||
@ -60,15 +78,19 @@
|
||||
>>18 beshort 5 Motorola 88000,
|
||||
>>18 beshort 6 Intel 80486 - invalid byte order,
|
||||
>>18 beshort 7 Intel 80860,
|
||||
>>18 beshort 8 MIPS RS3000_BE,
|
||||
>>18 beshort 8 MIPS R3000_BE,
|
||||
>>18 beshort 9 Amdahl,
|
||||
>>18 beshort 10 MIPS RS3000_LE - invalid byte order,
|
||||
>>18 beshort 10 MIPS R3000_LE - invalid byte order,
|
||||
>>18 beshort 11 RS6000,
|
||||
>>18 beshort 15 PA_RISC,
|
||||
>>18 beshort 15 PA-RISC,
|
||||
>>18 beshort 16 nCUBE,
|
||||
>>18 beshort 17 VPP500,
|
||||
>>18 beshort 18 SPARC32PLUS,
|
||||
>>18 beshort 20 PowerPC,
|
||||
>>18 beshort 20 PowerPC or cisco 4500,
|
||||
>>18 beshort 21 cisco 7500,
|
||||
>>18 beshort 24 cisco SVIP,
|
||||
>>18 beshort 25 cisco 7200,
|
||||
>>18 beshort 36 cisco 12000,
|
||||
>>18 beshort 0x9026 Alpha,
|
||||
>>20 belong 0 invalid version
|
||||
>>20 belong 1 version 1
|
47
contrib/file/Magdir/os2
Normal file
47
contrib/file/Magdir/os2
Normal file
@ -0,0 +1,47 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# os2: file(1) magic for OS/2 files
|
||||
#
|
||||
|
||||
# Provided 1998/08/22 by
|
||||
# David Mediavilla <davidme.news@REMOVEIFNOTSPAMusa.net>
|
||||
1 string InternetShortcut MS Windows 95 Internet shortcut text
|
||||
>24 string >\ (URL=<%s>)
|
||||
|
||||
# OS/2 URL objects
|
||||
# Provided 1998/08/22 by
|
||||
# David Mediavilla <davidme.news@REMOVEIFNOTSPAMusa.net>
|
||||
0 string http: OS/2 URL object text
|
||||
>5 string >\ (WWW) <http:%s>
|
||||
0 string mailto: OS/2 URL object text
|
||||
>7 string >\ (email) <%s>
|
||||
0 string news: OS/2 URL object text
|
||||
>5 string >\ (Usenet) <%s>
|
||||
0 string ftp: OS/2 URL object text
|
||||
>4 string >\ (FTP) <ftp:%s>
|
||||
0 string file: OS/2 URL object text
|
||||
>5 string >\ (Local file) <%s>
|
||||
|
||||
# >>>>> OS/2 INF/HLP <<<<< (source: Daniel Dissett ddissett@netcom.com)
|
||||
# Carl Hauser (chauser.parc@xerox.com) and
|
||||
# Marcus Groeber (marcusg@ph-cip.uni-koeln.de)
|
||||
# list the following header format in inf02a.doc:
|
||||
#
|
||||
# int16 ID; // ID magic word (5348h = "HS")
|
||||
# int8 unknown1; // unknown purpose, could be third letter of ID
|
||||
# int8 flags; // probably a flag word...
|
||||
# // bit 0: set if INF style file
|
||||
# // bit 4: set if HLP style file
|
||||
# // patching this byte allows reading HLP files
|
||||
# // using the VIEW command, while help files
|
||||
# // seem to work with INF settings here as well.
|
||||
# int16 hdrsize; // total size of header
|
||||
# int16 unknown2; // unknown purpose
|
||||
#
|
||||
0 string HSP\x01\x9b\x00 OS/2 INF
|
||||
>107 string >0 (%s)
|
||||
0 string HSP\x10\x9b\x00 OS/2 HLP
|
||||
>107 string >0 (%s)
|
||||
|
||||
# OS/2 INI (this is a guess)
|
||||
0 string \xff\xff\xff\xff\x14\0\0\0 OS/2 INI
|
86
contrib/file/Magdir/os9
Normal file
86
contrib/file/Magdir/os9
Normal file
@ -0,0 +1,86 @@
|
||||
#
|
||||
# $NetBSD: os9,v 1.2 1997/01/09 20:19:04 tls Exp $
|
||||
#
|
||||
# Copyright (c) 1996 Ignatios Souvatzis. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions
|
||||
# are met:
|
||||
# 1. Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# 2. Redistributions in binary form must reproduce the above copyright
|
||||
# notice, this list of conditions and the following disclaimer in the
|
||||
# documentation and/or other materials provided with the distribution.
|
||||
# 3. All advertising materials mentioning features or use of this software
|
||||
# must display the following acknowledgement:
|
||||
# This product includes software developed by Ignatios Souvatzis for
|
||||
# the NetBSD project.
|
||||
# 4. The name of the author may not be used to endorse or promote products
|
||||
# derived from this software without specific prior written permission.
|
||||
#
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
|
||||
# IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
||||
# OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
|
||||
# IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
||||
# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
|
||||
# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
|
||||
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
||||
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
#
|
||||
#
|
||||
#
|
||||
# OS9/6809 module descriptions:
|
||||
#
|
||||
0 beshort 0x87CD OS9/6809 module:
|
||||
#
|
||||
>6 byte&0x0f 0x00 non-executable
|
||||
>6 byte&0x0f 0x01 machine language
|
||||
>6 byte&0x0f 0x02 BASIC I-code
|
||||
>6 byte&0x0f 0x03 P-code
|
||||
>6 byte&0x0f 0x04 C I-code
|
||||
>6 byte&0x0f 0x05 COBOL I-code
|
||||
>6 byte&0x0f 0x06 FORTRAN I-code
|
||||
#
|
||||
>6 byte&0xf0 0x10 program executable
|
||||
>6 byte&0xf0 0x20 subroutine
|
||||
>6 byte&0xf0 0x30 multi-module
|
||||
>6 byte&0xf0 0x40 data module
|
||||
#
|
||||
>6 byte&0xf0 0xC0 system module
|
||||
>6 byte&0xf0 0xD0 file manager
|
||||
>6 byte&0xf0 0xE0 device driver
|
||||
>6 byte&0xf0 0xF0 device descriptor
|
||||
#
|
||||
# OS9/m68k stuff (to be continued)
|
||||
#
|
||||
0 beshort 0x4AFC OS9/68K module:
|
||||
#
|
||||
# attr
|
||||
>14 byte&0x80 0x80 re-entrant
|
||||
>14 byte&0x40 0x40 ghost
|
||||
>14 byte&0x20 0x20 system-state
|
||||
#
|
||||
# lang:
|
||||
#
|
||||
>13 byte 1 machine language
|
||||
>13 byte 2 BASIC I-code
|
||||
>13 byte 3 P-code
|
||||
>13 byte 4 C I-code
|
||||
>13 byte 5 COBOL I-code
|
||||
>13 byte 6 Fortran I-code
|
||||
#
|
||||
#
|
||||
# type:
|
||||
#
|
||||
>12 byte 1 program executable
|
||||
>12 byte 2 subroutine
|
||||
>12 byte 3 multi-module
|
||||
>12 byte 4 data module
|
||||
>12 byte 11 trap library
|
||||
>12 byte 12 system module
|
||||
>12 byte 13 file manager
|
||||
>12 byte 14 device driver
|
||||
>12 byte 15 device descriptor
|
@ -5,6 +5,3 @@
|
||||
# I386 magic number info
|
||||
#
|
||||
0 short 0565 i386 COFF object
|
||||
#
|
||||
0 string Core Alpha Digital UNIX core file
|
||||
>24 string >\0 \b, generated from '%s'
|
15
contrib/file/Magdir/palm
Normal file
15
contrib/file/Magdir/palm
Normal file
@ -0,0 +1,15 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# palm: file(1) magic for PalmOS {.prc,.pdb}: applications, docfiles, and hacks
|
||||
#
|
||||
# Brian Lalor <blalor@hcirisc.cs.binghamton.edu>
|
||||
|
||||
# appl
|
||||
60 belong 0x6170706c PalmOS application
|
||||
>0 string >\0 "%s"
|
||||
# TEXt
|
||||
60 belong 0x54455874 AportisDoc file
|
||||
>0 string >\0 "%s"
|
||||
# HACK
|
||||
60 belong 0x4841434b HackMaster hack
|
||||
>0 string >\0 "%s"
|
@ -23,3 +23,13 @@
|
||||
>15 byte >0 - version %ld
|
||||
|
||||
0 leshort 0437 PDP-11 kernel overlay
|
||||
|
||||
# These last three are derived from 2.11BSD file(1)
|
||||
0 leshort 0413 PDP-11 demand-paged pure executable
|
||||
>8 leshort >0 not stripped
|
||||
|
||||
0 leshort 0430 PDP-11 overlaid pure executable
|
||||
>8 leshort >0 not stripped
|
||||
|
||||
0 leshort 0431 PDP-11 overlaid separate executable
|
||||
>8 leshort >0 not stripped
|
@ -17,11 +17,42 @@
|
||||
>>>16 string EPS - type %s
|
||||
>>>16 string Query - type %s
|
||||
>>>16 string ExitServer - type %s
|
||||
0 string \033%-12345X%!PS PostScript document
|
||||
|
||||
|
||||
# DOS EPS Binary File Header
|
||||
# From: Ed Sznyter <ews@Black.Market.NET>
|
||||
0 belong 0xC5D0D3C6 DOS EPS Binary File
|
||||
>4 long >0 Postscript starts at byte %d
|
||||
>>8 long >0 length %d
|
||||
>>>12 long >0 Metafile starts at byte %d
|
||||
>>>>16 long >0 length %d
|
||||
>>>20 long >0 TIFF starts at byte %d
|
||||
>>>>24 long >0 length %d
|
||||
|
||||
# Adobe's PostScript Printer Description (PPD) files
|
||||
# Yves Arrouye <arrouye@marin.fdn.fr>
|
||||
#
|
||||
0 string *PPD-Adobe: PPD file
|
||||
>13 string x \b, ve
|
||||
|
||||
# HP Printer Job Language
|
||||
0 string \033%-12345X@PJL HP Printer Job Language data
|
||||
>15 string \ ENTER\ LANGUAGE\ =
|
||||
>31 string PostScript PostScript
|
||||
# HP Printer Job Language
|
||||
# The header found on Win95 HP plot files is the "Silliest Thing possible"
|
||||
# (TM)
|
||||
# Every driver puts the language at some random position, with random case
|
||||
# (LANGUAGE and Language)
|
||||
# For example the LaserJet 5L driver puts the "PJL ENTER LANGUAGE" in line 10
|
||||
# From: Uwe Bonnes <bon@elektron.ikp.physik.th-darmstadt.de>
|
||||
#
|
||||
0 string \033%-12345X@PJL HP Printer Job Language data
|
||||
>&0 string >\0 %s
|
||||
>>&0 string >\0 %s
|
||||
>>>&0 string >\0 %s
|
||||
>>>>&0 string >\0 %s
|
||||
#>15 string \ ENTER\ LANGUAGE\ =
|
||||
#>31 string PostScript PostScript
|
||||
|
||||
# HP Printer Control Language, Daniel Quinlan (quinlan@yggdrasil.com)
|
||||
0 string \033E\033 HP PCL printer data
|
||||
@ -53,3 +84,5 @@
|
||||
# Now magic for IMAGEN font files...
|
||||
0 string Rast RST-format raster font data
|
||||
>45 string >0 face %
|
||||
# From Jukka Ukkonen
|
||||
0 string \033[K\002\0\0\017\033(a\001\0\001\033(g Canon Bubble Jet BJC formatted data
|
9
contrib/file/Magdir/project
Normal file
9
contrib/file/Magdir/project
Normal file
@ -0,0 +1,9 @@
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# project: file(1) magic for Project management
|
||||
#
|
||||
# Magic strings for ftnchek project files. Alexander Mai
|
||||
0 string FTNCHEK_\ P project file for ftnchek
|
||||
>10 string 1 version 2.7
|
||||
>10 string 2 version 2.8 to 2.10
|
||||
>10 string 3 version 2.11 or later
|
5
contrib/file/Magdir/python
Normal file
5
contrib/file/Magdir/python
Normal file
@ -0,0 +1,5 @@
|
||||
# often the module starts with a multiline string
|
||||
0 string """ a python script text executable
|
||||
# MAGIC as specified in Python/import.c (1.5.2/1.6)
|
||||
# 20121 ( YEAR - 1995 ) + MONTH + DAY (little endian followed by "\r\n"
|
||||
0 belong 0x994e0d0a python compiled
|
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue
Block a user