head 1.2; access; symbols perseant-exfatfs-base-20250801:1.2 perseant-exfatfs-base-20240630:1.2 perseant-exfatfs:1.2.0.22 perseant-exfatfs-base:1.2 cjep_sun2x:1.2.0.20 cjep_sun2x-base:1.2 cjep_staticlib_x-base1:1.2 cjep_staticlib_x:1.2.0.18 cjep_staticlib_x-base:1.2 phil-wifi-20200421:1.2 phil-wifi-20200411:1.2 phil-wifi-20200406:1.2 pgoyette-compat-merge-20190127:1.2 pgoyette-compat-20190127:1.2 pgoyette-compat-20190118:1.2 pgoyette-compat-1226:1.2 pgoyette-compat-1126:1.2 pgoyette-compat-1020:1.2 pgoyette-compat-0930:1.2 pgoyette-compat-0906:1.2 pgoyette-compat-0728:1.2 pgoyette-compat-0625:1.2 pgoyette-compat-0521:1.2 pgoyette-compat-0502:1.2 pgoyette-compat-0422:1.2 pgoyette-compat-0415:1.2 pgoyette-compat-0407:1.2 pgoyette-compat-0330:1.2 pgoyette-compat-0322:1.2 pgoyette-compat-0315:1.2 pgoyette-compat:1.2.0.16 pgoyette-compat-base:1.2 prg-localcount2-base3:1.2 prg-localcount2-base2:1.2 prg-localcount2-base1:1.2 prg-localcount2:1.2.0.14 prg-localcount2-base:1.2 pgoyette-localcount-20170426:1.2 bouyer-socketcan-base1:1.2 pgoyette-localcount-20170320:1.2 bouyer-socketcan:1.2.0.12 bouyer-socketcan-base:1.2 pgoyette-localcount-20170107:1.2 pgoyette-localcount-20161104:1.2 localcount-20160914:1.2 pgoyette-localcount-20160806:1.2 pgoyette-localcount-20160726:1.2 pgoyette-localcount:1.2.0.10 pgoyette-localcount-base:1.2 netbsd-5-2-3-RELEASE:1.1.1.9 netbsd-5-1-5-RELEASE:1.1.1.9 yamt-pagecache-base9:1.2 yamt-pagecache-tag8:1.2 tls-earlyentropy:1.2.0.6 tls-earlyentropy-base:1.2 riastradh-xf86-video-intel-2-7-1-pre-2-21-15:1.2 riastradh-drm2-base3:1.2 netbsd-5-2-2-RELEASE:1.1.1.9 netbsd-5-1-4-RELEASE:1.1.1.9 netbsd-5-2-1-RELEASE:1.1.1.9 netbsd-5-1-3-RELEASE:1.1.1.9 agc-symver:1.2.0.8 agc-symver-base:1.2 tls-maxphys-base:1.2 yamt-pagecache-base8:1.2 netbsd-5-2:1.1.1.9.0.2 yamt-pagecache-base7:1.2 netbsd-5-2-RELEASE:1.1.1.9 netbsd-5-2-RC1:1.1.1.9 yamt-pagecache-base6:1.2 yamt-pagecache-base5:1.2 yamt-pagecache-base4:1.2 netbsd-5-1-2-RELEASE:1.1.1.9 netbsd-5-1-1-RELEASE:1.1.1.9 yamt-pagecache-base3:1.2 yamt-pagecache-base2:1.2 yamt-pagecache:1.2.0.4 yamt-pagecache-base:1.2 bouyer-quota2-nbase:1.2 bouyer-quota2:1.2.0.2 bouyer-quota2-base:1.2 matt-nb5-mips64-premerge-20101231:1.1.1.9 matt-nb5-pq3:1.1.1.9.0.14 matt-nb5-pq3-base:1.1.1.9 netbsd-5-1:1.1.1.9.0.12 netbsd-5-1-RELEASE:1.1.1.9 netbsd-5-1-RC4:1.1.1.9 matt-nb5-mips64-k15:1.1.1.9 netbsd-5-1-RC3:1.1.1.9 netbsd-5-1-RC2:1.1.1.9 netbsd-5-1-RC1:1.1.1.9 netbsd-5-0-2-RELEASE:1.1.1.9 matt-nb5-mips64-premerge-20091211:1.1.1.9 matt-nb5-mips64-u2-k2-k4-k7-k8-k9:1.1.1.9 matt-nb4-mips64-k7-u2a-k9b:1.1.1.9 matt-nb5-mips64-u1-k1-k5:1.1.1.9 matt-nb5-mips64:1.1.1.9.0.10 netbsd-5-0-1-RELEASE:1.1.1.9 jym-xensuspend-nbase:1.1.1.9 netbsd-5-0:1.1.1.9.0.8 netbsd-5-0-RELEASE:1.1.1.9 netbsd-5-0-RC4:1.1.1.9 netbsd-5-0-RC3:1.1.1.9 netbsd-5-0-RC2:1.1.1.9 jym-xensuspend:1.1.1.9.0.6 jym-xensuspend-base:1.1.1.9 netbsd-5-0-RC1:1.1.1.9 netbsd-5:1.1.1.9.0.4 netbsd-5-base:1.1.1.9 matt-mips64-base2:1.1.1.9 matt-mips64:1.1.1.8.0.14 netbsd-4-0-1-RELEASE:1.1.1.6.2.1 wrstuden-revivesa-base-3:1.1.1.9 wrstuden-revivesa-base-2:1.1.1.9 wrstuden-fixsa-newbase:1.1.1.6.2.1 FILE4_26:1.1.1.9 wrstuden-revivesa-base-1:1.1.1.8 yamt-pf42-base4:1.1.1.8 yamt-pf42-base3:1.1.1.8 hpcarm-cleanup-nbase:1.1.1.8 yamt-pf42-baseX:1.1.1.8 yamt-pf42-base2:1.1.1.8 wrstuden-revivesa:1.1.1.8.0.12 wrstuden-revivesa-base:1.1.1.8 yamt-pf42:1.1.1.8.0.10 yamt-pf42-base:1.1.1.8 keiichi-mipv6:1.1.1.8.0.8 keiichi-mipv6-base:1.1.1.8 matt-armv6-nbase:1.1.1.8 matt-armv6-prevmlocking:1.1.1.8 wrstuden-fixsa-base-1:1.1.1.6.2.1 netbsd-4-0:1.1.1.6.2.1.0.2 netbsd-4-0-RELEASE:1.1.1.6.2.1 cube-autoconf:1.1.1.8.0.6 cube-autoconf-base:1.1.1.8 netbsd-4-0-RC5:1.1.1.6.2.1 netbsd-4-0-RC4:1.1.1.6.2.1 netbsd-4-0-RC3:1.1.1.6.2.1 netbsd-4-0-RC2:1.1.1.6.2.1 netbsd-4-0-RC1:1.1.1.6.2.1 matt-armv6:1.1.1.8.0.4 matt-armv6-base:1.1.1.8 matt-mips64-base:1.1.1.8 hpcarm-cleanup:1.1.1.8.0.2 hpcarm-cleanup-base:1.1.1.8 netbsd-3-1-1-RELEASE:1.1.1.4.6.1 netbsd-3-0-3-RELEASE:1.1.1.4.4.1 FILE4_21:1.1.1.8 wrstuden-fixsa:1.1.1.6.0.4 wrstuden-fixsa-base:1.1.1.6.2.1 FILE4_20:1.1.1.7 abandoned-netbsd-4-base:1.1.1.5 abandoned-netbsd-4:1.1.1.5.0.2 FILE4_18:1.1.1.6 netbsd-3-1:1.1.1.4.0.6 netbsd-3-1-RELEASE:1.1.1.4 netbsd-3-0-2-RELEASE:1.1.1.4 netbsd-3-1-RC4:1.1.1.4 netbsd-3-1-RC3:1.1.1.4 netbsd-3-1-RC2:1.1.1.4 netbsd-3-1-RC1:1.1.1.4 netbsd-4:1.1.1.6.0.2 netbsd-4-base:1.1.1.6 netbsd-3-0-1-RELEASE:1.1.1.4 netbsd-3-0:1.1.1.4.0.4 netbsd-3-0-RELEASE:1.1.1.4 netbsd-3-0-RC6:1.1.1.4 netbsd-3-0-RC5:1.1.1.4 netbsd-3-0-RC4:1.1.1.4 netbsd-3-0-RC3:1.1.1.4 netbsd-3-0-RC2:1.1.1.4 netbsd-3-0-RC1:1.1.1.4 netbsd-2-0-3-RELEASE:1.1.1.3 netbsd-2-1:1.1.1.3.0.6 netbsd-2-1-RELEASE:1.1.1.3 FILE4_16:1.1.1.5 netbsd-2-1-RC6:1.1.1.3 netbsd-2-1-RC5:1.1.1.3 netbsd-2-1-RC4:1.1.1.3 netbsd-2-1-RC3:1.1.1.3 netbsd-2-1-RC2:1.1.1.3 netbsd-2-1-RC1:1.1.1.3 netbsd-2-0-2-RELEASE:1.1.1.3 netbsd-3:1.1.1.4.0.2 netbsd-3-base:1.1.1.4 FILE4_13:1.1.1.4 FILE413-BEFOREIMPORT:1.1.1.4 netbsd-2-0-1-RELEASE:1.1.1.3 netbsd-2:1.1.1.3.0.4 netbsd-2-base:1.1.1.3 FILE4_12:1.1.1.4 netbsd-2-0-RELEASE:1.1.1.3 netbsd-2-0-RC5:1.1.1.3 netbsd-2-0-RC4:1.1.1.3 netbsd-2-0-RC3:1.1.1.3 netbsd-2-0-RC2:1.1.1.3 netbsd-2-0-RC1:1.1.1.3 FILE4_10:1.1.1.3 FILE4_09:1.1.1.3 netbsd-2-0:1.1.1.3.0.2 netbsd-2-0-base:1.1.1.3 FILE4_08:1.1.1.3 FILE4_06:1.1.1.2 FILE4_04:1.1.1.2 FILE4_03:1.1.1.2 FILE4_00:1.1.1.1 CHRISTOS:1.1.1; locks; strict; comment @# @; 1.2 date 2009.10.17.23.05.36; author snj; state dead; branches; next 1.1; 1.1 date 2003.03.25.22.30.30; author pooka; state Exp; branches 1.1.1.1; next ; 1.1.1.1 date 2003.03.25.22.30.30; author pooka; state Exp; branches; next 1.1.1.2; 1.1.1.2 date 2003.05.25.21.28.55; author pooka; state Exp; branches; next 1.1.1.3; 1.1.1.3 date 2004.03.23.08.31.51; author pooka; state Exp; branches; next 1.1.1.4; 1.1.1.4 date 2004.12.13.10.25.02; author pooka; state Exp; branches 1.1.1.4.2.1 1.1.1.4.4.1 1.1.1.4.6.1; next 1.1.1.5; 1.1.1.5 date 2005.10.17.17.48.41; author pooka; state Exp; branches; next 1.1.1.6; 1.1.1.6 date 2006.10.31.20.34.58; author pooka; state Exp; branches 1.1.1.6.2.1 1.1.1.6.4.1; next 1.1.1.7; 1.1.1.7 date 2007.03.04.14.54.59; author pooka; state Exp; branches; next 1.1.1.8; 1.1.1.8 date 2007.06.07.11.24.43; author pooka; state Exp; branches 1.1.1.8.12.1; next 1.1.1.9; 1.1.1.9 date 2008.08.30.11.21.06; author christos; state Exp; branches; next ; 1.1.1.4.2.1 date 2007.06.24.19.41.56; author ghen; state Exp; branches; next ; 1.1.1.4.4.1 date 2007.06.24.19.43.26; author ghen; state Exp; branches; next ; 1.1.1.4.6.1 date 2007.06.24.19.45.23; author ghen; state Exp; branches; next ; 1.1.1.6.2.1 date 2007.06.15.16.14.45; author liamjfoy; state Exp; branches; next ; 1.1.1.6.4.1 date 2007.09.03.06.53.27; author wrstuden; state Exp; branches; next ; 1.1.1.8.12.1 date 2008.09.18.04.44.40; author wrstuden; state Exp; branches; next ; desc @@ 1.2 log @This hasn't been used in a while. Long live external/bsd/file! @ text @ #------------------------------------------------------------------------------ # linux: file(1) magic for Linux files # # Values for Linux/i386 binaries, from Daniel Quinlan # The following basic Linux magic is useful for reference, but using # "long" magic is a better practice in order to avoid collisions. # # 2 leshort 100 Linux/i386 # >0 leshort 0407 impure executable (OMAGIC) # >0 leshort 0410 pure executable (NMAGIC) # >0 leshort 0413 demand-paged executable (ZMAGIC) # >0 leshort 0314 demand-paged executable (QMAGIC) # 0 lelong 0x00640107 Linux/i386 impure executable (OMAGIC) >16 lelong 0 \b, stripped 0 lelong 0x00640108 Linux/i386 pure executable (NMAGIC) >16 lelong 0 \b, stripped 0 lelong 0x0064010b Linux/i386 demand-paged executable (ZMAGIC) >16 lelong 0 \b, stripped 0 lelong 0x006400cc Linux/i386 demand-paged executable (QMAGIC) >16 lelong 0 \b, stripped # 0 string \007\001\000 Linux/i386 object file >20 lelong >0x1020 \b, DLL library # Linux-8086 stuff: 0 string \01\03\020\04 Linux-8086 impure executable >28 long !0 not stripped 0 string \01\03\040\04 Linux-8086 executable >28 long !0 not stripped # 0 string \243\206\001\0 Linux-8086 object file # 0 string \01\03\020\20 Minix-386 impure executable >28 long !0 not stripped 0 string \01\03\040\20 Minix-386 executable >28 long !0 not stripped # core dump file, from Bill Reynolds 216 lelong 0421 Linux/i386 core file >220 string >\0 of '%s' >200 lelong >0 (signal %d) # # LILO boot/chain loaders, from Daniel Quinlan # this can be overridden by the DOS executable (COM) entry 2 string LILO Linux/i386 LILO boot/chain loader # # Debian Packages, from Peter Tobias 0 string 0.9 >8 byte 0x0a old Debian Binary Package >>3 byte >0 \b, created by dpkg 0.9%c >>4 byte >0 pl%c # PSF fonts, from H. Peter Anvin 0 leshort 0x0436 Linux/i386 PC Screen Font data, >2 byte 0 256 characters, no directory, >2 byte 1 512 characters, no directory, >2 byte 2 256 characters, Unicode directory, >2 byte 3 512 characters, Unicode directory, >3 byte >0 8x%d # Linux swap file, from Daniel Quinlan 4086 string SWAP-SPACE Linux/i386 swap file # according to man page of mkswap (8) March 1999 4086 string SWAPSPACE2 Linux/i386 swap file (new style) # ECOFF magic for OSF/1 and Linux (only tested under Linux though) # # from Erik Troan (ewt@@redhat.com) examining od dumps, so this # could be wrong # updated by David Mosberger (davidm@@azstarnet.com) based on # GNU BFD and MIPS info found below. # 0 leshort 0x0183 ECOFF alpha >24 leshort 0407 executable >24 leshort 0410 pure >24 leshort 0413 demand paged >8 long >0 not stripped >8 long 0 stripped >23 leshort >0 - version %ld. # # Linux kernel boot images, from Albert Cahalan # and others such as Axel Kohlmeyer # and Nicolás Lichtmaier # All known start with: b8 c0 07 8e d8 b8 00 90 8e c0 b9 00 01 29 f6 29 514 string HdrS Linux kernel >518 leshort >0 >>529 byte 0 zImage data, >>529 byte 1 bzImage data, >0x048c byte 0x31 >>0x048c string x version %s >0x0493 byte 0x31 >>0x0493 string x version %s >0x048c byte 0x32 >>0x048c string x version %s >0x0493 byte 0x32 >>0x0493 string x version %s >0x04df byte 0x32 >>0x04df string x version %s >0x04fb byte 0x32 >>0x04fb string x version %s # This also matches new kernels, which were caught above by "HdrS". 0 belong 0xb8c0078e Linux kernel >0x1e3 string Loading version 1.3.79 or older >0x1e9 string Loading from prehistoric times # LSM entries - Nicolás Lichtmaier 0 string Begin3 Linux Software Map entry text ############################################################################ # Linux kernel versions 0 string \xb8\xc0\x07\x8e\xd8\xb8\x00\x90 Linux >497 leshort 0 x86 boot sector >>514 belong 0x8e of a kernel from the dawn of time! >>514 belong 0x908ed8b4 version 0.99-1.1.42 >>514 belong 0x908ed8b8 for memtest86 >497 leshort !0 x86 kernel >>504 leshort >0 RAMdisksize=%u KB >>502 leshort >0 swap=0x%X >>508 leshort >0 root=0x%X >>>498 leshort 1 \b-ro >>>498 leshort 0 \b-rw >>506 leshort 0xFFFF vga=normal >>506 leshort 0xFFFE vga=extended >>506 leshort 0xFFFD vga=ask >>506 leshort >0 vga=%d >>514 belong 0x908ed881 version 1.1.43-1.1.45 >>514 belong 0x15b281cd >>>0xa8e belong 0x55AA5a5a version 1.1.46-1.2.13,1.3.0 >>>0xa99 belong 0x55AA5a5a version 1.3.1,2 >>>0xaa3 belong 0x55AA5a5a version 1.3.3-1.3.30 >>>0xaa6 belong 0x55AA5a5a version 1.3.31-1.3.41 >>>0xb2b belong 0x55AA5a5a version 1.3.42-1.3.45 >>>0xaf7 belong 0x55AA5a5a version 1.3.46-1.3.72 >>514 string HdrS >>>518 leshort >0x1FF >>>>529 byte 0 \b, zImage >>>>529 byte 1 \b, bzImage >>>>(526.s+0x200) string >\0 \b, version %s # Linux boot sector thefts. 0 belong 0xb8c0078e Linux >0x1e6 belong 0x454c4b53 ELKS Kernel >0x1e6 belong !0x454c4b53 style boot sector ############################################################################ # Linux 8086 executable 0 lelong&0xFF0000FF 0xC30000E9 Linux-Dev86 executable, headerless >5 string . >>4 string >\0 \b, libc version %s 0 lelong&0xFF00FFFF 0x4000301 Linux-8086 executable >2 byte&0x01 !0 \b, unmapped zero page >2 byte&0x20 0 \b, impure >2 byte&0x20 !0 >>2 byte&0x10 !0 \b, A_EXEC >2 byte&0x02 !0 \b, A_PAL >2 byte&0x04 !0 \b, A_NSYM >2 byte&0x08 !0 \b, A_STAND >2 byte&0x40 !0 \b, A_PURE >2 byte&0x80 !0 \b, A_TOVLY >28 long !0 \b, not stripped >37 string . >>36 string >\0 \b, libc version %s # 0 lelong&0xFF00FFFF 0x10000301 ld86 I80386 executable # 0 lelong&0xFF00FFFF 0xB000301 ld86 M68K executable # 0 lelong&0xFF00FFFF 0xC000301 ld86 NS16K executable # 0 lelong&0xFF00FFFF 0x17000301 ld86 SPARC executable @ 1.1 log @Initial revision @ text @@ 1.1.1.1 log @file 4.00 @ text @@ 1.1.1.2 log @file 4.03 small changes & fixes @ text @a62 2 >0x400 long x %d (4K pages) >0x404 long x size %d pages d82 16 a97 16 # Linux kernel boot images (i386 arch) (Wolfram Kleff) 514 string HdrS Linux kernel >510 leshort 0xAA55 x86 boot executable >>518 leshort >=3D0x200 >>529 byte 0 zImage, >>>529 byte 1 bzImage, >>>(526.s+0x200) string >\0 version %s, >>498 leshort 1 RO-rootFS, >>498 leshort 0 RW-rootFS, >>508 leshort >0 root_dev 0x%X, >>502 leshort >0 swap_dev 0x%X, >>504 leshort >0 RAMdisksize %u KB, >>506 leshort 0xFFFF Normal VGA >>506 leshort 0xFFFE Extended VGA >>506 leshort 0xFFFD Prompt for Videomode >>506 leshort >0 Video mode %d d102 1 a102 5 # System.map files - Nicol=EF=BF=BDs Lichtmaier 8 string \ A\ _text Linux kernel symbol map text # LSM entries - Nicol=EF=BF=BDs Lichtmaier a103 6 0 string Begin4 Linux Software Map entry text (new format) # From Matt Zimmerman 0 belong 0x4f4f4f4d User-mode Linux COW file >4 belong x \b, version %d >8 string >\0 \b, backing file %s @ 1.1.1.3 log @file 4.08: bugfixes 'n more magic 'n stuff @ text @d47 5 d105 1 a105 1 # System.map files - Nicolás Lichtmaier d108 1 a108 1 # LSM entries - Nicolás Lichtmaier @ 1.1.1.4 log @file 4.12 + assorted bug fixes + switch to 2-clause license @ text @a174 6 # SYSLINUX boot logo files (from 'ppmtolss16' sources) # http://syslinux.zytor.com/ # 0 lelong =0x1413f33d SYSLINUX' LSS16 image data >4 leshort x \b, width %d >6 leshort x \b, height %d @ 1.1.1.4.6.1 log @Pull up following revision(s) (requested by pooka in ticket #1804): dist/file/: synced with HEAD on 20070615 distrib/sets/lists/base/shl.elf: revision 1.222 distrib/sets/lists/base/shl.mi: revision 1.375 via patch lib/Makefile: revision 1.108 via patch lib/libmagic/Makefile: revision 1.5 lib/libmagic/config.h: patch lib/libmagic/shlib_version: revision 1.3-1.4 tools/file/Makefile: revision 1.4 usr.bin/file/Makefile: revision 1.51-1.53 Update file(1) to version 4.21, including security fixes (CVE-2007-1536 and CVE-2007-2799). @ text @a55 3 # From: Jeff Bailey # Linux swap file with swsusp1 image, from Jeff Bailey 4076 string SWAPSPACE2S1SUSPEND Linux/i386 swap file (new style) with SWSUSP1 image a59 2 >>4086 string SWAPSPACE2 >>>1052 string >\0 Label %s d82 1 a82 1 >>518 leshort >=0x200 a180 63 0 string OOOM User-Mode-Linux's Copy-On-Write disk image >4 belong x version %d # SE Linux policy database # From: Mike Frysinger 0 lelong 0xf97cff8c SE Linux policy >16 lelong x v%d >20 lelong 1 MLS >24 lelong x %d symbols >28 lelong x %d ocons # Linux Logical Volume Manager (LVM) # Emmanuel VARAGNAT # # System ID, UUID and volume group name are 128 bytes long # but they should never be full and initialized with zeros... # # LVM1 # 0x0 string HM\001 LVM1 (Linux Logical Volume Manager), version 1 >0x12c string >\0 , System ID: %s 0x0 string HM\002 LVM1 (Linux Logical Volume Manager), version 2 >0x12c string >\0 , System ID: %s # LVM2 # # It seems that the label header can be in one the four first sector # of the disk... (from _find_labeller in lib/label/label.c of LVM2) # # 0x200 seems to be the common case 0x218 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) # read the offset to add to the start of the header, and the header # start in 0x200 >(0x214.l+0x200) string >\0 , UUID: %s 0x018 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x014.l) string >\0 , UUID: %s 0x418 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x414.l+0x400) string >\0 , UUID: %s 0x618 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x614.l+0x600) string >\0 , UUID: %s # SE Linux policy database 0 lelong 0xf97cff8c SE Linux policy >16 lelong x v%d >20 lelong 1 MLS >24 lelong x %d symbols >28 lelong x %d ocons # LUKS: Linux Unified Key Setup, On-Disk Format, http://luks.endorphin.org/spec # Anthon van der Neut (anthon@@mnt.org) 0 string LUKS\xba\xbe LUKS encrypted file, >6 beshort x ver %d >8 string x [%s, >40 string x %s, >72 string x %s] >168 string x UUID: %s @ 1.1.1.4.4.1 log @Pull up following revision(s) (requested by pooka in ticket #1804): dist/file/: synced with HEAD on 20070615 distrib/sets/lists/base/shl.elf: revision 1.222 distrib/sets/lists/base/shl.mi: revision 1.375 via patch lib/Makefile: revision 1.108 via patch lib/libmagic/Makefile: revision 1.5 lib/libmagic/config.h: patch lib/libmagic/shlib_version: revision 1.3-1.4 tools/file/Makefile: revision 1.4 usr.bin/file/Makefile: revision 1.51-1.53 Update file(1) to version 4.21, including security fixes (CVE-2007-1536 and CVE-2007-2799). @ text @a55 3 # From: Jeff Bailey # Linux swap file with swsusp1 image, from Jeff Bailey 4076 string SWAPSPACE2S1SUSPEND Linux/i386 swap file (new style) with SWSUSP1 image a59 2 >>4086 string SWAPSPACE2 >>>1052 string >\0 Label %s d82 1 a82 1 >>518 leshort >=0x200 a180 63 0 string OOOM User-Mode-Linux's Copy-On-Write disk image >4 belong x version %d # SE Linux policy database # From: Mike Frysinger 0 lelong 0xf97cff8c SE Linux policy >16 lelong x v%d >20 lelong 1 MLS >24 lelong x %d symbols >28 lelong x %d ocons # Linux Logical Volume Manager (LVM) # Emmanuel VARAGNAT # # System ID, UUID and volume group name are 128 bytes long # but they should never be full and initialized with zeros... # # LVM1 # 0x0 string HM\001 LVM1 (Linux Logical Volume Manager), version 1 >0x12c string >\0 , System ID: %s 0x0 string HM\002 LVM1 (Linux Logical Volume Manager), version 2 >0x12c string >\0 , System ID: %s # LVM2 # # It seems that the label header can be in one the four first sector # of the disk... (from _find_labeller in lib/label/label.c of LVM2) # # 0x200 seems to be the common case 0x218 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) # read the offset to add to the start of the header, and the header # start in 0x200 >(0x214.l+0x200) string >\0 , UUID: %s 0x018 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x014.l) string >\0 , UUID: %s 0x418 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x414.l+0x400) string >\0 , UUID: %s 0x618 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x614.l+0x600) string >\0 , UUID: %s # SE Linux policy database 0 lelong 0xf97cff8c SE Linux policy >16 lelong x v%d >20 lelong 1 MLS >24 lelong x %d symbols >28 lelong x %d ocons # LUKS: Linux Unified Key Setup, On-Disk Format, http://luks.endorphin.org/spec # Anthon van der Neut (anthon@@mnt.org) 0 string LUKS\xba\xbe LUKS encrypted file, >6 beshort x ver %d >8 string x [%s, >40 string x %s, >72 string x %s] >168 string x UUID: %s @ 1.1.1.4.2.1 log @Pull up following revision(s) (requested by pooka in ticket #1804): dist/file/: synced with HEAD on 20070615 distrib/sets/lists/base/shl.elf: revision 1.222 distrib/sets/lists/base/shl.mi: revision 1.375 via patch lib/Makefile: revision 1.108 via patch lib/libmagic/Makefile: revision 1.5 lib/libmagic/config.h: patch lib/libmagic/shlib_version: revision 1.3-1.4 tools/file/Makefile: revision 1.4 usr.bin/file/Makefile: revision 1.51-1.53 Update file(1) to version 4.21, including security fixes (CVE-2007-1536 and CVE-2007-2799). @ text @a55 3 # From: Jeff Bailey # Linux swap file with swsusp1 image, from Jeff Bailey 4076 string SWAPSPACE2S1SUSPEND Linux/i386 swap file (new style) with SWSUSP1 image a59 2 >>4086 string SWAPSPACE2 >>>1052 string >\0 Label %s d82 1 a82 1 >>518 leshort >=0x200 a180 63 0 string OOOM User-Mode-Linux's Copy-On-Write disk image >4 belong x version %d # SE Linux policy database # From: Mike Frysinger 0 lelong 0xf97cff8c SE Linux policy >16 lelong x v%d >20 lelong 1 MLS >24 lelong x %d symbols >28 lelong x %d ocons # Linux Logical Volume Manager (LVM) # Emmanuel VARAGNAT # # System ID, UUID and volume group name are 128 bytes long # but they should never be full and initialized with zeros... # # LVM1 # 0x0 string HM\001 LVM1 (Linux Logical Volume Manager), version 1 >0x12c string >\0 , System ID: %s 0x0 string HM\002 LVM1 (Linux Logical Volume Manager), version 2 >0x12c string >\0 , System ID: %s # LVM2 # # It seems that the label header can be in one the four first sector # of the disk... (from _find_labeller in lib/label/label.c of LVM2) # # 0x200 seems to be the common case 0x218 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) # read the offset to add to the start of the header, and the header # start in 0x200 >(0x214.l+0x200) string >\0 , UUID: %s 0x018 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x014.l) string >\0 , UUID: %s 0x418 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x414.l+0x400) string >\0 , UUID: %s 0x618 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x614.l+0x600) string >\0 , UUID: %s # SE Linux policy database 0 lelong 0xf97cff8c SE Linux policy >16 lelong x v%d >20 lelong 1 MLS >24 lelong x %d symbols >28 lelong x %d ocons # LUKS: Linux Unified Key Setup, On-Disk Format, http://luks.endorphin.org/spec # Anthon van der Neut (anthon@@mnt.org) 0 string LUKS\xba\xbe LUKS encrypted file, >6 beshort x ver %d >8 string x [%s, >40 string x %s, >72 string x %s] >168 string x UUID: %s @ 1.1.1.5 log @file 4.16 Changes since 4.13: * DragonFly ELF note support * read buffer dynamically allocated * Add -h flag and dereference symlinks if POSIXLY_CORRECT * Avoid search and regex buffer overflows * cross-compilation fixes * don't close stdin in the library. * search for elf notes in shared libraries too. Now with more magic than ever before! @ text @a55 3 # From: Jeff Bailey # Linux swap file with swsusp1 image, from Jeff Bailey 4076 string SWAPSPACE2S1SUSPEND Linux/i386 swap file (new style) with SWSUSP1 image a59 2 >>4086 string SWAPSPACE2 >>>1052 string >\0 Label %s a180 46 0 string OOOM User-Mode-Linux's Copy-On-Write disk image >4 belong x version %d # SE Linux policy database # From: Mike Frysinger 0 lelong 0xf97cff8c SE Linux policy >16 lelong x v%d >20 lelong 1 MLS >24 lelong x %d symbols >28 lelong x %d ocons # Linux Logical Volume Manager (LVM) # Emmanuel VARAGNAT # # System ID, UUID and volume group name are 128 bytes long # but they should never be full and initialized with zeros... # # LVM1 # 0x0 string HM\001 LVM1 (Linux Logical Volume Manager), version 1 >0x12c string >\0 , System ID: %s 0x0 string HM\002 LVM1 (Linux Logical Volume Manager), version 2 >0x12c string >\0 , System ID: %s # LVM2 # # It seems that the label header can be in one the four first sector # of the disk... (from _find_labeller in lib/label/label.c of LVM2) # # 0x200 seems to be the common case 0x218 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) # read the offset to add to the start of the header, and the header # start in 0x200 >(0x214.l+0x200) string >\0 , UUID: %s 0x018 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x014.l) string >\0 , UUID: %s 0x418 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x414.l+0x400) string >\0 , UUID: %s 0x618 string LVM2\ 001 LVM2 (Linux Logical Volume Manager) >(0x614.l+0x600) string >\0 , UUID: %s @ 1.1.1.6 log @file 4.18 changes since 4.16: bugfixes, magic improvements, other minor improvements @ text @d87 1 a87 1 >>518 leshort >=0x200 @ 1.1.1.6.4.1 log @Sync w/ NetBSD-4-RC_1 @ text @a231 17 # SE Linux policy database 0 lelong 0xf97cff8c SE Linux policy >16 lelong x v%d >20 lelong 1 MLS >24 lelong x %d symbols >28 lelong x %d ocons # LUKS: Linux Unified Key Setup, On-Disk Format, http://luks.endorphin.org/spec # Anthon van der Neut (anthon@@mnt.org) 0 string LUKS\xba\xbe LUKS encrypted file, >6 beshort x ver %d >8 string x [%s, >40 string x %s, >72 string x %s] >168 string x UUID: %s @ 1.1.1.6.2.1 log @Pull up following (requested by pooka in ticket #724): bring file(1) to 4.21 @ text @a231 17 # SE Linux policy database 0 lelong 0xf97cff8c SE Linux policy >16 lelong x v%d >20 lelong 1 MLS >24 lelong x %d symbols >28 lelong x %d ocons # LUKS: Linux Unified Key Setup, On-Disk Format, http://luks.endorphin.org/spec # Anthon van der Neut (anthon@@mnt.org) 0 string LUKS\xba\xbe LUKS encrypted file, >6 beshort x ver %d >8 string x [%s, >40 string x %s, >72 string x %s] >168 string x UUID: %s @ 1.1.1.7 log @file 4.20, contains fixes to the magic parser, new syntax and a buffer overflow fix @ text @a231 7 # SE Linux policy database 0 lelong 0xf97cff8c SE Linux policy >16 lelong x v%d >20 lelong 1 MLS >24 lelong x %d symbols >28 lelong x %d ocons @ 1.1.1.8 log @file 4.21. bugfixes @ text @a238 10 # LUKS: Linux Unified Key Setup, On-Disk Format, http://luks.endorphin.org/spec # Anthon van der Neut (anthon@@mnt.org) 0 string LUKS\xba\xbe LUKS encrypted file, >6 beshort x ver %d >8 string x [%s, >40 string x %s, >72 string x %s] >168 string x UUID: %s @ 1.1.1.8.12.1 log @Sync with wrstuden-revivesa-base-2. @ text @d1 1 d87 1 a87 1 >>518 leshort >0x1ff d106 1 a106 1 8 search/1 \ A\ _text Linux kernel symbol map text d109 2 a110 2 0 search/1 Begin3 Linux Software Map entry text 0 search/1 Begin4 Linux Software Map entry text (new format) d112 4 a115 6 # From Matt Zimmerman, enhanced for v3 by Matthew Palmer 0 belong 0x4f4f4f4d User-mode Linux COW file >4 belong <3 \b, version %d >>8 string >\0 \b, backing file %s >4 belong >2 \b, version %d >>32 string >\0 \b, backing file %s a232 8 # LVM snapshot # from Jason Farrel 0 string SnAp LVM Snapshot (CopyOnWrite store) >4 lelong !0 - valid, >4 lelong 0 - invalid, >8 lelong x version %d, >12 lelong x chunk_size %d a248 7 # Summary: Xen saved domain file # Created by: Radek Vokal 0 string LinuxGuestRecord Xen saved domain >20 search/256 (name >>&1 string x (name %s) @ 1.1.1.9 log @try-again for file-4.26 @ text @d1 1 d87 1 a87 1 >>518 leshort >0x1ff d106 1 a106 1 8 search/1 \ A\ _text Linux kernel symbol map text d109 2 a110 2 0 search/1 Begin3 Linux Software Map entry text 0 search/1 Begin4 Linux Software Map entry text (new format) d112 4 a115 6 # From Matt Zimmerman, enhanced for v3 by Matthew Palmer 0 belong 0x4f4f4f4d User-mode Linux COW file >4 belong <3 \b, version %d >>8 string >\0 \b, backing file %s >4 belong >2 \b, version %d >>32 string >\0 \b, backing file %s a232 8 # LVM snapshot # from Jason Farrel 0 string SnAp LVM Snapshot (CopyOnWrite store) >4 lelong !0 - valid, >4 lelong 0 - invalid, >8 lelong x version %d, >12 lelong x chunk_size %d a248 7 # Summary: Xen saved domain file # Created by: Radek Vokal 0 string LinuxGuestRecord Xen saved domain >20 search/256 (name >>&1 string x (name %s) @