head 1.2; access; symbols perseant-exfatfs-base-20250801:1.2 perseant-exfatfs-base-20240630:1.2 perseant-exfatfs:1.2.0.22 perseant-exfatfs-base:1.2 cjep_sun2x:1.2.0.20 cjep_sun2x-base:1.2 cjep_staticlib_x-base1:1.2 cjep_staticlib_x:1.2.0.18 cjep_staticlib_x-base:1.2 phil-wifi-20200421:1.2 phil-wifi-20200411:1.2 phil-wifi-20200406:1.2 pgoyette-compat-merge-20190127:1.2 pgoyette-compat-20190127:1.2 pgoyette-compat-20190118:1.2 pgoyette-compat-1226:1.2 pgoyette-compat-1126:1.2 pgoyette-compat-1020:1.2 pgoyette-compat-0930:1.2 pgoyette-compat-0906:1.2 pgoyette-compat-0728:1.2 pgoyette-compat-0625:1.2 pgoyette-compat-0521:1.2 pgoyette-compat-0502:1.2 pgoyette-compat-0422:1.2 pgoyette-compat-0415:1.2 pgoyette-compat-0407:1.2 pgoyette-compat-0330:1.2 pgoyette-compat-0322:1.2 pgoyette-compat-0315:1.2 pgoyette-compat:1.2.0.16 pgoyette-compat-base:1.2 prg-localcount2-base3:1.2 prg-localcount2-base2:1.2 prg-localcount2-base1:1.2 prg-localcount2:1.2.0.14 prg-localcount2-base:1.2 pgoyette-localcount-20170426:1.2 bouyer-socketcan-base1:1.2 pgoyette-localcount-20170320:1.2 bouyer-socketcan:1.2.0.12 bouyer-socketcan-base:1.2 pgoyette-localcount-20170107:1.2 pgoyette-localcount-20161104:1.2 localcount-20160914:1.2 pgoyette-localcount-20160806:1.2 pgoyette-localcount-20160726:1.2 pgoyette-localcount:1.2.0.10 pgoyette-localcount-base:1.2 netbsd-5-2-3-RELEASE:1.1.1.4 netbsd-5-1-5-RELEASE:1.1.1.4 yamt-pagecache-base9:1.2 yamt-pagecache-tag8:1.2 tls-earlyentropy:1.2.0.6 tls-earlyentropy-base:1.2 riastradh-xf86-video-intel-2-7-1-pre-2-21-15:1.2 riastradh-drm2-base3:1.2 netbsd-5-2-2-RELEASE:1.1.1.4 netbsd-5-1-4-RELEASE:1.1.1.4 netbsd-5-2-1-RELEASE:1.1.1.4 netbsd-5-1-3-RELEASE:1.1.1.4 agc-symver:1.2.0.8 agc-symver-base:1.2 tls-maxphys-base:1.2 yamt-pagecache-base8:1.2 netbsd-5-2:1.1.1.4.0.2 yamt-pagecache-base7:1.2 netbsd-5-2-RELEASE:1.1.1.4 netbsd-5-2-RC1:1.1.1.4 yamt-pagecache-base6:1.2 yamt-pagecache-base5:1.2 yamt-pagecache-base4:1.2 netbsd-5-1-2-RELEASE:1.1.1.4 netbsd-5-1-1-RELEASE:1.1.1.4 yamt-pagecache-base3:1.2 yamt-pagecache-base2:1.2 yamt-pagecache:1.2.0.4 yamt-pagecache-base:1.2 bouyer-quota2-nbase:1.2 bouyer-quota2:1.2.0.2 bouyer-quota2-base:1.2 matt-nb5-mips64-premerge-20101231:1.1.1.4 matt-nb5-pq3:1.1.1.4.0.14 matt-nb5-pq3-base:1.1.1.4 netbsd-5-1:1.1.1.4.0.12 netbsd-5-1-RELEASE:1.1.1.4 netbsd-5-1-RC4:1.1.1.4 matt-nb5-mips64-k15:1.1.1.4 netbsd-5-1-RC3:1.1.1.4 netbsd-5-1-RC2:1.1.1.4 netbsd-5-1-RC1:1.1.1.4 netbsd-5-0-2-RELEASE:1.1.1.4 matt-nb5-mips64-premerge-20091211:1.1.1.4 matt-nb5-mips64-u2-k2-k4-k7-k8-k9:1.1.1.4 matt-nb4-mips64-k7-u2a-k9b:1.1.1.4 matt-nb5-mips64-u1-k1-k5:1.1.1.4 matt-nb5-mips64:1.1.1.4.0.10 netbsd-5-0-1-RELEASE:1.1.1.4 jym-xensuspend-nbase:1.1.1.4 netbsd-5-0:1.1.1.4.0.8 netbsd-5-0-RELEASE:1.1.1.4 netbsd-5-0-RC4:1.1.1.4 netbsd-5-0-RC3:1.1.1.4 netbsd-5-0-RC2:1.1.1.4 jym-xensuspend:1.1.1.4.0.6 jym-xensuspend-base:1.1.1.4 netbsd-5-0-RC1:1.1.1.4 netbsd-5:1.1.1.4.0.4 netbsd-5-base:1.1.1.4 matt-mips64-base2:1.1.1.4 matt-mips64:1.1.1.3.0.20 netbsd-4-0-1-RELEASE:1.1.1.3 wrstuden-revivesa-base-3:1.1.1.4 wrstuden-revivesa-base-2:1.1.1.4 wrstuden-fixsa-newbase:1.1.1.3 FILE4_26:1.1.1.4 wrstuden-revivesa-base-1:1.1.1.3 yamt-pf42-base4:1.1.1.3 yamt-pf42-base3:1.1.1.3 hpcarm-cleanup-nbase:1.1.1.3 yamt-pf42-baseX:1.1.1.3 yamt-pf42-base2:1.1.1.3 wrstuden-revivesa:1.1.1.3.0.18 wrstuden-revivesa-base:1.1.1.3 yamt-pf42:1.1.1.3.0.16 yamt-pf42-base:1.1.1.3 keiichi-mipv6:1.1.1.3.0.14 keiichi-mipv6-base:1.1.1.3 matt-armv6-nbase:1.1.1.3 matt-armv6-prevmlocking:1.1.1.3 wrstuden-fixsa-base-1:1.1.1.3 netbsd-4-0:1.1.1.3.0.12 netbsd-4-0-RELEASE:1.1.1.3 cube-autoconf:1.1.1.3.0.10 cube-autoconf-base:1.1.1.3 netbsd-4-0-RC5:1.1.1.3 netbsd-4-0-RC4:1.1.1.3 netbsd-4-0-RC3:1.1.1.3 netbsd-4-0-RC2:1.1.1.3 netbsd-4-0-RC1:1.1.1.3 matt-armv6:1.1.1.3.0.8 matt-armv6-base:1.1.1.3 matt-mips64-base:1.1.1.3 hpcarm-cleanup:1.1.1.3.0.6 hpcarm-cleanup-base:1.1.1.3 netbsd-3-1-1-RELEASE:1.1.1.1.12.1 netbsd-3-0-3-RELEASE:1.1.1.1.10.1 FILE4_21:1.1.1.3 wrstuden-fixsa:1.1.1.3.0.4 wrstuden-fixsa-base:1.1.1.3 FILE4_20:1.1.1.3 abandoned-netbsd-4-base:1.1.1.2 abandoned-netbsd-4:1.1.1.2.0.2 FILE4_18:1.1.1.3 netbsd-3-1:1.1.1.1.0.12 netbsd-3-1-RELEASE:1.1.1.1 netbsd-3-0-2-RELEASE:1.1.1.1 netbsd-3-1-RC4:1.1.1.1 netbsd-3-1-RC3:1.1.1.1 netbsd-3-1-RC2:1.1.1.1 netbsd-3-1-RC1:1.1.1.1 netbsd-4:1.1.1.3.0.2 netbsd-4-base:1.1.1.3 netbsd-3-0-1-RELEASE:1.1.1.1 netbsd-3-0:1.1.1.1.0.10 netbsd-3-0-RELEASE:1.1.1.1 netbsd-3-0-RC6:1.1.1.1 netbsd-3-0-RC5:1.1.1.1 netbsd-3-0-RC4:1.1.1.1 netbsd-3-0-RC3:1.1.1.1 netbsd-3-0-RC2:1.1.1.1 netbsd-3-0-RC1:1.1.1.1 netbsd-2-0-3-RELEASE:1.1.1.1 netbsd-2-1:1.1.1.1.0.8 netbsd-2-1-RELEASE:1.1.1.1 FILE4_16:1.1.1.2 netbsd-2-1-RC6:1.1.1.1 netbsd-2-1-RC5:1.1.1.1 netbsd-2-1-RC4:1.1.1.1 netbsd-2-1-RC3:1.1.1.1 netbsd-2-1-RC2:1.1.1.1 netbsd-2-1-RC1:1.1.1.1 netbsd-2-0-2-RELEASE:1.1.1.1 netbsd-3:1.1.1.1.0.6 netbsd-3-base:1.1.1.1 FILE4_13:1.1.1.1 FILE413-BEFOREIMPORT:1.1.1.1 netbsd-2-0-1-RELEASE:1.1.1.1 netbsd-2:1.1.1.1.0.4 netbsd-2-base:1.1.1.1 FILE4_12:1.1.1.1 netbsd-2-0-RELEASE:1.1.1.1 netbsd-2-0-RC5:1.1.1.1 netbsd-2-0-RC4:1.1.1.1 netbsd-2-0-RC3:1.1.1.1 netbsd-2-0-RC2:1.1.1.1 netbsd-2-0-RC1:1.1.1.1 FILE4_10:1.1.1.1 FILE4_09:1.1.1.1 netbsd-2-0:1.1.1.1.0.2 netbsd-2-0-base:1.1.1.1 FILE4_08:1.1.1.1 FILE4_06:1.1.1.1 FILE4_04:1.1.1.1 FILE4_03:1.1.1.1 FILE4_00:1.1.1.1 CHRISTOS:1.1.1; locks; strict; comment @# @; 1.2 date 2009.10.17.23.05.35; author snj; state dead; branches; next 1.1; 1.1 date 2003.03.25.22.30.28; author pooka; state Exp; branches 1.1.1.1; next ; 1.1.1.1 date 2003.03.25.22.30.28; author pooka; state Exp; branches 1.1.1.1.6.1 1.1.1.1.10.1 1.1.1.1.12.1; next 1.1.1.2; 1.1.1.2 date 2005.10.17.17.48.37; author pooka; state Exp; branches; next 1.1.1.3; 1.1.1.3 date 2006.10.31.20.34.57; author pooka; state Exp; branches 1.1.1.3.18.1; next 1.1.1.4; 1.1.1.4 date 2008.08.30.11.21.02; author christos; state Exp; branches; next ; 1.1.1.1.6.1 date 2007.06.24.19.41.55; author ghen; state Exp; branches; next ; 1.1.1.1.10.1 date 2007.06.24.19.43.24; author ghen; state Exp; branches; next ; 1.1.1.1.12.1 date 2007.06.24.19.45.21; author ghen; state Exp; branches; next ; 1.1.1.3.18.1 date 2008.09.18.04.44.40; author wrstuden; state Exp; branches; next ; desc @@ 1.2 log @This hasn't been used in a while. Long live external/bsd/file! @ text @ #------------------------------------------------------------------------------ # fsav: file(1) magic for datafellows fsav virus definition files # Anthon van der Neut (anthon@@mnt.org) 0 beshort 0x1575 fsav (linux) macro virus >8 leshort >0 (%d- >11 byte >0 \b%02d- >10 byte >0 \b%02d) # comment this out for now because it regognizes every file where # the eighth character is \n #8 byte 0x0a #>12 byte 0x07 #>11 leshort >0 fsav (linux) virus (%d- #>10 byte 0 \b01- #>10 byte 1 \b02- #>10 byte 2 \b03- #>10 byte 3 \b04- #>10 byte 4 \b05- #>10 byte 5 \b06- #>10 byte 6 \b07- #>10 byte 7 \b08- #>10 byte 8 \b08- #>10 byte 9 \b10- #>10 byte 10 \b11- #>10 byte 11 \b12- #>9 byte >0 \b%02d) @ 1.1 log @Initial revision @ text @@ 1.1.1.1 log @file 4.00 @ text @@ 1.1.1.1.12.1 log @Pull up following revision(s) (requested by pooka in ticket #1804): dist/file/: synced with HEAD on 20070615 distrib/sets/lists/base/shl.elf: revision 1.222 distrib/sets/lists/base/shl.mi: revision 1.375 via patch lib/Makefile: revision 1.108 via patch lib/libmagic/Makefile: revision 1.5 lib/libmagic/config.h: patch lib/libmagic/shlib_version: revision 1.3-1.4 tools/file/Makefile: revision 1.4 usr.bin/file/Makefile: revision 1.51-1.53 Update file(1) to version 4.21, including security fixes (CVE-2007-1536 and CVE-2007-2799). @ text @d5 1 a5 3 # ftp://ftp.f-prot.com/pub/{macrdef2.zip,nomacro.def} 0 beshort 0x1575 fsav macro virus signatures a8 29 # ftp://ftp.f-prot.com/pub/sign.zip #10 ubyte <12 #>9 ubyte <32 #>>8 ubyte 0x0a #>>>12 ubyte 0x07 #>>>>11 uleshort >0 fsav DOS/Windows virus signatures (%d- #>>>>10 byte 0 \b01- #>>>>10 byte 1 \b02- #>>>>10 byte 2 \b03- #>>>>10 byte 3 \b04- #>>>>10 byte 4 \b05- #>>>>10 byte 5 \b06- #>>>>10 byte 6 \b07- #>>>>10 byte 7 \b08- #>>>>10 byte 8 \b09- #>>>>10 byte 9 \b10- #>>>>10 byte 10 \b11- #>>>>10 byte 11 \b12- #>>>>9 ubyte >0 \b%02d) # ftp://ftp.f-prot.com/pub/sign2.zip #0 ubyte 0x62 #>1 ubyte 0xF5 #>>2 ubyte 0x1 #>>>3 ubyte 0x1 #>>>>4 ubyte 0x0e #>>>>>13 ubyte >0 fsav virus signatures #>>>>>>11 ubyte x size 0x%02x #>>>>>>12 ubyte x \b%02x #>>>>>>13 ubyte x \b%02x bytes d10 18 a27 20 # Joerg Jenderek: joerg dot jenderek at web dot de # http://www.clamav.net/doc/latest/html/node45.html # .cvd files start with a 512 bytes colon separated header # ClamAV-VDB:buildDate:version:signaturesNumbers:functionalityLevelRequired:MD5:Signature:builder:buildTime # + gzipped tarball files 0 string ClamAV-VDB: >11 string >\0 Clam AntiVirus database %-.23s >>34 string : >>>35 regex [^:]+ \b, version >>>>35 string x \b%-.1s >>>>>36 string !: >>>>>>36 string x \b%-.1s >>>>>>>37 string !: >>>>>>>>37 string x \b%-.1s >>>>>>>>>38 string !: >>>>>>>>>>38 string x \b%-.1s >>>>512 string \037\213 \b, gzipped >>>>769 string ustar\0 \b, tared >512 string \037\213 \b, gzipped >769 string ustar\0 \b, tared @ 1.1.1.1.10.1 log @Pull up following revision(s) (requested by pooka in ticket #1804): dist/file/: synced with HEAD on 20070615 distrib/sets/lists/base/shl.elf: revision 1.222 distrib/sets/lists/base/shl.mi: revision 1.375 via patch lib/Makefile: revision 1.108 via patch lib/libmagic/Makefile: revision 1.5 lib/libmagic/config.h: patch lib/libmagic/shlib_version: revision 1.3-1.4 tools/file/Makefile: revision 1.4 usr.bin/file/Makefile: revision 1.51-1.53 Update file(1) to version 4.21, including security fixes (CVE-2007-1536 and CVE-2007-2799). @ text @d5 1 a5 3 # ftp://ftp.f-prot.com/pub/{macrdef2.zip,nomacro.def} 0 beshort 0x1575 fsav macro virus signatures a8 29 # ftp://ftp.f-prot.com/pub/sign.zip #10 ubyte <12 #>9 ubyte <32 #>>8 ubyte 0x0a #>>>12 ubyte 0x07 #>>>>11 uleshort >0 fsav DOS/Windows virus signatures (%d- #>>>>10 byte 0 \b01- #>>>>10 byte 1 \b02- #>>>>10 byte 2 \b03- #>>>>10 byte 3 \b04- #>>>>10 byte 4 \b05- #>>>>10 byte 5 \b06- #>>>>10 byte 6 \b07- #>>>>10 byte 7 \b08- #>>>>10 byte 8 \b09- #>>>>10 byte 9 \b10- #>>>>10 byte 10 \b11- #>>>>10 byte 11 \b12- #>>>>9 ubyte >0 \b%02d) # ftp://ftp.f-prot.com/pub/sign2.zip #0 ubyte 0x62 #>1 ubyte 0xF5 #>>2 ubyte 0x1 #>>>3 ubyte 0x1 #>>>>4 ubyte 0x0e #>>>>>13 ubyte >0 fsav virus signatures #>>>>>>11 ubyte x size 0x%02x #>>>>>>12 ubyte x \b%02x #>>>>>>13 ubyte x \b%02x bytes d10 18 a27 20 # Joerg Jenderek: joerg dot jenderek at web dot de # http://www.clamav.net/doc/latest/html/node45.html # .cvd files start with a 512 bytes colon separated header # ClamAV-VDB:buildDate:version:signaturesNumbers:functionalityLevelRequired:MD5:Signature:builder:buildTime # + gzipped tarball files 0 string ClamAV-VDB: >11 string >\0 Clam AntiVirus database %-.23s >>34 string : >>>35 regex [^:]+ \b, version >>>>35 string x \b%-.1s >>>>>36 string !: >>>>>>36 string x \b%-.1s >>>>>>>37 string !: >>>>>>>>37 string x \b%-.1s >>>>>>>>>38 string !: >>>>>>>>>>38 string x \b%-.1s >>>>512 string \037\213 \b, gzipped >>>>769 string ustar\0 \b, tared >512 string \037\213 \b, gzipped >769 string ustar\0 \b, tared @ 1.1.1.1.6.1 log @Pull up following revision(s) (requested by pooka in ticket #1804): dist/file/: synced with HEAD on 20070615 distrib/sets/lists/base/shl.elf: revision 1.222 distrib/sets/lists/base/shl.mi: revision 1.375 via patch lib/Makefile: revision 1.108 via patch lib/libmagic/Makefile: revision 1.5 lib/libmagic/config.h: patch lib/libmagic/shlib_version: revision 1.3-1.4 tools/file/Makefile: revision 1.4 usr.bin/file/Makefile: revision 1.51-1.53 Update file(1) to version 4.21, including security fixes (CVE-2007-1536 and CVE-2007-2799). @ text @d5 1 a5 3 # ftp://ftp.f-prot.com/pub/{macrdef2.zip,nomacro.def} 0 beshort 0x1575 fsav macro virus signatures a8 29 # ftp://ftp.f-prot.com/pub/sign.zip #10 ubyte <12 #>9 ubyte <32 #>>8 ubyte 0x0a #>>>12 ubyte 0x07 #>>>>11 uleshort >0 fsav DOS/Windows virus signatures (%d- #>>>>10 byte 0 \b01- #>>>>10 byte 1 \b02- #>>>>10 byte 2 \b03- #>>>>10 byte 3 \b04- #>>>>10 byte 4 \b05- #>>>>10 byte 5 \b06- #>>>>10 byte 6 \b07- #>>>>10 byte 7 \b08- #>>>>10 byte 8 \b09- #>>>>10 byte 9 \b10- #>>>>10 byte 10 \b11- #>>>>10 byte 11 \b12- #>>>>9 ubyte >0 \b%02d) # ftp://ftp.f-prot.com/pub/sign2.zip #0 ubyte 0x62 #>1 ubyte 0xF5 #>>2 ubyte 0x1 #>>>3 ubyte 0x1 #>>>>4 ubyte 0x0e #>>>>>13 ubyte >0 fsav virus signatures #>>>>>>11 ubyte x size 0x%02x #>>>>>>12 ubyte x \b%02x #>>>>>>13 ubyte x \b%02x bytes d10 18 a27 20 # Joerg Jenderek: joerg dot jenderek at web dot de # http://www.clamav.net/doc/latest/html/node45.html # .cvd files start with a 512 bytes colon separated header # ClamAV-VDB:buildDate:version:signaturesNumbers:functionalityLevelRequired:MD5:Signature:builder:buildTime # + gzipped tarball files 0 string ClamAV-VDB: >11 string >\0 Clam AntiVirus database %-.23s >>34 string : >>>35 regex [^:]+ \b, version >>>>35 string x \b%-.1s >>>>>36 string !: >>>>>>36 string x \b%-.1s >>>>>>>37 string !: >>>>>>>>37 string x \b%-.1s >>>>>>>>>38 string !: >>>>>>>>>>38 string x \b%-.1s >>>>512 string \037\213 \b, gzipped >>>>769 string ustar\0 \b, tared >512 string \037\213 \b, gzipped >769 string ustar\0 \b, tared @ 1.1.1.2 log @file 4.16 Changes since 4.13: * DragonFly ELF note support * read buffer dynamically allocated * Add -h flag and dereference symlinks if POSIXLY_CORRECT * Avoid search and regex buffer overflows * cross-compilation fixes * don't close stdin in the library. * search for elf notes in shared libraries too. Now with more magic than ever before! @ text @d5 1 a5 3 # ftp://ftp.f-prot.com/pub/{macrdef2.zip,nomacro.def} 0 beshort 0x1575 fsav macro virus signatures d9 19 a27 29 # ftp://ftp.f-prot.com/pub/sign.zip #10 ubyte <12 #>9 ubyte <32 #>>8 ubyte 0x0a #>>>12 ubyte 0x07 #>>>>11 uleshort >0 fsav DOS/Windows virus signatures (%d- #>>>>10 byte 0 \b01- #>>>>10 byte 1 \b02- #>>>>10 byte 2 \b03- #>>>>10 byte 3 \b04- #>>>>10 byte 4 \b05- #>>>>10 byte 5 \b06- #>>>>10 byte 6 \b07- #>>>>10 byte 7 \b08- #>>>>10 byte 8 \b09- #>>>>10 byte 9 \b10- #>>>>10 byte 10 \b11- #>>>>10 byte 11 \b12- #>>>>9 ubyte >0 \b%02d) # ftp://ftp.f-prot.com/pub/sign2.zip #0 ubyte 0x62 #>1 ubyte 0xF5 #>>2 ubyte 0x1 #>>>3 ubyte 0x1 #>>>>4 ubyte 0x0e #>>>>>13 ubyte >0 fsav virus signatures #>>>>>>11 ubyte x size 0x%02x #>>>>>>12 ubyte x \b%02x #>>>>>>13 ubyte x \b%02x bytes @ 1.1.1.3 log @file 4.18 changes since 4.16: bugfixes, magic improvements, other minor improvements @ text @a39 21 # Joerg Jenderek: joerg dot jenderek at web dot de # http://www.clamav.net/doc/latest/html/node45.html # .cvd files start with a 512 bytes colon separated header # ClamAV-VDB:buildDate:version:signaturesNumbers:functionalityLevelRequired:MD5:Signature:builder:buildTime # + gzipped tarball files 0 string ClamAV-VDB: >11 string >\0 Clam AntiVirus database %-.23s >>34 string : >>>35 regex [^:]+ \b, version >>>>35 string x \b%-.1s >>>>>36 string !: >>>>>>36 string x \b%-.1s >>>>>>>37 string !: >>>>>>>>37 string x \b%-.1s >>>>>>>>>38 string !: >>>>>>>>>>38 string x \b%-.1s >>>>512 string \037\213 \b, gzipped >>>>769 string ustar\0 \b, tared >512 string \037\213 \b, gzipped >769 string ustar\0 \b, tared @ 1.1.1.3.18.1 log @Sync with wrstuden-revivesa-base-2. @ text @d49 1 a49 1 >>>35 string !: \b, version d57 2 d60 1 a60 5 >769 string ustar\0 \b, tarred # Type: Grisoft AVG AntiVirus # From: David Newgas 0 string AVG7_ANTIVIRUS_VAULT_FILE AVG 7 Antivirus vault file data @ 1.1.1.4 log @try-again for file-4.26 @ text @d49 1 a49 1 >>>35 string !: \b, version d57 2 d60 1 a60 5 >769 string ustar\0 \b, tarred # Type: Grisoft AVG AntiVirus # From: David Newgas 0 string AVG7_ANTIVIRUS_VAULT_FILE AVG 7 Antivirus vault file data @