From: Christos Zoulas Date: Mon, 28 Sep 2009 21:26:59 +0000 (+0000) Subject: make minix magic stricter since it uses ascii printables at offset 410 X-Git-Tag: FILE5_05~141 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=7589a5d7ae8fc4874383797d8bcf38300f2f33ad;p=file make minix magic stricter since it uses ascii printables at offset 410 --- diff --git a/magic/Magdir/Localstuff b/magic/Magdir/Localstuff index 7662f3a4..f2d5446a 100644 --- a/magic/Magdir/Localstuff +++ b/magic/Magdir/Localstuff @@ -2,6 +2,6 @@ #------------------------------------------------------------------------------ # Localstuff: file(1) magic for locally observed files # -# $File: Localstuff,v 1.1 2009/09/27 19:02:46 christos Exp $ +# $File: Localstuff,v 1.2 2009/09/28 21:26:59 christos Exp $ # Add any locally observed files here. Remember: # text if readable, executable if runnable binary, data if unreadable. diff --git a/magic/Magdir/filesystems b/magic/Magdir/filesystems index 5159001f..3923e2b7 100644 --- a/magic/Magdir/filesystems +++ b/magic/Magdir/filesystems @@ -1,6 +1,6 @@ #------------------------------------------------------------------------------ -# $File: filesystems,v 1.52 2009/09/21 18:59:05 christos Exp $ +# $File: filesystems,v 1.53 2009/09/28 21:26:59 christos Exp $ # filesystems: file(1) magic for different filesystems # 0 string \366\366\366\366 PC formatted floppy with no filesystem @@ -883,13 +883,37 @@ # Minix filesystems - Juan Cespedes -0x410 leshort 0x137f Minix filesystem -0x410 beshort 0x137f Minix filesystem (big endian) ->0x402 beshort !0 \b, %d zones +0x410 leshort 0x137f +>0x402 beshort < 100 Minix filesystem, V1, %d zones +>0x1e string minix \b, bootable +0x410 beshort 0x137f +>0x402 beshort < 100 Minix filesystem, V1 (big endian), %d zones +>0x1e string minix \b, bootable +0x410 leshort 0x138f +>0x402 beshort < 100 Minix filesystem, V1, 30 char names, %d zones +>0x1e string minix \b, bootable +0x410 beshort 0x138f +>0x402 beshort < 100 Minix filesystem, V1, 30 char names (big endian), %d zones +>0x1e string minix \b, bootable +0x410 leshort 0x2468 +>0x402 beshort < 100 Minix filesystem, V2, %d zones +>0x1e string minix \b, bootable +0x410 beshort 0x2468 +>0x402 beshort < 100 Minix filesystem, V2 (big endian), %d zones +>0x1e string minix \b, bootable + +0x410 leshort 0x2478 +>0x402 beshort < 100 Minix filesystem, V2, 30 char names, %d zones +>0x1e string minix \b, bootable +0x410 leshort 0x2478 +>0x402 beshort < 100 Minix filesystem, V2, 30 char names, %d zones +>0x1e string minix \b, bootable +0x410 beshort 0x2478 +>0x402 beshort !0 Minix filesystem, V2, 30 char names (big endian), %d zones +>0x1e string minix \b, bootable +0x410 leshort 0x4d5a +>0x402 beshort !0 Minix filesystem, V3, %d zones >0x1e string minix \b, bootable -0x410 leshort 0x138f Minix filesystem, 30 char names -0x410 leshort 0x2468 Minix filesystem, version 2 -0x410 leshort 0x2478 Minix filesystem, version 2, 30 char names # romfs filesystems - Juan Cespedes 0 string -rom1fs- romfs filesystem, version 1 @@ -1324,39 +1348,6 @@ >4 belong x Header CRC: 0x%08X, >24 belong x Data CRC: 0x%08X ---------------060504020300020704030604 -Content-Type: text/sanitizer-log; charset="iso-8859-1" -Content-Transfer-Encoding: 8bit -Content-Disposition: attachment; filename="sanitizer.log" - -This message has been 'sanitized'. This means that potentially -dangerous content has been rewritten or removed. The following -log describes which actions were taken. - -Sanitizer (start="1253554299"): - Part (pos="1717"): - SanitizeFile (filename="unnamed.txt", mimetype="text/plain"): - Match (names="unnamed.txt", rule="2"): - Enforced policy: accept - - Part (pos="4665"): - SanitizeFile (filename="magic-uImage", mimetype="text/plain"): - Match (rule="default"): - Enforced policy: defang - - Replaced mime type with: application/DEFANGED-0 - Replaced file name with: magic-uImage.DEFANGED-0 - - Total modifications so far: 1 - - -Anomy 0.0.0 : Sanitizer.pm -$Id: filesystems,v 1.52 2009/09/21 18:59:05 christos Exp $ -$Id: filesystems,v 1.52 2009/09/21 18:59:05 christos Exp $ - ---------------060504020300020704030604-- - - # JFFS2 file system 0 leshort 0x1984 Linux old jffs2 filesystem data little endian 0 leshort 0x1985 Linux jffs2 filesystem data little endian