From: Christos Zoulas <christos@zoulas.com>
Date: Mon, 9 Nov 2015 16:57:19 +0000 (+0000)
Subject: Add java hprof dumps (Christoph Biedl)
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=bfe21c0388e98facba619cc19a76d7892a4814c9;p=file

Add java hprof dumps (Christoph Biedl)
---

diff --git a/magic/Magdir/java b/magic/Magdir/java
index b09302ee..2243be9f 100644
--- a/magic/Magdir/java
+++ b/magic/Magdir/java
@@ -1,6 +1,6 @@
 
 #------------------------------------------------------------
-# $File: java,v 1.16 2013/09/24 20:22:03 christos Exp $
+# $File: java,v 1.17 2015/11/09 16:57:19 christos Exp $
 # Java ByteCode and Mach-O binaries (e.g., Mac OS X) use the
 # same magic number, 0xcafebabe, so they are both handled
 # in the entry called "cafebabe".
@@ -18,3 +18,10 @@
 # Java source
 0	regex	^import.*;$	Java source
 !:mime	text/x-java
+
+# Java HPROF dumps
+# https://java.net/downloads/heap-snapshot/hprof-binary-format.html
+0	string		JAVA\x20PROFILE\x201.0.
+>0x12	short		0
+>>0x11	ushort-0x31	<2      Java HPROF dump,
+>>0x17	beqdate/1000	x       created %s