From 9aae79664a20cbb1d21bbfbbaa5bf0dacd41da2e Mon Sep 17 00:00:00 2001 From: Christos Zoulas Date: Mon, 12 Mar 2001 05:05:00 +0000 Subject: [PATCH] new magic files. --- magic/Magdir/animation | 30 ++++++++++++++++++++++++++++++ magic/Magdir/archive | 15 +++++++++++++++ magic/Magdir/dyadic | 12 ++++++++++++ magic/Magdir/editors | 9 +++++++++ magic/Magdir/elf | 20 +++++++++++++++++++- magic/Magdir/hitachi-sh | 18 ++++++++++++++++++ magic/Magdir/images | 39 +++++++++++++++++++++++++++++++++++++++ magic/Magdir/lisp | 5 +++-- magic/Magdir/msdos | 12 +++++++----- magic/Magdir/parix | 12 ++++++++++++ magic/Magdir/tuxedo | 7 +++++++ 11 files changed, 171 insertions(+), 8 deletions(-) create mode 100644 magic/Magdir/dyadic create mode 100644 magic/Magdir/editors create mode 100644 magic/Magdir/hitachi-sh create mode 100644 magic/Magdir/parix create mode 100644 magic/Magdir/tuxedo diff --git a/magic/Magdir/animation b/magic/Magdir/animation index de0bf518..ea69ecc0 100644 --- a/magic/Magdir/animation +++ b/magic/Magdir/animation @@ -140,3 +140,33 @@ 0 string MOVI Silicon Graphics movie file 4 string moov Apple QuickTime movie file (moov) 4 string mdat Apple QuickTime movie file (mdat) + +# iso 13818 transport stream +# +# from Oskar Schirmer Feb 3, 2001 (ISO 13818.1) +# (the following is a little bit restrictive and works fine for a stream +# that starts with PAT properly. it won't work for stream data, that is +# cut from an input device data right in the middle, but this shouldn't +# disturb) +# syncbyte 8 bit 0x47 +# error_ind 1 bit - +# payload_start 1 bit 1 +# priority 1 bit - +# PID 13 bit 0x0000 +# scrambling 2 bit - +# adaptfld_ctrl 2 bit 1 or 3 +# conti_count 4 bit 0 +0 belong&0xFF5FFF1F 0x47400010 MPEG transport stream data +>188 byte !0x47 CORRUPTED + +# ATARI ST relocatable PRG +# +# from Oskar Schirmer Feb 3, 2001 +# (according to Roland Waldi, Oct 21, 1987) +# besides the magic 0x601a, the text segment size is checked to be +# not larger than 1 MB (which is a lot on ST). +0 belong&0xFFFFFFF0 0x601A0000 Atari ST M68K executable +>2 belong x (txt=%ld, +>6 belong x dat=%ld, +>10 belong x bss=%ld, +>14 belong x sym=%ld) diff --git a/magic/Magdir/archive b/magic/Magdir/archive index 2c663d6f..ae2be717 100644 --- a/magic/Magdir/archive +++ b/magic/Magdir/archive @@ -234,3 +234,18 @@ # http://www.XCF.Berkeley.EDU/~jmacd/prcs.html) generates a packaged project # file which is recognized by the following entry: 0 leshort 0xeb81 PRCS packaged project + +# Microsoft cabinets +# by David Necas (Yeti) +0 string MSCF\0\0\0\0 Microsoft cabinet file data, +>25 byte x v%d +>24 byte x \b.%d + +# GTKtalog catalogs +# by David Necas (Yeti) +0 lelong <20 +>4 string gtktalog\ GTKtalog catalog data, +>>13 string 3 version 3 +>>>14 beshort 0x677a (gzipped) +>>>14 beshort !0x677a (not gzipped) +>>13 string >3 version %s diff --git a/magic/Magdir/dyadic b/magic/Magdir/dyadic new file mode 100644 index 00000000..e8a9d25d --- /dev/null +++ b/magic/Magdir/dyadic @@ -0,0 +1,12 @@ + +#------------------------------------------------------------------------------ +# Dyadic: file(1) magic for Dyalog APL. +# +0 byte 0xaa +>1 byte <4 Dyalog APL +>>1 byte 0x00 incomplete workspace +>>1 byte 0x01 component file +>>1 byte 0x02 external variable +>>1 byte 0x03 workspace +>>2 byte x version %d +>>3 byte x .%d diff --git a/magic/Magdir/editors b/magic/Magdir/editors new file mode 100644 index 00000000..c529d0df --- /dev/null +++ b/magic/Magdir/editors @@ -0,0 +1,9 @@ + +#------------------------------------------------------------------------------ +# T602 editor documents +# by David Necas +0 string @CT\ T602 document data, +>4 string 0 Kamenicky +>4 string 1 CP 852 +>4 string 2 KOI8-CS +>4 string >2 unknown encoding diff --git a/magic/Magdir/elf b/magic/Magdir/elf index df7eab85..25bd07bd 100644 --- a/magic/Magdir/elf +++ b/magic/Magdir/elf @@ -61,6 +61,8 @@ >>18 leshort 10 MIPS R3000_LE, >>18 leshort 11 RS6000 - invalid byte order, >>18 leshort 15 PA-RISC - invalid byte order, +>>>50 leshort 0x0214 2.0 +>>>48 leshort &0x0008 (LP64), >>18 leshort 16 nCUBE, >>18 leshort 17 Fujitsu VPP500, >>18 leshort 18 SPARC32PLUS, @@ -89,6 +91,20 @@ >>20 lelong 1 version 1 >>36 lelong 1 MathCoPro/FPU/MAU Required >8 string >\0 (%s) +>8 string \0 (%s) +>>7 byte 0 (SYSV) +>>7 byte 1 (HP-UX) +>>7 byte 2 (NetBSD) +>>7 byte 3 (GNU/Linux) +>>7 byte 4 (GNU/Hurd) +>>7 byte 5 (86Open) +>>7 byte 6 (Solaris) +>>7 byte 7 (Monterey) +>>7 byte 8 (IRIX) +>>7 byte 9 (FreeBSD) +>>7 byte 10 (Tru64) +>>7 byte 97 (ARM) +>>7 byte 255 (embedded) >5 byte 2 MSB # only for MIPS R3000_BE >>18 beshort 8 @@ -128,7 +144,9 @@ >>18 beshort 9 Amdahl, >>18 beshort 10 MIPS R3000_LE - invalid byte order, >>18 beshort 11 RS6000, ->>18 beshort 15 PA-RISC, +>>18 beshort 15 PA-RISC +>>>50 beshort 0x0214 2.0 +>>>48 beshort &0x0008 (LP64) >>18 beshort 16 nCUBE, >>18 beshort 17 Fujitsu VPP500, >>18 beshort 18 SPARC32PLUS, diff --git a/magic/Magdir/hitachi-sh b/magic/Magdir/hitachi-sh new file mode 100644 index 00000000..136c0383 --- /dev/null +++ b/magic/Magdir/hitachi-sh @@ -0,0 +1,18 @@ + +#------------------------------------------------------------------------------ +# hitach-sh: file(1) magic for Hitachi Super-H +# +# Super-H COFF +# +0 beshort 0x0500 Hitachi SH big-endian COFF +>18 beshort&0x0002 =0x0000 object +>18 beshort&0x0002 =0x0002 executable +>18 beshort&0x0008 =0x0000 \b, stripped +>18 beshort&0x0008 =0x0008 \b, not stripped +# +0 leshort 0x0550 Hitachi SH little-endian COFF +>18 leshort&0x0002 =0x0000 object +>18 leshort&0x0002 =0x0002 executable +>18 leshort&0x0008 =0x0000 \b, stripped +>18 leshort&0x0008 =0x0008 \b, not stripped + diff --git a/magic/Magdir/images b/magic/Magdir/images index 3d8fc982..9347b45a 100644 --- a/magic/Magdir/images +++ b/magic/Magdir/images @@ -261,3 +261,42 @@ # DICOM medical imaging data 128 string DICM DICOM medical imaging data + +# XWD - X-Windows Dump file. +# As described in /usr/X11R6/include/X11/XWDFile.h +# used by the xwd program. +# Bradford Castalia, idaeim, 1/01 +4 belong 7 XWD X-Widows Dump image data +>100 string >\0 \b, "%s" +>16 belong x \b, %dx +>20 belong x \b%dx +>12 belong x \b%d + +# PDS - Planetary Data System +# These files use Parameter Value Language in the header section. +# Unfortunately, there is no certain magic, but the following +# strings have been found to be most likely. +0 string NJPL1I00 PDS (JPL) image data +2 string NJPL1I PDS (JPL) image data +0 string CCSD3ZF PDS (CCSD) image data +2 string CCSD3Z PDS (CCSD) image data +0 string PDS_ PDS image data +0 string LBLSIZE= PDS (VICAR) image data + +0 string GSTIm GNU SmallTalk image file + +# pM8x: ATARI STAD compressed bitmap format +# +# from Oskar Schirmer Feb 2, 2001 +# p M 8 5/6 xx yy zz data... +# Atari ST STAD bitmap is always 640x400, bytewise runlength compressed. +# bytes either run horizontally (pM85) or vertically (pM86). yy is the +# most frequent byte, xx and zz are runlength escape codes, where xx is +# used for runs of yy. +# +0 string pM85 Atari ST STAD bitmap image data (hor) +>5 byte 0x00 (white background) +>5 byte 0xFF (black background) +0 string pM86 Atari ST STAD bitmap image data (vert) +>5 byte 0x00 (white background) +>5 byte 0xFF (black background) diff --git a/magic/Magdir/lisp b/magic/Magdir/lisp index 4064dab2..4e6c926b 100644 --- a/magic/Magdir/lisp +++ b/magic/Magdir/lisp @@ -6,8 +6,9 @@ 0 string ;; Lisp/Scheme program text # Emacs 18 - this is always correct, but not very magical. 0 string \012( byte-compiled Emacs-Lisp program data -# Emacs 19 -0 string ;ELC\023\000\000\000 byte-compiled Emacs-Lisp program data +# Emacs 19+ - ver. recognition added by Ian Springer +0 string ;ELC byte-compiled Emacs-Lisp program data, +>4 byte >0 version %d # # Files produced by CLISP Common Lisp From: Bruno Haible 0 string (SYSTEM::VERSION\040' CLISP byte-compiled Lisp program text diff --git a/magic/Magdir/msdos b/magic/Magdir/msdos index a161daee..b6804937 100644 --- a/magic/Magdir/msdos +++ b/magic/Magdir/msdos @@ -224,12 +224,14 @@ 0 string \114\000\000\000\001\024\002\000\000\000\000\000\300\000\000\000\000\000\000\106 ms-Windows shortcut #ico files -0 string \000\000\001\000\001\000\040\040\020\000\000\000\000\000\350\002\000\000 Icon for ms-windows -0 string \000\000\001\000\004\000\040\040\020\000\000\000\000\000\350\002 Icon for ms-windows 0 string \102\101\050\000\000\000\056\000\000\000\000\000\000\000 Icon for ms-windows -0 string \000\000\001\000\002\000\040\040\010\000\000\000\000\000\350\002 Icon for ms-windows -0 string \000\000\001\000\006\000\020\020\020\000\000\000\000\000\050\001 Icon for ms-windows -0 string \000\000\001\000\002\000\020\020\020\000\000\000\000\000\050\001 Icon for ms-windows +0 string \000\000\001\000 ms-windows icon resource +>4 byte 1 - 1 icon +>4 byte >1 - %d icons +>>6 byte >0 \b, %dx +>>>7 byte >0 \b%d +>>8 byte 0 \b, 256-colors +>>8 byte >0 \b, %d-colors # True Type fonts currently misidentified as raw G3 data diff --git a/magic/Magdir/parix b/magic/Magdir/parix new file mode 100644 index 00000000..09965d12 --- /dev/null +++ b/magic/Magdir/parix @@ -0,0 +1,12 @@ + +#------------------------------------------------------------------------------ +# +# Parix COFF executables +# From: Ignatios Souvatzis +# +0 beshort&0xfff 0xACE PARIX +>0 byte&0xf0 0x80 T800 +>0 byte&0xf0 0x90 T9000 +>19 byte&0x02 0x02 executable +>19 byte&0x02 0x00 object +>19 byte&0x0c 0x00 not stripped diff --git a/magic/Magdir/tuxedo b/magic/Magdir/tuxedo new file mode 100644 index 00000000..119afa6a --- /dev/null +++ b/magic/Magdir/tuxedo @@ -0,0 +1,7 @@ +# +#------------------------------------------------------------------------------ +# tuxedo: file(1) magic for BEA TUXEDO data files +# +# from Ian Springer +# +0 string \0\0\1\236\0\0\0\0\0\0\0\0\0\0\0\0 BEA TUXEDO DES mask data -- 2.50.1