From e46a03fce43ba900c0773ea49ead691038b7102a Mon Sep 17 00:00:00 2001 From: Christos Zoulas Date: Mon, 9 Nov 2015 16:57:19 +0000 Subject: [PATCH] Add java hprof dumps (Christoph Biedl) --- magic/Magdir/java | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/magic/Magdir/java b/magic/Magdir/java index 94b9808d..6bcdf557 100644 --- a/magic/Magdir/java +++ b/magic/Magdir/java @@ -1,6 +1,6 @@ #------------------------------------------------------------ -# $File: java,v 1.15 2013/08/14 09:10:36 christos Exp $ +# $File: java,v 1.16 2013/09/24 20:22:03 christos Exp $ # Java ByteCode and Mach-O binaries (e.g., Mac OS X) use the # same magic number, 0xcafebabe, so they are both handled # in the entry called "cafebabe". @@ -18,3 +18,10 @@ # Java source 0 regex ^import.*;$ Java source !:mime text/x-java + +# Java HPROF dumps +# https://java.net/downloads/heap-snapshot/hprof-binary-format.html +0 string JAVA\x20PROFILE\x201.0. +>0x12 short 0 +>>0x11 ushort-0x31 <2 Java HPROF dump, +>>0x17 beqdate/1000 x created %s -- 2.40.0