From f04c6d19e687d9f9c357d1556ae2927cb12b5597 Mon Sep 17 00:00:00 2001 From: Christos Zoulas Date: Wed, 20 Apr 2011 18:55:31 +0000 Subject: [PATCH] move alpha stuff to digital (deduplicate) --- magic/Magdir/alpha | 32 ------------------------------ magic/Magdir/digital | 46 +++++++++++++++++++++++++++++--------------- 2 files changed, 30 insertions(+), 48 deletions(-) delete mode 100644 magic/Magdir/alpha diff --git a/magic/Magdir/alpha b/magic/Magdir/alpha deleted file mode 100644 index f1bdb6d7..00000000 --- a/magic/Magdir/alpha +++ /dev/null @@ -1,32 +0,0 @@ - -#------------------------------------------------------------------------------ -# $File: alpha,v 1.7 2009/09/19 16:28:07 christos Exp $ -# alpha architecture description -# - -0 leshort 0603 COFF format alpha ->22 leshort&030000 !020000 executable ->24 leshort 0410 pure ->24 leshort 0413 paged ->22 leshort&020000 !0 dynamically linked ->16 lelong !0 not stripped ->16 lelong 0 stripped ->22 leshort&030000 020000 shared library ->24 leshort 0407 object ->27 byte x - version %d ->26 byte x .%d ->28 byte x -%d - -# Basic recognition of Digital UNIX core dumps - Mike Bremford -# -# The actual magic number is just "Core", followed by a 2-byte version -# number; however, treating any file that begins with "Core" as a Digital -# UNIX core dump file may produce too many false hits, so we include one -# byte of the version number as well; DU 5.0 appears only to be up to -# version 2. -# -0 string Core\001 Alpha COFF format core dump (Digital UNIX) ->24 string >\0 \b, from '%s' -0 string Core\002 Alpha COFF format core dump (Digital UNIX) ->24 string >\0 \b, from '%s' - diff --git a/magic/Magdir/digital b/magic/Magdir/digital index 7f08b44e..940c48e2 100644 --- a/magic/Magdir/digital +++ b/magic/Magdir/digital @@ -1,26 +1,40 @@ #------------------------------------------------------------------------------ -# $File: digital,v 1.8 2009/09/19 16:28:08 christos Exp $ +# $File: digital,v 1.9 2011/04/20 18:55:31 christos Exp $ # Digital UNIX - Info # 0 string =!\n________64E Alpha archive >22 string X -- out of date # -# Alpha COFF Based Executables -# The stripped stuff really needs to be an 8 byte (64 bit) compare, -# but this works -0 leshort 0x183 COFF format alpha ->22 leshort&020000 &010000 sharable library, ->22 leshort&020000 ^010000 dynamically linked, ->24 leshort 0410 pure ->24 leshort 0413 demand paged ->8 lelong >0 executable or object module, not stripped ->8 lelong 0 ->>12 lelong 0 executable or object module, stripped ->>12 lelong >0 executable or object module, not stripped ->27 byte >0 - version %d. ->26 byte >0 %d- ->28 leshort >0 %d + +0 leshort 0603 +>>24 leshort 0410 COFF format alpha pure +>>24 leshort 0413 COFF format alpha demand paged +>>>22 leshort&030000 !020000 executable +>>>22 leshort&020000 !0 dynamically linked +>>>16 lelong !0 not stripped +>>>16 lelong 0 stripped +>>>27 byte x - version %d +>>>26 byte x .%d +>>>28 byte x -%d +>>24 leshort 0407 COFF format alpha object +>>>22 leshort&030000 020000 shared library +>>>27 byte x - version %d +>>>26 byte x .%d +>>>28 byte x -%d + +# Basic recognition of Digital UNIX core dumps - Mike Bremford +# +# The actual magic number is just "Core", followed by a 2-byte version +# number; however, treating any file that begins with "Core" as a Digital +# UNIX core dump file may produce too many false hits, so we include one +# byte of the version number as well; DU 5.0 appears only to be up to +# version 2. +# +0 string Core\001 Alpha COFF format core dump (Digital UNIX) +>24 string >\0 \b, from '%s' +0 string Core\002 Alpha COFF format core dump (Digital UNIX) +>24 string >\0 \b, from '%s' # # The next is incomplete, we could tell more about this format, # but its not worth it. -- 2.50.1