mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
037d582b0e
- It's derived from the magic database of libmagic 5.14, but with most everything not related to mime types removed. - The custom database is always used by default for mime detection, but the more verbose file type detection will fall back on the default libmagic installation's database. The result is: mime type strings are now guaranteed to be consistent across platforms, but the verbose file type descriptions are not. - The custom database gets installed in $prefix/share/bro/magic, and should even be extensible if files with new patterns are added inside the directory. - The search path for the mime magic database can be controlled via BROMAGIC environment variable. - Remove mime_desc field from ftp.log. - Stop using the mime/file type canonifier with unit tests. - libmagic >= 5.04 is now a requirement.
31 lines
1.3 KiB
Text
31 lines
1.3 KiB
Text
# See COPYING file in this directory for original libmagic copyright.
|
|
#------------------------------------------------------------------------------
|
|
# $File: cafebabe,v 1.13 2013/02/26 21:04:38 christos Exp $
|
|
# Cafe Babes unite!
|
|
#
|
|
# Since Java bytecode and Mach-O universal binaries have the same magic number,
|
|
# the test must be performed in the same "magic" sequence to get both right.
|
|
# The long at offset 4 in a Mach-O universal binary tells the number of
|
|
# architectures; the short at offset 4 in a Java bytecode file is the JVM minor
|
|
# version and the short at offset 6 is the JVM major version. Since there are only
|
|
# only 18 labeled Mach-O architectures at current, and the first released
|
|
# Java class format was version 43.0, we can safely choose any number
|
|
# between 18 and 39 to test the number of architectures against
|
|
# (and use as a hack). Let's not use 18, because the Mach-O people
|
|
# might add another one or two as time goes by...
|
|
#
|
|
### JAVA START ###
|
|
0 belong 0xcafebabe
|
|
!:mime application/x-java-applet
|
|
|
|
0 belong 0xcafed00d JAR compressed with pack200,
|
|
>5 byte x version %d.
|
|
>4 byte x \b%d
|
|
!:mime application/x-java-pack200
|
|
|
|
0 belong 0xcafed00d JAR compressed with pack200,
|
|
>5 byte x version %d.
|
|
>4 byte x \b%d
|
|
!:mime application/x-java-pack200
|
|
|
|
### JAVA END ###
|