contrib/file/magic/Magdir/misctools

   1
   2 #-----------------------------------------------------------------------------
   3 # $File: misctools,v 1.20 2021/05/25 15:13:55 christos Exp $
   4 # misctools:  file(1) magic for miscellaneous UNIX tools.
   5 #
   6 0       search/1        %%!!                    X-Post-It-Note text
   7 0       string/c        BEGIN:VCALENDAR         vCalendar calendar file
   8 !:mime  text/calendar
   9 # updated by Joerg Jenderek at Apr 2015, May 2021
  10 # https://en.wikipedia.org/wiki/VCard
  11 # URL:  http://fileformats.archiveteam.org/wiki/VCard
  12 # https://datatracker.ietf.org/doc/html/rfc6350
  13 # the value is case-insensitive
  14 0       string/c        begin:vcard
  15 # skip DROID fmt-395-signature-id-634.vcf
  16 >13     string          !VERSION:END            vCard visiting card
  17 # deprecated
  18 #!:mime text/x-vcard
  19 !:mime  text/vcard
  20 !:apple ????vCrd
  21 !:ext   vcf/vcard
  22 # VERSION must come right after BEGIN for 3.0 or 4.0 except in 2.1 , where it can be anywhere
  23 # Joerg_Jenderek_67.vcf
  24 >>12    search/0x113b4/c        version:
  25 # VERSION 2.1 , 3.0 or 4.0
  26 >>>&0   string          x                       \b, version %-.3s
  27 >>>&0   string          !2.1
  28 >>>>13  string          !VERSION:               \b, 2nd line does not start with VERSION:
  29 # downcase violates RFC 6350, but some "bad" software produce such vcards
  30 >>0     string          !BEGIN                  \b, not up case
  31 # http://ftp.mozilla.org/pub/thunderbird/candidates/
  32 # 78.10.1-candidates/build1/source/thunderbird-78.10.1.source.tar.xz
  33 # thunderbird-78.10.1/comm/mailnews/import/test/unit/resources/basic_vcard_addressbook.vcf
  34 >>11    beshort         !0x0D0A                 \b, lines not separated by CRLF
  35
  36 # Summary: Libtool library file
  37 # Extension: .la
  38 # Submitted by: Tomasz Trojanowski <tomek@uninet.com.pl>
  39 0       search/80       .la\ -\ a\ libtool\ library\ file       libtool library file
  40
  41 # Summary: Libtool object file
  42 # Extension: .lo
  43 # Submitted by: Abel Cheung <abelcheung@gmail.com>
  44 0       search/80       .lo\ -\ a\ libtool\ object\ file        libtool object file
  45
  46 # From: Daniel Novotny <dnovotny@redhat.com>
  47 # Update: Joerg Jenderek
  48 # URL: https://en.wikipedia.org/wiki/Core_dump#User-mode_memory_dumps
  49 # Reference: https://msdn.microsoft.com/en-us/library/ms680378%28VS.85%29.aspx
  50 #
  51 # "Windows Minidump" by TrID
  52 # ./misctools (version 5.25) labeled the entry as "MDMP crash report data"
  53 0       string          MDMP                                    Mini DuMP crash report
  54 # https://filext.com/file-extension/DMP
  55 !:mime  application/x-dmp
  56 !:ext   dmp/mdmp
  57 # The high-order word is an internal value that is implementation specific.
  58 # The low-order word is MINIDUMP_VERSION 0xA793
  59 >4      ulelong&0x0000FFFF      !0xA793                         \b, version %#4.4x
  60 # NumberOfStreams 8,9,10,13
  61 >8      ulelong                 x                               \b, %d streams
  62 # StreamDirectoryRva 0x20
  63 >12     ulelong                 !0x20                           \b, %#8.8x RVA
  64 # CheckSum 0
  65 >16     ulelong                 !0                              \b, CheckSum %#8.8x
  66 # Reserved or TimeDateStamp
  67 >20     ledate                  x                               \b, %s
  68 # https://msdn.microsoft.com/en-us/library/windows/desktop/ms680519%28v=vs.85%29.aspx
  69 # Flags MINIDUMP_TYPE enumeration type 0 0x121 0x800
  70 >24     ulelong                 x                               \b, %#x type
  71 # >24   ulelong                 >0                              \b; include
  72 # >>24  ulelong                 &0x00000001                     \b data sections,
  73 # >>24  ulelong                 &0x00000020                     \b list of unloaded modules,
  74 # >>24  ulelong                 &0x00000100                     \b process and thread information,
  75 # >>24  ulelong                 &0x00000800                     \b memory information,
  76
  77 # Summary: abook addressbook file
  78 # Submitted by: Mark Schreiber <mark7@alumni.cmu.edu>
  79 0       string  #\x20abook\x20addressbook\x20file abook address book
  80 !:mime application/x-abook-addressbook