From 31245d71d9d279b649f5a13c2aee60525266d8f6 Mon Sep 17 00:00:00 2001 From: Hajin Jang Date: Mon, 24 Aug 2020 11:02:34 +0900 Subject: [PATCH] Disable simplest COM signature to avoid FP The simplest COM signature causes false-positive on EUC-KR text files. Disable it to avoid misidentification. --- magic/Magdir/msdos | 24 +++++++++++++----------- 1 file changed, 13 insertions(+), 11 deletions(-) diff --git a/magic/Magdir/msdos b/magic/Magdir/msdos index 8bf85892..0b7993ff 100644 --- a/magic/Magdir/msdos +++ b/magic/Magdir/msdos @@ -565,17 +565,19 @@ # syslinux version (4.x) # "COM executable (COM32R)" or "Syslinux COM32 module" by TrID >>>1 lelong 0x21CD4CFe \b, relocatable) -# remaining are DOS COM executables starting with assembler instruction MOV -# like FreeDOS BANNER*.COM FINDDISK.COM GIF2RAW.COM WINCHK.COM -# MS-DOS SYS.COM RESTART.COM -# SYSLINUX.COM (version 1.40 - 2.13) -# GFXBOOT.COM (version 3.75) -# COPYBS.COM POWEROFF.COM INT18.COM ->>1 default x COM executable for DOS -!:mime application/x-dosexec -#!:mime application/x-ms-dos-executable -#!:mime application/x-msdos-program -!:ext com +# Hajin Jang : +# Disable simplest COM signature to prevent false positive on some EUC-KR text files. +## remaining are DOS COM executables starting with assembler instruction MOV +## like FreeDOS BANNER*.COM FINDDISK.COM GIF2RAW.COM WINCHK.COM +## MS-DOS SYS.COM RESTART.COM +## SYSLINUX.COM (version 1.40 - 2.13) +## GFXBOOT.COM (version 3.75) +## COPYBS.COM POWEROFF.COM INT18.COM +#>>1 default x COM executable for DOS +#!:mime application/x-dosexec +##!:mime application/x-ms-dos-executable +##!:mime application/x-msdos-program +#!:ext com # URL: https://en.wikipedia.org/wiki/UPX # Reference: https://github.com/upx/upx/archive/v3.96.zip/upx-3.96/ -- 2.28.0.windows.1