View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
134 [tcsh] General minor always 2020-01-29 07:00 2020-02-18 20:22
Reporter: Kazuo Kuroi Platform:  
Assigned To: christos OS:  
Priority: low OS Version:  
Status: assigned Product Version: 6.22.02  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: [tcsh 6.22.02] testsuite: 132 175 189 failed (IRIX 6.5.22/MIPSPro)
Description: I am reporting some testsuite issues for IRIX 6.5.22 using the MIPSPro compiler 7.4.4m on IRIX 6.5.22 (later versions are nearly identical for these cases, for the record)

configure command: % ./configure --disable-nls

CC=c99
Version info: % c99 --version
c99 ERROR: -- not allowed in non XPG4 environment
c99 ERROR parsing --version: unknown flag
MIPSpro Compilers: Version 7.4.4m

% uname -spR
IRIX 6.5 6.5.22m mips
Tags:
Steps To Reproduce: run configure command

make
make test
Additional Information: The release otherwise appears to be fine. I am more than happy to help troubleshoot the issue and if needed launch cvd (IRIX debugger)
Attached Files: testsuite.log (97,932 bytes) 2020-01-29 07:00
https://bugs.astron.com/file_download.php?file_id=100&type=bug
Notes
(0003378)
christos   
2020-02-18 20:22   
Can you try compiling without the optimizer? Or using gcc?

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
142 [tcsh] General major sometimes 2020-02-14 14:32 2020-02-18 20:20
Reporter: bitstreamout Platform: x86_64  
Assigned To: christos OS: linux  
Priority: normal OS Version:  
Status: assigned Product Version: 6.22.02  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Dot locking sometimes does block after reboot
Description: During reboot it happens sometimes that one of my open tcsh sesssions does not get enough time to write out history and got killed by systemd before the dot lock file had been removed. It would be a a solution to combine the dot locking method with fcntl(F_SETLKW/F_UNLCK) as this does work over NFS at least for Linux. This also would allow to avoid polling due waiting on F_SETLKW ...
Tags:
Steps To Reproduce: Open several tcsh sessions, do some work therein, and reboot
Additional Information:
Attached Files: tcsh-6.22.02-local-dotlock.dif (1,861 bytes) 2020-02-18 08:06
https://bugs.astron.com/file_download.php?file_id=122&type=bug
Notes
(0003371)
christos   
2020-02-16 16:15   
Perhaps it is better to give up with a message to the user instead of getting stuck... I don't want to add more complexity to the locking. The point of dotlock is to not use the fcntl() based in the first place which is even less reliable over NFS...
(0003374)
bitstreamout   
2020-02-17 10:05   
Hmmm ... on Linux based systems itz is possible to determine the process which holds the file descriptor. But this requires to parse /proc/ ... on the other hand most modern Linux systems have a tmpfs based /dev/shm worls writable and sticky directory which not only tmpfs but also a local file system. Besdide this : I had used some years a patch set from redhat with fcntl() based locking which never had shown problems over NFS ... only the porting to the next tcsh version had become complicated and fragile with increasing version number.
(0003375)
christos   
2020-02-17 17:53   
(Last edited: 2020-02-17 17:54)
Yes, but remember tcsh runs on other OS's including windows... And this is a corner case that does not usually happen. Doesn't systemd have a way to increase the grace time it waits before killing the processes?

(0003376)
bitstreamout   
2020-02-18 08:06   
Not really as the most tcsh process do poll by sleeping within usleep() ... using F_SETLKW would avoid this but requires interrupt handling. Currently I use a workaround, which is use /dev/shm as this file system is always fresh because it is tmpfs based
(0003377)
christos   
2020-02-18 20:20   
What happens when the home directory is mounted over NFS and shared between different hosts? How will the other systems see the tmpfs lock? Let's try to treat the cause (systemd killing tcsh too quickly) instead of the symptoms (tcsh leaving a stray lock file around because it got kill -9'ed).

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
143 [file] General minor always 2020-02-14 15:36 2020-02-16 20:46
Reporter: tuxick Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: X.509 DER certificate not recognized
Description: X.509 DER certificate not recognized , signature would be 0x3028
Tags:
Steps To Reproduce:
Additional Information: Found this missing on current centos, rhel, debian and ubuntu
Attached Files: test.der (716 bytes) 2020-02-16 16:47
https://bugs.astron.com/file_download.php?file_id=121&type=bug
Notes
(0003369)
christos   
2020-02-16 15:55   
Can you attach a copy of the cert?
(0003372)
tuxick   
2020-02-16 16:47   
This is result of "openssl x509 -in test.crt -outform der -out test.der"
I don't know why this is done, but i was send such cert to install, and it had wrong extension
(0003373)
christos   
2020-02-16 20:46   
Fixed, thanks

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
141 [file] General major always 2020-02-13 22:42 2020-02-16 16:09
Reporter: Andreas Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.38  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: Mpeg videos detected as image/x-tga
Description: Several video files are detected as image/x-tga instead of video/mpeg in the latest version.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: arthurDVDNTSCHiQ.vob (1,429,504 bytes) 2020-02-13 22:42
https://bugs.astron.com/file_download.php?file_id=112&type=bug
arthur.mpg (1,789,952 bytes) 2020-02-13 22:42
https://bugs.astron.com/file_download.php?file_id=111&type=bug
arthurVideoOnly.vob (1,249,280 bytes) 2020-02-13 22:42
https://bugs.astron.com/file_download.php?file_id=114&type=bug
arthurDVDPalStrdQ.vob (1,335,296 bytes) 2020-02-13 22:42
https://bugs.astron.com/file_download.php?file_id=113&type=bug
Notes
(0003370)
christos   
2020-02-16 16:09   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
140 [file] General minor always 2020-02-04 23:32 2020-02-16 15:53
Reporter: gockelhahn Platform: x86_64  
Assigned To: christos OS: arch linux  
Priority: normal OS Version:  
Status: resolved Product Version: 5.38  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: hit asserts send SIGABRT leading to unplanned exit
Description: fuzzing with stock afl found some binary magic files, which will run into code asserts, which will lead to an abrupt:

    Aborted (core dumped)
    echo $?
    134

when seccomp is compiled in, we get:

    Bad system call
    echo $?
    159


not sure if you like the output or if you want to exit the program with a more userfriendly message?
Tags: magic
Steps To Reproduce:     git clone https://github.com/file/file.git
    cd file
    export CFLAGS="-g -fsanitize=address -fno-omit-frame-pointer"
    autoreconf -i
    ./configure [--disable-libseccomp]
    make all
    ./src/.libs/lt-file -m ~/test3.mgc /etc/services
Additional Information:     master @ 85b214cd422dd2538800c8b6d6e6c383d9ee17bf
Attached Files: test3.mgc (6 bytes) 2020-02-04 23:32
https://bugs.astron.com/file_download.php?file_id=110&type=bug
crash.tar.gz (553 bytes) 2020-02-15 21:36
https://bugs.astron.com/file_download.php?file_id=120&type=bug
Notes
(0003357)
christos   
2020-02-13 17:21   
Fixed, thanks!
(0003366)
gockelhahn   
2020-02-15 21:34   
i still have some sigabrt magics, which still crash
(0003367)
gockelhahn   
2020-02-15 21:36   
see new attachment ... thanks for caring!
(0003368)
christos   
2020-02-16 15:53   
Fixed, these are all the same issue.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
128 [file] General major sometimes 2020-01-10 10:40 2020-02-15 01:02
Reporter: roberto beltrami Platform: intel  
Assigned To: christos OS: windows  
Priority: high OS Version: all  
Status: resolved Product Version: 5.38  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: wrong detection of .pnx data files
Description: .pnx are data files for our cad/cam system. I attacched 3 files, good.pnx is correctly detected as 'data' while err1 and err2 are detected as '68k Blit mpx/mux executable'. can you solve this?

many thanks
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: err1.pnx (128,654 bytes) 2020-01-10 10:40
https://bugs.astron.com/file_download.php?file_id=96&type=bug
err2.PNX (193,278 bytes) 2020-01-10 10:40
https://bugs.astron.com/file_download.php?file_id=95&type=bug
good.pnx (30,370 bytes) 2020-01-10 10:40
https://bugs.astron.com/file_download.php?file_id=94&type=bug
Notes
(0003345)
christos   
2020-01-17 17:49   
What's the CAD system name? Did you develop it internally or is it a commercial product? Where is the file format described?
(0003347)
roberto beltrami   
2020-01-20 08:54   
The CAD system is NAXOS and we develop it internally. The file format is reserved. Most data is compressed and encrypted, so we don't have control over the byte sequences generated
(0003355)
roberto beltrami   
2020-02-13 07:40   
no news?
(0003359)
christos   
2020-02-13 20:39   
Sorry, I've been busy. If there is no standard header in your files and they can contain any byte sequence, file(1) can't recognize them and different pnx files can will end up producing spurious matches. This cannot be fixed until the system produces files that have standard header...
(0003362)
roberto beltrami   
2020-02-14 09:19   
I'm sure you understand that we cannot change our format just because your software detect as '68k Blit mpx/mux executable' a file that is something else.
If it can help you, starting from offset 4 you find a 16bytes string (zero terminated) with letter P followed by the sw version that produced the file. for example, 'P19.1607.1627.0' or 'P20.1629.1631.0 '. please let me know

best regards
roberto
(0003363)
roberto beltrami   
2020-02-14 09:22   
BTW, the numbers often change because we release new versions almost every month. so you should rely on the structure of the string Pxx.xxxx.xxxx.x and not the exact numbers
(0003364)
roberto beltrami   
2020-02-14 09:23   
x are always 0-9, no letters nor special chars
(0003365)
christos   
2020-02-15 01:02   
Well, that pattern can be used as a magic number and I've already added it! The next version of the program will recognize PNX files:

[8:02pm] 348>./file -m ../magic/magic.mgc *.pnx
err1.pnx: NAXOS CAD System file from version P19.1629.1630.0
err2.pnx: NAXOS CAD System file from version P19.1607.1628.0
good.pnx: NAXOS CAD System file from version P19.1607.1615.0

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
137 [file] General minor always 2020-02-02 04:02 2020-02-14 01:58
Reporter: Kid Platform: x86_64  
Assigned To: christos OS: Linux (Arch)  
Priority: normal OS Version: 5.4.2  
Status: assigned Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: MP4 Video File Incorrectly Identified as Audio
Description: ■ xxd 2020-01-22.mp4 | head
00000000: 0000 001c 6674 7970 4d53 4e56 0100 2500 ....ftypMSNV..%.
00000010: 4d53 4e56 6973 6f6d 6d70 3432 0000 0008 MSNVisommp42....
00000020: 6672 6565 3c0f b333 6d64 6174 0001 a2fd free<..3mdat....
00000030: 65b8 0400 2fec 2ddd ec5c d873 95cc 4bcf e.../.-..\.s..K.
00000040: 9fec c7a1 dca9 43a1 0271 55e5 28cc 0390 ......C..qU.(...
00000050: f052 bed2 5546 08ce e157 00bb 48c8 effc .R..UF...W..H...
00000060: d3ef d4ec 9de9 ae80 b81d 6eee 01ca 9888 ..........n.....
00000070: 92a2 197e c781 1e86 49d9 d9af 70aa c58a ...~....I...p...
00000080: 2987 184d 017c 2a01 b058 bde5 4780 3abb )..M.|*..X..G.:.
00000090: d3e2 332a 96f4 da91 8236 7ece 5334 4c6e ..3*.....6~.S4Ln
■ ffprobe -hide_banner 2020-01-22.mp4
Input #0, mov,mp4,m4a,3gp,3g2,mj2, from '2020-01-22.mp4':
  Metadata:
    major_brand : MSNV
    minor_version : 16786688
    compatible_brands: MSNVisommp42
    creation_time : 2020-01-22T13:59:53.000000Z
    title :
    artist :
    album :
    date :
    track : 0
    genre :
    comment :
  Duration: 00:43:10.96, start: 0.033356, bitrate: 3115 kb/s
    Stream #0:0(eng): Video: h264 (High) (avc1 / 0x31637661), yuv420p, 1280x720 [SAR 1:1 DAR 16:9], 2983 kb/s, 29.97 fps, 29.97 tbr, 30k tbn, 59.94 tbc (default)
    Metadata:
      creation_time : 2020-01-22T13:59:53.000000Z
      handler_name : Video Media Handler
      encoder : AVC Coding
    Stream #0:1(eng): Audio: aac (LC) (mp4a / 0x6134706D), 44100 Hz, stereo, fltp, 127 kb/s (default)
    Metadata:
      creation_time : 2020-01-22T13:59:53.000000Z
      handler_name : Sound Media Handler
■ file --mime-type -Lb 2020-01-22.mp4
audio/mp4
■ file --mime-type -l 2020-01-22.mp4
Set 0:
Binary patterns:
Strength = 500@47: Biosig/Brainvision Marker file [biosig/brainvision]
Strength = 490@122: Biosig/TMSiLOG [biosig/tmsilog]
Strength = 461@127: Biosig/SYNERGY [biosig/synergy]
Strength = 460@46: Biosig/Brainvision V-Amp file []
Strength = 410@45: Biosig/Brainvision data file []
Strength = 380@6: OpenSSH private key []
Strength = 361@107: EICAR virus test files []
Strength = 360@19: Biosig/ATES MEDICA SOFT. EEG for Windows [biosig/ates]
Strength = 350@188: SketchUp Model [application/vnd.sketchup.skp]
Strength = 340@618: sc68 Atari ST music []
Strength = 340@35: T64 tape Image []
Strength = 340@40: T64 tape Image []
Strength = 340@19: Erlang JAM file - version 4.3 []
Strength = 340@51: Mathematica binary file []
Strength = 340@695: %s [application/vnd.ms-excel]
Strength = 340@66: Bazaar merge directive []
Strength = 340@92: SQLite 2.x database []
Strength = 340@136: Paged COBALT boot rom []
Strength = 331@280: NetImmerse game engine file []
Strength = 330@1540: LyNX archive []
Strength = 330@49: FrameMaker IPL file [application/x-mif]
Strength = 330@267: Gamebryo game engine file []
Strength = 330@61: PGP public key block [application/pgp-keys]
Strength = 320@361: %s []
Strength = 320@333: SNES SPC700 sound file []
Strength = 320@8: BinHex binary text [application/mac-binhex40]
Strength = 320@689: %s [application/vnd.ms-excel]
Strength = 320@27: old timezone data []
Strength = 320@28: old timezone data []
Strength = 320@29: old timezone data []
Strength = 320@30: old timezone data []
Strength = 320@31: old timezone data []
Strength = 320@32: old timezone data []
Strength = 310@16: Erlang JAM file - version 4.2 []
Strength = 310@17: Erlang JAM file - version 4.2 []
Strength = 310@16: PostScript Type 1 font text []
Strength = 310@83: Caris ASCII project summary []
Strength = 310@7: old ACE/gr binary file []
Strength = 310@752: InnoSetup Log [application/x-innosetup]
Strength = 300@273: Gamebryo game engine animation File []
Strength = 300@18: Mathematica notebook []
Strength = 300@650: %s [application/msword]
Strength = 300@59: Subversion dumpfile []
Strength = 300@9: PEM certificate []
Strength = 290@203: %s []
Strength = 290@20: FGDC ASCII metadata []
Strength = 290@652: Spanish Microsoft Word 6 document data [application/msword]
Strength = 290@65: Bazaar Bundle []
Strength = 290@10: PEM certificate request []
Strength = 280@994: NUT multimedia container []
Strength = 280@1230: shell archive text [application/octet-stream]
Strength = 280@12: Clojure script text executable [text/x-clojure]
Strength = 280@104: AVG 7 Antivirus vault file data []
Strength = 280@20: ACE/gr fit description file []
Strength = 280@950: Paint Shop Pro Image File []
Strength = 280@69: PGP signature [application/pgp-signature]
Strength = 271@382: Windows Registry text (Win2K or above) [text/x-ms-regedit]
Strength = 270@119: Biosig/TMS32 [biosig/tms32]
Strength = 270@2389: floppy image data (ApriDisk) []
Strength = 270@178: Quake I save: ddm4 East side invertationa []
Strength = 270@196: Linux S390 []
Strength = 270@68: Mathematica 3.0 notebook []
Strength = 270@64: abook address book [application/x-abook-addressbook]
Strength = 270@642: AAF legacy file using MS Structured Storage []
Strength = 270@645: AAF file using MS Structured Storage []
Strength = 270@58: Microsoft Roslyn C# debugging symbols version 1.0 []
Strength = 270@10: Netscape Address book []
Strength = 270@14: PEM ECDSA private key []
Strength = 261@61: GCOV coverage report []
Strength = 260@667: Guitar Pro Ver. 3 Tablature []
Strength = 260@950: Junglevision instrument data []
Strength = 260@20: Clojure script text executable [text/x-clojure]
Strength = 260@645: Mozilla Mork database []
Strength = 260@39: Kate swap file []
Strength = 260@164: Quake I save: d7 The incinerator plant []
Strength = 260@168: Quake I save: d12 Takahiro laboratories []
Strength = 260@12: ACE/gr ascii file []
Strength = 260@7: NASA SPICE file (transfer format) []
Strength = 260@16: Netscape folder cache []
Strength = 260@7: NetWare Loadable Module []
Strength = 260@65: PGP message [application/pgp]
Strength = 260@251: Freeplane document [application/x-freeplane]
Strength = 260@257: Scribus Document [application/x-scribus]
Strength = 250@146: GUS patch []
Strength = 250@147: Old GUS patch []
Strength = 250@603: %s []
Strength = 250@84: Biosig/Galileo [biosig/galileo]
Strength = 250@147: Biosig/File exchange format (FEF) [biosig/fef]
Strength = 250@16: Clojure script text executable [text/x-clojure]
Strength = 250@79: Bourne-Again shell script executable (binary data) [text/x-shellscript]
Strength = 250@12: Diamond Multimedia Document []
Strength = 250@125: FreeBSD/i386 a.out core file []
Strength = 250@87: Quake I save: e1m1 The slipgate complex []
Strength = 250@88: Quake I save: e1m2 Castle of the damned []
Strength = 250@101: Quake I save: e2m6 The dismal oubliette []
Strength = 250@105: Quake I save: e3m4 Satan's dark delight []
Strength = 250@110: Quake I save: e4m2 The tower of despair []
Strength = 250@111: Quake I save: e4m3 The elder god shrine []
Strength = 250@117: Quake I save: end Shub-Niggurath's pit []
Strength = 250@137: Quake I save: hip2m6 The gremlin's domain (secret) []
Strength = 250@145: Quake I save: hipdm1 The edge of oblivion (secret) []
Strength = 250@175: Quake I save: ddm1 The seventh precinct []
Strength = 250@65: CLISP byte-compiled Lisp program text []
Strength = 250@31: Maple worksheet, but weird []
Strength = 250@11: PEM RSA private key []
Strength = 250@12: PEM DSA private key []
Strength = 250@302: Bochs disk image, []
Strength = 250@397: WINE registry text []
Strength = 240@8: Clojure script text executable [text/x-clojure]
Strength = 240@305: Adobe Multiple Master font []
Strength = 240@306: Adobe Multiple Master font []
Strength = 240@94: Quake I save: e1m7 The house of Chthon []
Strength = 240@102: Quake I save: e3m1 Termination central []
Strength = 240@108: Quake I save: e3m6 Chambers of torment []
Strength = 240@121: Quake I save: dm1 Place of two deaths []
Strength = 240@131: Quake I save: hip1m1 The pumping station []
Strength = 240@138: Quake I save: hip2m2 The black cathedral []
Strength = 240@166: Quake I save: d8 The underwater base []
Strength = 240@10: ACE/gr ascii file []
Strength = 240@11: ACE/gr ascii file []
Strength = 240@701: Lisp Machine bit-array-file []
Strength = 240@566: DR-DOS executable (COM) [application/x-dosexec]
Strength = 240@13: PEM EC private key []
Strength = 230@638: SAPCAR archive data []
Strength = 230@408: %s []
Strength = 230@444: Fast Tracker II Instrument []
Strength = 230@93: Quake I save: e1m6 The door to Chthon []
Strength = 230@97: Quake I save: e2m3 The crypt of decay (dopefish lives!) []
Strength = 230@100: Quake I save: e2m5 The wizard's manse []
Strength = 230@104: Quake I save: e3m3 The tomb of terror []
Strength = 230@112: Quake I save: e4m4 The palace of hate []
Strength = 230@122: Quake I save: dm2 Claustrophobopolis []
Strength = 230@123: Quake I save: dm3 The abandoned base []
Strength = 230@14: Grace project file []
Strength = 230@79: Linux/i386 swap file (new style) (compressed hibernate) []
Strength = 230@43: Cyrus skiplist DB []
Strength = 230@44: Cyrus twoskip DB []
Strength = 230@874: Winamp plug in []
Strength = 230@894: PGP sig []
Strength = 230@895: PGP sig []
Strength = 230@896: PGP sig []
Strength = 230@897: PGP sig []
Strength = 230@898: PGP sig []
Strength = 230@902: MS Windows special zipped file []
Strength = 230@28: Perl script text executable [text/x-perl]
Strength = 230@6: pkg Datastream (SVR4) [application/x-svr4-package]
Strength = 230@47: Amstrad/Spectrum .DSK data []
Strength = 230@49: Amstrad/Spectrum Extended .DSK data []
Strength = 230@296: MS Windows shortcut []
Strength = 230@256: Scribus Document []
Strength = 220@1019: Interplay MVE Movie []
Strength = 220@278: MIPS archive [application/x-archive]
Strength = 220@621: EXP1 archive data []
Strength = 220@98: Creative Labs voice data [audio/x-unknown]
Strength = 220@452: SHARP Cell-Phone ringing Melody []
Strength = 220@30: Biosig/alpha trace [biosig/alpha]
Strength = 220@10: Clojure script text executable [text/x-clojure]
Strength = 220@18: Clojure script text executable [text/x-clojure]
Strength = 220@6: Alpha archive []
Strength = 220@90: Quake I save: e1m4 The grisly grotto []
Strength = 220@99: Quake I save: e2m4 The ebon fortress []
Strength = 220@106: Quake I save: e3m7 The haunted halls (secret) []
Strength = 220@109: Quake I save: e4m1 The sewage system []
Strength = 220@114: Quake I save: e4m8 The nameless city (secret) []
Strength = 220@135: Quake I save: hip1m4 Research facility []
Strength = 220@51: KiCad Footprint (Legacy) []
Strength = 220@77: Linux/i386 swap file (new style) with SWSUSP1 image []
Strength = 220@1400: Microsoft Word Document [application/msword]
Strength = 220@26: Perl script text executable [text/x-perl]
Strength = 220@48: Amstrad/Spectrum DU54 .DSK data []
Strength = 220@10: OpenSSH ECDSA public key []
Strength = 220@11: OpenSSH ECDSA public key []
Strength = 220@12: OpenSSH ECDSA public key []
Strength = 220@354: Internet Explorer cache file []
Strength = 220@7: Smith Corona PWP []
Strength = 211@152: Biosig/FIFF [biosig/fiff]
Strength = 210@271: Sample Vision file []
Strength = 210@608: XMMS equalizer preset []
Strength = 210@14: Clojure script text executable [text/x-clojure]
Strength = 210@75: Bourne-Again shell script executable (binary data) [text/x-shellscript]
Strength = 210@474: Neo Geo Pocket [application/x-neo-geo-pocket-rom]
Strength = 210@525: X11 Xauthority data []
Strength = 210@526: X11 Xauthority data []
Strength = 210@527: X11 Xauthority data []
Strength = 210@528: X11 Xauthority data []
Strength = 210@529: X11 Xauthority data []
Strength = 210@530: X11 Xauthority data []
Strength = 210@531: X11 Xauthority data []
Strength = 210@532: X11 Xauthority data []
Strength = 210@533: X11 Xauthority data []
Strength = 210@2439: %s []
Strength = 210@91: Quake I save: e1m8 Ziggurat vertigo (secret) []
Strength = 210@95: Quake I save: e2m1 The installation []
Strength = 210@96: Quake I save: e2m2 The ogre citadel []
Strength = 210@132: Quake I save: hip1m2 Storage facility []
Strength = 210@133: Quake I save: hip1m5 Military complex (secret) []
Strength = 210@156: Quake I save: d11 The genetics lab (secret) []
Strength = 210@47: GIMP curve file []
Strength = 210@251: Canon CR2 raw image data [image/x-canon-cr2]
Strength = 210@631: iff image data []
Strength = 210@64: CLISP byte-compiled Lisp program (pre 2004-03-27) []
Strength = 210@290: MSX ExecROM patchfile []
Strength = 201@449: PNG image data (CgBI) [image/png]
Strength = 201@26: Java HPROF dump, []
Strength = 200@31: Mugician Module sound file []
Strength = 200@1291: BitTorrent file [application/x-bittorrent]
Strength = 200@114: Pdmenu configuration file text []
Strength = 200@11: PostScript Type 1 font text []
Strength = 200@13: PostScript Type 1 font program data []
Strength = 200@154: Quake I save: d3b Secret missions []
Strength = 200@159: Quake I save: d2 Takahiro towers []
Strength = 200@181: Quake I save: ddm7 Sandra's ladder []
Strength = 200@441: PNG image data [image/png]
Strength = 200@53: Maple something []
Strength = 200@56: Maple something []
Strength = 200@68: MSVC .wsp version 1.0000.0000 []
Strength = 200@45: Sniffer capture file []
Strength = 200@198: Hangul (Korean) Word Processor File 3.0 []
Strength = 191@142: Biosig/Sigma [biosig/sigma]
Strength = 191@353: Embedded OpenType (EOT) []
Strength = 191@23: KiCad Symbol Library []
Strength = 191@38: MSVC program database [application/x-ms-pdb]
Strength = 191@184: MSX Kanji Font []
Strength = 190@891: VRML 1 file [model/vrml]
Strength = 190@170: Fasttracker II module sound data [audio/x-mod]
Strength = 190@235: Sidplay info file []
Strength = 190@268: NIST SPHERE file []
Strength = 190@437: RAD Adlib Tracker Module RAD []
Strength = 190@546: BambooTracker module []
Strength = 190@551: BambooTracker instrument []
Strength = 190@130: Biosig/UNIPRO [biosig/unipro]
Strength = 190@145: Biosig/File exchange format (FEF) [biosig/fef]
Strength = 190@71: Bourne-Again shell script executable (binary data) [text/x-shellscript]
Strength = 190@210: Sega Mega CD disc image [application/x-sega-cd-rom]
Strength = 190@214: Sega Mega CD disc image [application/x-sega-cd-rom]
Strength = 190@219: Sega Mega CD disc image [application/x-sega-cd-rom]
Strength = 190@223: Sega Mega CD disc image [application/x-sega-cd-rom]
Strength = 190@349: Sega Saturn disc image [application/x-saturn-rom]
Strength = 190@354: Sega Saturn disc image [application/x-saturn-rom]
Strength = 190@375: Sega Dreamcast disc image [application/x-dc-rom]
Strength = 190@380: Sega Dreamcast disc image [application/x-dc-rom]
Strength = 190@547: CGNS Advanced Data Format []
Strength = 190@1579: ntfsclone image, []
Strength = 190@2070: Aculab VoIP firmware []
Strength = 190@32: FrameMaker Font file [application/x-mif]
Strength = 190@89: Quake I save: e1m3 The necropolis []
Strength = 190@136: Quake I save: hip2m1 Ancient realms []
Strength = 190@147: Quake I save: hipend Armagon's lair []
Strength = 190@161: Quake I save: d4 Into the flood []
Strength = 190@179: Quake I save: ddm5 Slaughterhouse []
Strength = 190@79: mbsystem info cache []
Strength = 190@8: GNOME keyring []
Strength = 190@55: G-IR binary database []
Strength = 190@539: group 3 fax data []
Strength = 190@995: PartImage []
Strength = 190@1214: Garmin Bitmap file []
Strength = 190@8: Karma Data Structure Version []
Strength = 190@360: Xen saved domain []
Strength = 190@366: Xen saved domain []
Strength = 190@7: MacOS Alias file []
Strength = 190@52: Maple something []
Strength = 190@55: Maple something []
Strength = 190@57: Maple something anomalous. []
Strength = 190@7: Digifax-G3-File []
Strength = 190@9: Mozilla XUL fastload data []
Strength = 190@1047: Windows Program Information File [application/x-dosexec]
Strength = 190@6: ASCII font metrics []
Strength = 190@118: Canon Bubble Jet BJC formatted data []
Strength = 190@122: Epson Stylus Color 460 data []
Strength = 190@14: Git bundle []
Strength = 190@311: Sony Wave64 RIFF data []
Strength = 190@326: MBWF/RF64 audio [audio/x-wav]
Strength = 190@28: CNS ASCII electron density map []
Strength = 190@56: MAR Area Detector Image, []
Strength = 190@352: Network Instruments Observer capture file []
Strength = 190@141: H2 Database file []
Strength = 190@8: BEA TUXEDO DES mask data []
Strength = 190@6: Xerox InterPress data []
Strength = 190@49: XPConnect Typelib []
Strength = 190@197: Libvirt QEMU Suspend Image []
Strength = 190@203: Libvirt QEMU partial Suspend Image []
Strength = 185@112: XML [text/xml]
Strength = 181@31: KiCad Symbol Library Documentation []
Strength = 180@32: Sidmon 2.0 Module sound file []
Strength = 180@47: Android Backup [application/x-google-ab]
Strength = 180@893: ISO/IEC 14772 VRML 97 file [model/vrml]
Strength = 180@294: SGI SoundTrack project file []
Strength = 180@511: Synthesizer Generator or Kimwitu data []
Strength = 180@513: Kimwitu++ data []
Strength = 180@78: Biosig/Embla [biosig/embla]
Strength = 180@6: Clojure script text executable [text/x-clojure]
Strength = 180@263: XZ compressed data [application/x-xz]
Strength = 180@458: Microsoft Access Database [application/x-msaccess]
Strength = 180@460: Microsoft Access Database [application/x-msaccess]
Strength = 180@103: Quake I save: e3m2 Vaults of Zin []
Strength = 180@113: Quake I save: e4m5 Hell's atrium []
Strength = 180@115: Quake I save: e4m6 The pain maze []
Strength = 180@124: Quake I save: dm4 The bad place []
Strength = 180@126: Quake I save: dm6 The dark zone []
Strength = 180@134: Quake I save: hip1m3 The lost mine []
Strength = 180@139: Quake I save: hip2m3 The catacombs []
Strength = 180@141: Quake I save: hip2m5 Mortum's keep []
Strength = 180@157: Quake I save: d4b Back to Malice []
Strength = 180@163: Quake I save: d6 Nuclear plant []
Strength = 180@167: Quake I save: d9 Takahiro base []
Strength = 180@169: Quake I save: d13 Stayin' alive []
Strength = 180@177: Quake I save: ddm3 Crazy eights! []
Strength = 180@59: Mathematica PBF (fonts I think) []
Strength = 180@7: vCalendar calendar file [text/calendar]
Strength = 180@15: MSVC .ide []
Strength = 180@61: GLF_TEXT []
Strength = 180@111: PCP pmieconf rules []
Strength = 180@13: SPECjbb []
Strength = 180@99: SQLite 3.x database [application/x-sqlite3]
Strength = 180@4: OpenSSH RSA1 private key, []
Strength = 176@902: X3D (Extensible 3D) model xml text [model/x3d+xml]
Strength = 171@233: part of multipart Debian package [application/vnd.debian.binary-package]
Strength = 171@164: ultratracker V1.%.1s module sound data [audio/x-mod]
Strength = 171@61: KiCad Symbol Library Table []
Strength = 171@8: SVG Scalable Vector Graphics image [image/svg+xml]
Strength = 171@26: OpenStreetMap XML data []
Strength = 171@144: Portable Embosser Format [application/x-pef+xml]
Strength = 171@288: MS Windows HyperTerminal profile []
Strength = 170@30: Art Of Noise Module sound file []
Strength = 170@888: Vivo video data []
Strength = 170@1058: Material exchange container format [application/mxf]
Strength = 170@1237: LBR archive data []
Strength = 170@30: T64 tape Image []
Strength = 170@93: Famicom Disk System disk image: [application/x-fds-disk]
Strength = 170@551: Tokyo Cabinet []
Strength = 170@582: TokyoCabinet database []
Strength = 170@86: Quake I save: start Introduction []
Strength = 170@107: Quake I save: e3m5 Wind tunnels []
Strength = 170@146: Quake I save: hip3m4 The gauntlet []
Strength = 170@155: Quake I save: d10 The hospital (secret) []
Strength = 170@160: Quake I save: d3 A rat's life []
Strength = 170@241: Canon CIFF raw image data [image/x-canon-crw]
Strength = 170@501: MIFF image data []
Strength = 170@54: Maple something []
Strength = 170@906: Icon for MS Windows []
Strength = 170@7: Qt Resource Collection file []
Strength = 170@72: GEDCOM data []
Strength = 170@73: GEDCOM data []
Strength = 170@17: SE Linux policy module source []
Strength = 170@18: SE Linux policy module source []
Strength = 161@67: KiCad Footprint Library Table []
Strength = 161@69: PJL encapsulated PostScript document text []
Strength = 160@661: ARS-Sfx archive data []
Strength = 160@575: CFF Song []
Strength = 160@663: iMelody Ringtone Format []
Strength = 160@8: BlockHashLoc recovery info, []
Strength = 160@133: Biosig/WCP [biosig/wcp]
Strength = 160@11: CCS C64 Emultar Cartridge Image []
Strength = 160@347: Spline Font Database [application/vnd.font-fontforge-sfd]
Strength = 160@116: Quake I save: e4m7 Azure agony []
Strength = 160@125: Quake I save: dm5 The cistern []
Strength = 160@140: Quake I save: hip2m4 The crypt []
Strength = 160@142: Quake I save: hip3m1 Tur torment []
Strength = 160@143: Quake I save: hip3m2 Pandemonium []
Strength = 160@151: Quake I save: start The academy []
Strength = 160@165: Quake I save: d7b The foundry []
Strength = 160@170: Quake I save: d14 B.O.S.S. HQ []
Strength = 160@176: Quake I save: ddm2 Sub station []
Strength = 160@164: Gnumeric spreadsheet []
Strength = 160@7: Gnumeric spreadsheet [application/x-gnumeric]
Strength = 160@899: PGP sig []
Strength = 160@12: OASIS Stream file []
Strength = 160@29: PostScript document []
Strength = 160@50: HP Printer Job Language data []
Strength = 160@59: HP Printer Job Language data []
Strength = 160@78: HP Printer Job Language data []
Strength = 160@113: PCP pmie config []
Strength = 160@17: SPECweb []
Strength = 160@93: SunPC 4.0 Properties Values []
Strength = 151@374: MS-DOS KEYBoard Layout file []
Strength = 151@387: Windows Registry little-endian text (Win2K or above) [text/x-ms-regedit]
Strength = 150@83: TADS []
Strength = 150@919: Video title set, []
Strength = 150@921: Video manager, []
Strength = 150@1346: Personal NetWare Packed File []
Strength = 150@595: VQF data []
Strength = 150@81: Version Biosig/ETG4000 [biosig/etg4000]
Strength = 150@47: C64 Raw Tape File (.tap), []
Strength = 150@67: Bourne-Again shell script executable (binary data) [text/x-shellscript]
Strength = 150@1171: SYSLINUX loader []
Strength = 150@2281: Marvell Libertas firmware []
Strength = 150@2311: dvdisaster error correction file []
Strength = 150@92: Quake I save: e1m5 Gloom keep []
Strength = 150@98: Quake I save: e2m7 Underearth (secret) []
Strength = 150@130: Quake I save: start Command HQ []
Strength = 150@197: Build engine group file []
Strength = 150@475: GIF image data [image/gif]
Strength = 150@515: SunPHIGS []
Strength = 150@1707: Khronos KTX texture []
Strength = 150@12: JPEG image data [image/jpeg]
Strength = 150@101: JPEG 2000 []
Strength = 150@65: Cyrus sieve bytecode data, []
Strength = 150@23: Maple help file with extra carriage return at start (yuck) []
Strength = 150@1118: MS Windows HtmlHelp Data []
Strength = 150@28: Microsoft Visual C .pch []
Strength = 150@13: PDF document [application/pdf]
Strength = 150@46: PPD file []
Strength = 150@70: GEDCOM data []
Strength = 150@71: GEDCOM data []
Strength = 150@20: SE Linux policy interface source []
Strength = 150@59: Open Inventor 2.0 file []
Strength = 150@67: GLS_TEXT []
Strength = 150@104: PCP pmdahotproc config []
Strength = 150@6: teapot work sheet (XDR format) []
Strength = 150@22: header for PowerPC PEF executable []
Strength = 150@349: MS Windows help cache []
Strength = 150@246: Freemind document [application/x-freemind]
Strength = 141@99: TADS 3 game data (format version %d) []
Strength = 141@12: Public Suffix List data (optimized) []
Strength = 140@72: AMOS Basic source code []
Strength = 140@929: MythTV NuppelVideo []
Strength = 140@311: NeXT/Apple typedstream data, big endian []
Strength = 140@316: NeXT/Apple typedstream data, little endian []
Strength = 140@581: PUCrunch archive data []
Strength = 140@1288: BitTorrent file [application/x-bittorrent]
Strength = 140@392: OctaMED Soundstudio compressed file []
Strength = 140@943: WOPL instrument []
Strength = 140@945: WOPL instrument bank []
Strength = 140@18: Korn shell script executable (binary data) [text/x-shellscript]
Strength = 140@20: Message Sequence Chart (document) []
Strength = 140@576: Quick Database Manager, little endian []
Strength = 140@577: Quick Database Manager, big endian []
Strength = 140@303: ELF []
Strength = 140@1173: SYSLINUX loader []
Strength = 140@14: PostScript Type 1 font program data []
Strength = 140@15: PostScript Type 1 font program data []
Strength = 140@49: Clam AntiVirus []
Strength = 140@113: Avira AntiVir quarantined [application/x-avira-qua]
Strength = 140@162: Quake I save: d5 The flood []
Strength = 140@171: Quake I save: d15 Showdown! []
Strength = 140@260: TIFF image data, big-endian [image/tiff]
Strength = 140@264: TIFF image data, little-endian [image/tiff]
Strength = 140@1257: Radiance HDR image data []
Strength = 140@8: IslandWrite document []
Strength = 140@53: Linux make config build file (old) []
Strength = 140@22: Maple help file []
Strength = 140@32: Mathematica notebook version 2.x []
Strength = 140@36: Mathematica notebook version 2.x []
Strength = 140@12: vCard visiting card [text/vcard]
Strength = 140@1021: RabbitGraph file []
Strength = 140@7: PDF document [application/pdf]
Strength = 140@21: FDF document [application/vnd.fdf]
Strength = 140@6: sc spreadsheet file [application/x-sc]
Strength = 140@36: sendmail m4 text file []
Strength = 140@58: IRIS Inventor 1.0 file []
Strength = 140@312: AIX iptrace capture file []
Strength = 140@313: AIX iptrace capture file []
Strength = 140@13: OpenSSH ED25519 public key []
Strength = 140@59: ncurses6 screen image []
Strength = 140@13: Internet Archive File [application/x-ia-arc]
Strength = 131@103: TADS 3 saved game data (format version []
Strength = 131@1367: DOS/MBR boot sector []
Strength = 131@1813: reMarkable tablet notebook lines, 1404 x 1872, %x page(s) []
Strength = 131@1820: reMarkable tablet page (v%c), 1404 x 1872, []
Strength = 131@39: KiCad Board Layout []
Strength = 131@97: Protein Data Bank data, ID Code %s [chemical/x-pdb]
Strength = 130@90: TADS []
Strength = 130@46: catalog translation []
Strength = 130@413: NuLIB archive data []
Strength = 130@429: DPA archive data []
Strength = 130@639: SAPCAR archive data []
Strength = 130@590: LockStream Embedded file (mostly MP3 on old Nokia phones) []
Strength = 130@37: Biosig/BCI2000 []
Strength = 130@66: Biosig/CED SMR [biosig/ced-smr]
Strength = 130@161: MegaCAD 2D/3D drawing []
Strength = 130@9: POSIX shell script executable (binary data) [text/x-shellscript]
Strength = 130@363: snappy framed data [application/x-snappy-framed]
Strength = 130@2395: disk image data (YAZE) []
Strength = 130@12: FrameMaker document [application/x-mif]
Strength = 130@28: Boom or linuxdoom demo []
Strength = 130@92: IVS Fledermaus TDR file []
Strength = 130@190: HP Bitmapfile []
Strength = 130@514: PHIGS clear text archive []
Strength = 130@74: Linux/i386 swap file []
Strength = 130@83: Linux/i386 swap file (new style), []
Strength = 130@96: Linux/ppc swap file []
Strength = 130@107: Linux/ia64 swap file []
Strength = 130@7: Metastore data file, []
Strength = 130@630: COM executable for MS-DOS, Compack compressed [application/x-dosexec]
Strength = 130@1019: First Choice database []
Strength = 130@1121: GFA-BASIC 3 data []
Strength = 130@5: Octave binary data (little endian) []
Strength = 130@6: Octave binary data (big endian) []
Strength = 130@58: perl Storable (v0.6) data []
Strength = 130@103: Imagen printer []
Strength = 130@146: HP LaserJet 1000 series downloadable firmware []
Strength = 130@7: project file for ftnchek []
Strength = 130@22: BRIX Electron Density Map []
Strength = 130@27: XPLOR ASCII Electron Density Map []
Strength = 130@39: R-Axis Area Detector Image: []
Strength = 130@47: R-Axis Area Detector Image, Win32: []
Strength = 130@20: openssl enc'd data with salted password, base64 encoded []
Strength = 130@17: VICAR label file []
Strength = 130@737: PaintShop Pro color palette []
Strength = 125@115: Linux kernel []
Strength = 121@55: Apple DOS 3.3 Image []
Strength = 121@74: Apple Pascal Image []
Strength = 120@69: TADS []
Strength = 120@75: TADS []
Strength = 120@49: AmigaGuide file []
Strength = 120@476: Apple Desktop Services Store []
Strength = 120@1275: GTKtalog catalog data, []
Strength = 120@439: XMS Adlib Module []
Strength = 120@516: TFMX module sound data []
Strength = 120@577: A2M Song []
Strength = 120@191: lzop compressed data []
Strength = 120@14: Vim encrypted file data []
Strength = 120@214: Smart Boot Manager backup file []
Strength = 120@244: Norton Utilities disc image data []
Strength = 120@1832: DOS floppy 360k []
Strength = 120@1834: DOS floppy 720k []
Strength = 120@1836: DOS floppy 1440k []
Strength = 120@1839: DOS floppy 720k, IBM []
Strength = 120@1841: DOS floppy 1440k, mkdosfs []
Strength = 120@1844: Atari-ST floppy 360k []
Strength = 120@1845: Atari-ST floppy 720k []
Strength = 120@2051: ReiserFS V3.6 []
Strength = 120@2052: ReiserFS V3.6.19 []
Strength = 120@2213: Delta ISO data []
Strength = 120@2230: Oracle Clustered Filesystem, []
Strength = 120@2244: Oracle Clustered Filesystem, []
Strength = 120@2265: Files-11 On-Disk Structure []
Strength = 120@59: Macromedia Freehand 7 Document []
Strength = 120@60: Macromedia Freehand 8 Document []
Strength = 120@62: Macromedia Freehand 9 Document []
Strength = 120@37: FrameMaker Book file [application/x-mif]
Strength = 120@152: Quake I save: d1 The lab []
Strength = 120@153: Quake I save: d1b Area 33 []
Strength = 120@691: FITS image data [image/fits]
Strength = 120@21: Maple help file []
Strength = 120@34: Maple worksheet []
Strength = 120@30: Mathematica notebook version 2.x []
Strength = 120@40: Mathematica notebook version 2.x []
Strength = 120@42: Mathematica notebook version 2.x []
Strength = 120@655: Microsoft Word document data [application/msword]
Strength = 120@861: Lotus WordPro [application/vnd.lotus-wordpro]
Strength = 120@1017: First Choice document []
Strength = 120@1024: MKS Spell hash list []
Strength = 120@11: Microsoft Visual C .APS file []
Strength = 120@18: MSVC .res []
Strength = 120@19: MSVC .res []
Strength = 120@20: MSVC .res []
Strength = 120@7: ASCII font bits []
Strength = 120@101: PCP pmlogger config []
Strength = 120@10: Compiled SGML rules file []
Strength = 120@12: A/E SGML Document binary []
Strength = 120@14: A/E SGML binary styles file []
Strength = 120@11: Spectrum +3 data []
Strength = 116@200: , rawbits, bitmap [image/x-portable-bitmap]
Strength = 116@207: , rawbits, greymap [image/x-portable-greymap]
Strength = 116@214: , rawbits, pixmap [image/x-portable-pixmap]
Strength = 115@266: DOS/MBR boot sector []
Strength = 115@1998: []
Strength = 111@60: Digital Symphony sequence (RISC OS), []
Strength = 111@1026: Windows Television DVR Media []
Strength = 111@29: APT cache data, version %u []
Strength = 111@34: APT cache data, version %u []
Strength = 111@328: []
Strength = 111@330: []
Strength = 111@332: []
Strength = 111@765: Nintendo GameCube disc image (WDFv1 format): [application/x-gamecube-rom]
Strength = 111@1161: isolinux Loader []
Strength = 111@1215: NetBSD mbr []
Strength = 111@1250: AdvanceMAME mbr []
Strength = 111@1259: Turton mbr ( []
Strength = 111@10: EDID data, version %u. []
Strength = 111@48: []
Strength = 111@1049: DjVu multiple page document [image/vnd.djvu]
Strength = 111@15: KiCad Schematic Document []
Strength = 111@385: Journal file [application/octet-stream]
Strength = 111@398: BCache []
Strength = 111@379: []
Strength = 111@449: []
Strength = 111@452: []
Strength = 111@454: []
Strength = 111@456: []
Strength = 111@459: []
Strength = 111@461: []
Strength = 111@1499: DOS 3.3 backup control file, sequence %d []
Strength = 111@19: Qt Translation file []
Strength = 111@84: Microsoft Disk Image eXtended []
Strength = 111@800: []
Strength = 111@803: []
Strength = 110@32: RISC OS music file []
Strength = 110@39: Digital Symphony sound sample (RISC OS), []
Strength = 110@50: Digital Symphony song (RISC OS), []
Strength = 110@6: AMANDA []
Strength = 110@33: Synthesis Module sound file []
Strength = 110@75: AMOS Basic source code []
Strength = 110@21: Android bootimg []
Strength = 110@1014: ARMovie []
Strength = 110@108: Newton package, NOS 1.x, []
Strength = 110@116: Newton package, NOS 2.x, []
Strength = 110@124: Newton package, []
Strength = 110@282: Apple binary property list []
Strength = 110@523: MacPaint image data []
Strength = 110@7: Pebble application []
Strength = 110@152: GNU tar incremental snapshot data []
Strength = 110@297: current ar archive [application/x-archive]
Strength = 110@320: thin archive with []
Strength = 110@359: RISC OS archive (ArcFS format) []
Strength = 110@360: RISC OS archive (ArcFS format) []
Strength = 110@573: TSComp archive data []
Strength = 110@710: WinImage archive data []
Strength = 110@787: PAQ archive data []
Strength = 110@1046: RAR archive data, v5 [application/x-rar]
Strength = 110@1064: Zip multi-volume archive data, at least PKZIP v2.50 to extract [application/zip]
Strength = 110@1303: Zip archive data [application/zip]
Strength = 110@1366: Foxit add-on/update [application/x-fzip]
Strength = 110@1394: KGB Archiver file []
Strength = 110@1486: BBeB ebook data, unencrypted []
Strength = 110@1546: Acronis True Image backup [application/x-acronis-tib]
Strength = 110@175: Screamtracker 2 module sound data [audio/x-mod]
Strength = 110@178: Screamtracker 2 module sound data [audio/x-mod]
Strength = 110@406: Oktalyzer module data []
Strength = 110@443: Open Cubic Player Module Inforation MDZ []
Strength = 110@556: RdosPlay RAW []
Strength = 110@562: MPU-401 Trakker []
Strength = 110@581: Spectrum 128 tune []
Strength = 110@859: Garmin Voice Processing Module (encrypted) [audio/x-vpm-garmin]
Strength = 110@895: AProSys module []
Strength = 110@918: Klystrack song []
Strength = 110@938: Klystrack instrument []
Strength = 110@951: DMX OP2 instrument data []
Strength = 110@38: Biosig/BCI2000 [biosig/bci2000]
Strength = 110@42: Biosig/Biosemi data format [biosig/bdf]
Strength = 110@54: Biosig/EDF: European Data format [biosig/edf]
Strength = 110@61: Biosig/Heka Patchmaster []
Strength = 110@62: Biosig/Heka Patchmaster []
Strength = 110@63: Biosig/Heka Patchmaster [biosig/heka]
Strength = 110@69: Biosig/CFWB [biosig/cfwb]
Strength = 110@75: Biosig/EBS [biosig/ebs]
Strength = 110@91: Biosig/ISHNE [biosig/ishne]
Strength = 110@95: Biosig/MFER []
Strength = 110@99: Biosig/NEV []
Strength = 110@113: Biosig/SCP-ECG format CEN 1064:2005/ISO 11073:91064 [biosig/scpecg]
Strength = 110@3: BLCR []
Strength = 110@14: BLCR []
Strength = 110@7: BTSnoop []
Strength = 110@14: GCR Image []
Strength = 110@23: PC64 Freezer Image []
Strength = 110@167: OpenHSF (Hoops Stream Format) []
Strength = 110@27: Claris works dictionary []
Strength = 110@367: qpress compressed data [application/x-qpress]
Strength = 110@382: UCL compressed data []
Strength = 110@118: Game Boy ROM image [application/x-gameboy-rom]
Strength = 110@396: Nintendo 64 ROM image [application/x-n64-rom]
Strength = 110@406: Nintendo 64 ROM image (V64) [application/x-n64-rom]
Strength = 110@413: Nintendo 64 ROM image (wordswapped) [application/x-n64-rom]
Strength = 110@420: Nintendo 64 ROM image (32-bit byteswapped) [application/x-n64-rom]
Strength = 110@430: Game Boy Advance ROM image [application/x-gba-rom]
Strength = 110@443: Nintendo DS ROM image [application/x-nintendo-ds-rom]
Strength = 110@464: Nintendo DS Slot-2 ROM image (PassMe) [application/x-nintendo-ds-rom]
Strength = 110@488: Sony Playstation executable []
Strength = 110@71: LLVM raw profile data, []
Strength = 110@75: LLVM raw profile data, []
Strength = 110@85: LLVM indexed profile data, []
Strength = 110@89: LLVM indexed profile data, []
Strength = 110@510: TDB database []
Strength = 110@597: Hopper database []
Strength = 110@19: bsdiff(1) patch file []
Strength = 110@52: profiling data file []
Strength = 110@6: Extended display identification data dump [application/x-edid-dump]
Strength = 110@21: Erlang DETS file []
Strength = 110@249: Norton Disk Doctor UnDo file []
Strength = 110@1143: romfs filesystem, version 1 []
Strength = 110@1703: HAMMER filesystem (little-endian), []
Strength = 110@2050: ReiserFS V3.5 []
Strength = 110@2066: EST flat binary []
Strength = 110@2238: Oracle ASM Volume, []
Strength = 110@2240: Oracle ASM Volume (cleared), []
Strength = 110@2251: Oracle ASM Volume, []
Strength = 110@2253: Oracle ASM Volume (cleared), []
Strength = 110@2258: Compaq/HP RILOE floppy image []
Strength = 110@2276: PowerISO Direct-Access-Archive []
Strength = 110@2294: BTRFS Filesystem []
Strength = 110@2399: ReFS filesystem image []
Strength = 110@2404: EWF/Expert Witness/EnCase image file format []
Strength = 110@21: FrameMaker MIF (ASCII) file [application/x-mif]
Strength = 110@140: scrshot(1) screenshot, []
Strength = 110@158: Quake I save: d1c Area 44 []
Strength = 110@180: Quake I save: ddm6 Domino []
Strength = 110@184: MAME CHD compressed hard disk image, []
Strength = 110@63: SeaBeam 2100 DR multibeam sonar []
Strength = 110@64: SeaBeam 2100 PR multibeam sonar []
Strength = 110@18: GIMP XCF image data, [image/x-xcf]
Strength = 110@30: GNOME Catalogue (gtktalog) []
Strength = 110@46: GVariant Database file, []
Strength = 110@236: GPT data structure (nonstandard: at LBA 0) []
Strength = 110@24: Vulkan trace file, little-endian []
Strength = 110@27: Vulkan trace file, big-endian []
Strength = 110@8: Guile Object []
Strength = 110@197: HP NLS message catalog, []
Strength = 110@16: AIX message catalog []
Strength = 110@534: FBM image data []
Strength = 110@739: PDS (JPL) image data []
Strength = 110@744: PDS (VICAR) image data []
Strength = 110@924: SMJPEG []
Strength = 110@970: Webshots Desktop .wbz file []
Strength = 110@974: Hercules CKD DASD image file []
Strength = 110@979: Hercules compressed CKD DASD image file []
Strength = 110@984: Hercules CKD DASD shadow file []
Strength = 110@1132: Hierarchical Data Format (version 5) data [application/x-hdf]
Strength = 110@1134: Hierarchical Data Format (version 5) with 512 bytes user block [application/x-hdf]
Strength = 110@1136: Hierarchical Data Format (version 5) with 1k user block [application/x-hdf]
Strength = 110@1138: Hierarchical Data Format (version 5) with 2k user block [application/x-hdf]
Strength = 110@1140: Hierarchical Data Format (version 5) with 4k user block [application/x-hdf]
Strength = 110@1252: AVCHD Clip Information []
Strength = 110@1293: JPEG-XR Image []
Strength = 110@1402: farbfeld image data, []
Strength = 110@1512: Microsoft DirectDraw Surface (DDS): []
Strength = 110@9: IslandDraw document []
Strength = 110@158: Linux []
Strength = 110@283: LVM2 PV (Linux Logical Volume Manager) []
Strength = 110@297: LVM2 PV (Linux Logical Volume Manager) []
Strength = 110@309: LVM2 PV (Linux Logical Volume Manager) []
Strength = 110@321: LVM2 PV (Linux Logical Volume Manager) []
Strength = 110@468: mlocate database []
Strength = 110@458: Mac OS X bill of materials (BOM) file []
Strength = 110@10: Mathematica version 2 notebook []
Strength = 110@12: Mathematica version 2 notebook []
Strength = 110@38: Mathematica notebook version 2.x []
Strength = 110@44: Mathematica notebook version 2.x []
Strength = 110@18: Mozilla lz4 compressed data [application/x-lz4+json]
Strength = 110@704: Microsoft Excel Worksheet [application/vnd.ms-excel]
Strength = 110@859: Lotus WordPro [application/vnd.lotus-wordpro]
Strength = 110@888: tz3 ms-works file []
Strength = 110@889: tz3 ms-works file []
Strength = 110@890: tz3 ms-works file []
Strength = 110@1018: First Choice database []
Strength = 110@1023: MKS Spell hash list (old format) []
Strength = 110@1115: MS Advisor help file []
Strength = 110@1130: Microsoft Cabinet archive data []
Strength = 110@1373: Microsoft WinCE install header []
Strength = 110@1422: Microsoft Reader eBook Data []
Strength = 110@281: MSX cassette archive []
Strength = 110@21: Net2phone []
Strength = 110@25: AOL ART image []
Strength = 110@26: AOL ART image []
Strength = 110@5: OCaml []
Strength = 110@8: OLE 2 Compound Document []
Strength = 110@49: OS/2 INI []
Strength = 110@52: iSiloX E-book []
Strength = 110@57: Mobipocket E-book []
Strength = 110@73: AportisDoc/PalmDOC E-book []
Strength = 110@80: BDicty PalmOS document []
Strength = 110@82: DB PalmOS document []
Strength = 110@84: FireViewer/ImageViewer PalmOS document []
Strength = 110@86: HanDBase PalmOS document []
Strength = 110@88: InfoView PalmOS document []
Strength = 110@90: iSilo PalmOS document []
Strength = 110@92: JFile PalmOS document []
Strength = 110@94: JFile Pro PalmOS document []
Strength = 110@96: List PalmOS document []
Strength = 110@98: MobileDB PalmOS document []
Strength = 110@100: PeanutPress PalmOS document []
Strength = 110@102: Plucker PalmOS document []
Strength = 110@104: QuickSheet PalmOS document []
Strength = 110@106: SuperMemo PalmOS document []
Strength = 110@108: TealDoc PalmOS document []
Strength = 110@110: TealInfo PalmOS document []
Strength = 110@112: TealMeal PalmOS document []
Strength = 110@114: TealPaint PalmOS document []
Strength = 110@116: ThinkDB PalmOS document []
Strength = 110@118: Tides PalmOS document []
Strength = 110@120: TomeRaider PalmOS document []
Strength = 110@154: Mobipocket E-book []
Strength = 110@8: Parrot bytecode []
Strength = 110@26: Maki-chan v2 image, []
Strength = 110@77: Hash::SharedMem master file, big-endian []
Strength = 110@83: Hash::SharedMem master file, little-endian []
Strength = 110@89: Hash::SharedMem data file, big-endian []
Strength = 110@95: Hash::SharedMem data file, little-endian []
Strength = 110@19: Poly/ML saved state []
Strength = 110@22: Poly/ML saved module []
Strength = 110@7: rpmsg Restricted Permission Message []
Strength = 110@12: Plot84 plotting file []
Strength = 110@46: IRIX vmcore dump of []
Strength = 110@50: SGI Audit file []
Strength = 110@54: Wingz compiled script []
Strength = 110@55: Wingz spreadsheet []
Strength = 110@56: Wingz help file []
Strength = 110@89: PCP []
Strength = 110@92: PCP pmchart view []
Strength = 110@95: PCP kmchart view []
Strength = 110@133: Alias Maya Binary File, []
Strength = 110@135: Alias Maya Binary File, []
Strength = 110@25: QL firmware executable (BCPL) []
Strength = 110@329: RADCOM WAN/LAN Analyzer capture file []
Strength = 110@37: Spectrum .TZX data []
Strength = 110@50: Spectrum .SCL Betadisk image []
Strength = 110@129: SQLite Rollback Journal []
Strength = 110@8: OpenSSH DSA public key []
Strength = 110@9: OpenSSH RSA public key []
Strength = 110@18: openssl enc'd data with salted password []
Strength = 110@13: TI-80 Graphing Calculator File. []
Strength = 110@14: TI-81 Graphing Calculator File. []
Strength = 110@18: TI-73 Graphing Calculator []
Strength = 110@36: TI-82 Graphing Calculator []
Strength = 110@53: TI-83 Graphing Calculator []
Strength = 110@71: TI-83+ Graphing Calculator []
Strength = 110@92: TI-85 Graphing Calculator []
Strength = 110@125: TI-86 Graphing Calculator []
Strength = 110@156: TI-89 Graphing Calculator []
Strength = 110@174: TI-92 Graphing Calculator []
Strength = 110@191: TI-92+/V200 Graphing Calculator []
Strength = 110@209: TI-XX Graphing Calculator (FLASH) []
Strength = 110@210: TI-XX Graphing Calculator (FLASH) []
Strength = 110@9: VICAR image data []
Strength = 110@12: Microsoft Disk Image, Virtual Server or Virtual PC [application/x-virtualbox-vhd]
Strength = 110@51: MS Windows Vista Event Log []
Strength = 110@200: Hangul (Korean) Word Processor File 2000 [application/x-hwp]
Strength = 110@6: XDelta binary patch file 0.14 []
Strength = 110@7: XDelta binary patch file 0.18 []
Strength = 110@8: XDelta binary patch file 0.20 []
Strength = 110@9: XDelta binary patch file 1.0 []
Strength = 110@10: XDelta binary patch file 1.0.4 []
Strength = 110@11: XDelta binary patch file 1.1 []
Strength = 110@16: xfsdump archive []
Strength = 110@39: ZFS shapshot (big-endian machine), []
Strength = 110@69: ZFS shapshot (little-endian machine), []
Strength = 106@260: DOS/MBR boot sector []
Strength = 105@21: Common Trace Format (CTF) plain text metadata []
Strength = 101@965: CRI ADX ADPCM audio [audio/x-adx]
Strength = 101@235: DOS Emulator image []
Strength = 101@47: KiCad Footprint []
Strength = 101@56: KiCad Netlist []
Strength = 101@190: Garmin map, []
Strength = 101@375: Windows Registry text [text/x-ms-regedit]
Strength = 100@487: AppleScript compiled []
Strength = 100@396: JRC archive data []
Strength = 100@421: CrossePAC archive data []
Strength = 100@629: Par archive data []
Strength = 100@712: Compressia archive data []
Strength = 100@841: JAM archive, []
Strength = 100@1034: RAR archive data [application/x-rar]
Strength = 100@1309: ACE archive data []
Strength = 100@121: RealMedia file [application/vnd.rn-realmedia]
Strength = 100@424: Velvet Studio AMS Module v2.2 []
Strength = 100@425: Extreme Tracker AMS Module v1.3 []
Strength = 100@448: NOA Nancy Codec Movie file []
Strength = 100@8: BBx []
Strength = 100@7: Beetle VM object file []
Strength = 100@50: Biosig/CFS: Cambridge Electronic devices File format [biosig/ced]
Strength = 100@10: Blender3D, []
Strength = 100@10: b.out archive []
Strength = 100@21: PC64 Emulator file []
Strength = 100@584: 3DO "Opera" file system []
Strength = 100@618: askSam DB []
Strength = 100@8: Old Erlang BEAM file []
Strength = 100@129: DOSFONT2 encrypted font data []
Strength = 100@31: Linuxdoom save []
Strength = 100@144: Quake I save: hip3m3 Limbo []
Strength = 100@58: GeoSwatch auf text file []
Strength = 100@105: elog journal entry []
Strength = 100@168: GNU findutils locate database data []
Strength = 100@192: CIS compimg HP Bitmapfile []
Strength = 100@18: archive []
Strength = 100@19: archive (big format) []
Strength = 100@680: Kodak Photo CD image pack file []
Strength = 100@685: Kodak Photo CD overview pack file []
Strength = 100@741: PDS (CCSD) image data []
Strength = 100@24: StuffIt Archive [application/x-stuffit]
Strength = 100@10: MapleVr4 library []
Strength = 100@11: Mozilla lz4 compressed bookmark data []
Strength = 100@993: Borland font []
Strength = 100@999: Borland device []
Strength = 100@1039: MegaDots []
Strength = 100@1428: Windows Embedded CE binary image []
Strength = 100@1439: Mallard BASIC Jetsam index data []
Strength = 100@8: Bagpipe []
Strength = 100@6: NASA SPICE file (binary format) []
Strength = 100@19: NEWEZD Electron Density Map []
Strength = 100@12: kbd map file []
Strength = 100@18: SHARC architecture file []
Strength = 100@19: SHARC architecture file []
Strength = 100@7: GNU SmallTalk []
Strength = 100@53: Spectrum .HDF hard disk image []
Strength = 91@290: CoreFoundation binary property list data, version 0x%c []
Strength = 91@813: Garmin Voice Processing Module [audio/x-vpm-wav-garmin]
Strength = 91@46: https://datadryad.org/profile/v3.1 [text/xml]
Strength = 91@2221: OpenVMS backup saveset data []
Strength = 91@877: []
Strength = 91@870: InstallShield Uninstall Script []
Strength = 91@215: MSX device BIOS []
Strength = 91@245: []
Strength = 90@937: MythTV NuppelVideo []
Strength = 90@9: NuFile archive (apple ][) data []
Strength = 90@10: NuFile archive (apple ][) data []
Strength = 90@7: Applixware []
Strength = 90@170: ASCII cpio archive (pre-SVR4 or odc) []
Strength = 90@171: ASCII cpio archive (SVR4 with no CRC) []
Strength = 90@172: ASCII cpio archive (SVR4 with CRC) []
Strength = 90@385: BSArc/BS2 archive data []
Strength = 90@415: PAKLeo archive data []
Strength = 90@425: KBoom archive data []
Strength = 90@453: FoxSQZ archive data []
Strength = 90@577: Squash archive data []
Strength = 90@625: NRV archive data []
Strength = 90@682: TPac archive data []
Strength = 90@1213: StarView MetaFile []
Strength = 90@366: Yamaha TX Wave []
Strength = 90@569: eXtra Simple Music []
Strength = 90@614: LICQ configuration file []
Strength = 90@955: AdLib instrument data []
Strength = 90@16: Biosig/Axon Binary format [biosig/abf2]
Strength = 90@96: Biosig/MFER [biosig/mfer]
Strength = 90@100: Biosig/NEV [biosig/nev]
Strength = 90@107: Biosig/Plexon v2.0 [biosig/plexon]
Strength = 90@116: Biosig/SIGIF [biosig/sigif]
Strength = 90@99: cscope reference data []
Strength = 90@26: Power 64 C64 Emulator Snapshot []
Strength = 90@54: DWG AutoDesk AutoCAD Release 1.40 [image/vnd.dwg]
Strength = 90@56: DWG AutoDesk AutoCAD Release 2.05 [image/vnd.dwg]
Strength = 90@58: DWG AutoDesk AutoCAD Release 2.10 [image/vnd.dwg]
Strength = 90@60: DWG AutoDesk AutoCAD Release 2.21 [image/vnd.dwg]
Strength = 90@62: DWG AutoDesk AutoCAD Release 2.22 [image/vnd.dwg]
Strength = 90@64: DWG AutoDesk AutoCAD Release 2.22 [image/vnd.dwg]
Strength = 90@66: DWG AutoDesk AutoCAD Release 2.50 [image/vnd.dwg]
Strength = 90@68: DWG AutoDesk AutoCAD Release 2.60 [image/vnd.dwg]
Strength = 90@70: DWG AutoDesk AutoCAD Release 9 [image/vnd.dwg]
Strength = 90@72: DWG AutoDesk AutoCAD Release 10 [image/vnd.dwg]
Strength = 90@74: DWG AutoDesk AutoCAD Release 11/12 [image/vnd.dwg]
Strength = 90@81: DWG AutoDesk AutoCAD Release 13 [image/vnd.dwg]
Strength = 90@83: DWG AutoDesk AutoCAD Release 14 [image/vnd.dwg]
Strength = 90@85: DWG AutoDesk AutoCAD 2000/2002 [image/vnd.dwg]
Strength = 90@93: DWG AutoDesk AutoCAD 2004/2005/2006 [image/vnd.dwg]
Strength = 90@95: DWG AutoDesk AutoCAD 2007/2008/2009 [image/vnd.dwg]
Strength = 90@97: DWG AutoDesk AutoCAD 2010/2011/2012 [image/vnd.dwg]
Strength = 90@99: DWG AutoDesk AutoCAD 2013/2014 [image/vnd.dwg]
Strength = 90@9: Chord text file []
Strength = 90@14: Power-Tab v3 Tablature File []
Strength = 90@15: Power-Tab v4 Tablature File []
Strength = 90@7: Citrus locale declaration for LC_CTYPE []
Strength = 90@24: Claris Works palette files .plt []
Strength = 90@9: TTCN Abstract Test Suite []
Strength = 90@22: Message Sequence Chart (subchart) []
Strength = 90@246: 7-zip archive data, []
Strength = 90@623: MUIbase DB []
Strength = 90@628: NetBSD Constant Database []
Strength = 90@28: Vim swap file []
Strength = 90@35: Nano swap file []
Strength = 90@6: Flow Cytometry Standard (FCS) data, version 1.0 []
Strength = 90@7: Flow Cytometry Standard (FCS) data, version 2.0 []
Strength = 90@8: Flow Cytometry Standard (FCS) data, version 3.0 []
Strength = 90@2321: CROMFS []
Strength = 90@62: SeaBeam 2100 multibeam sonar []
Strength = 90@130: Point Cloud Data []
Strength = 90@459: ZIF image (GIF+deflate alpha) [image/x-unknown]
Strength = 90@464: FGF image (GIF+deflate beta) [image/x-unknown]
Strength = 90@740: PDS (JPL) image data []
Strength = 90@742: PDS (CCSD) image data []
Strength = 90@846: XV thumbnail image data []
Strength = 90@954: XV "thumbnail file" (icon) data []
Strength = 90@1147: Xara graphics file []
Strength = 90@66: Linux/i386 PC Screen Font v2 data, []
Strength = 90@350: LUKS encrypted file, []
Strength = 90@8: LUKS encrypted file, []
Strength = 90@25: Maple help file, old style []
Strength = 90@29: Maple worksheet []
Strength = 90@8: Mathcad document []
Strength = 90@76: Matlab v5 mat-file []
Strength = 90@678: Microsoft Word 2.0 Document [application/msword]
Strength = 90@1020: First Choice device file []
Strength = 90@1438: Mallard BASIC Jetsam data []
Strength = 90@6: NumPy array, []
Strength = 90@43: OS/2 INF []
Strength = 90@45: OS/2 HLP []
Strength = 90@9: Maki-chan v1. []
Strength = 90@150: Epson ESC/Page language printer data []
Strength = 90@12: Qt Binary Resource file []
Strength = 90@98: PCP pmview config []
Strength = 90@36: SoftQuad troff Context intermediate for IMAGEN imPRESS []
Strength = 90@80: iRiver Database file []
Strength = 90@8: SymbOS executable []
Strength = 90@14: SymbOS DOX document []
Strength = 90@33: SymbOS video []
Strength = 90@6: Tgif file version []
Strength = 90@25: AVR assembler object code []
Strength = 90@214: Intel Quark Express Document (English) []
Strength = 90@215: Intel Quark Express Document (Korean) []
Strength = 90@216: Motorola Quark Express Document (English) [application/x-quark-xpress-3]
Strength = 90@218: Motorola Quark Express Document (Korean) []
Strength = 90@11: ZyXEL voice data []
Strength = 81@81: PackDir archive (RISC OS) []
Strength = 81@941: []
Strength = 81@945: []
Strength = 81@948: []
Strength = 81@950: []
Strength = 81@952: []
Strength = 81@954: []
Strength = 81@956: []
Strength = 81@958: []
Strength = 81@962: []
Strength = 81@967: []
Strength = 81@970: []
Strength = 81@973: []
Strength = 81@976: []
Strength = 81@979: []
Strength = 81@982: []
Strength = 81@987: []
Strength = 81@990: []
Strength = 81@992: []
Strength = 81@994: []
Strength = 81@996: []
Strength = 81@998: []
Strength = 81@1000: []
Strength = 81@1002: []
Strength = 81@1245: []
Strength = 81@1248: []
Strength = 81@1251: []
Strength = 81@15: Claris clip art []
Strength = 81@17: Claris clip art []
Strength = 81@103: Smarty compiled template []
Strength = 81@313: core file []
Strength = 81@354: core file []
Strength = 81@376: core file []
Strength = 81@398: core file []
Strength = 81@874: []
Strength = 81@880: []
Strength = 81@9: RINEX Data, GEO SBAS Broadcast []
Strength = 81@44: Microsoft OOXML []
Strength = 81@247: []
Strength = 81@249: []
Strength = 80@23: RISC OS outline font data, []
Strength = 80@25: RISC OS 1bpp font data, []
Strength = 80@27: RISC OS 4bpp font data []
Strength = 80@35: JamCracker Module sound file []
Strength = 80@36: Hippel-COSO Module sound file []
Strength = 80@47: Amiga E module []
Strength = 80@48: ECX module []
Strength = 80@909: %s []
Strength = 80@41: Apple ProDOS Image []
Strength = 80@369: Crush archive data []
Strength = 80@371: Squeeze It archive data []
Strength = 80@373: SQWEZ archive data []
Strength = 80@423: Freeze archive data []
Strength = 80@445: ZPack archive data []
Strength = 80@598: RAX archive data []
Strength = 80@600: Xtreme archive data []
Strength = 80@602: Pack Magic archive data []
Strength = 80@655: ChiefLZA archive data []
Strength = 80@657: Blink archive data []
Strength = 80@663: AKT32 archive data []
Strength = 80@666: NPack archive data []
Strength = 80@684: Ai archive data []
Strength = 80@685: Ai archive data []
Strength = 80@784: ZZip archive data []
Strength = 80@792: JAR (ARJ Software, Inc.) archive data []
Strength = 80@793: JAR (ARJ Software, Inc.) archive data []
Strength = 80@1008: Swag archive data []
Strength = 80@1252: PMarc SFX archive (CP/M, DOS) []
Strength = 80@1255: PopCom compressed executable (CP/M) []
Strength = 80@1340: sfArk compressed Soundfont []
Strength = 80@40: 3b2 core file []
Strength = 80@135: ULT(imate) Module sound data []
Strength = 80@306: NES Sound File []
Strength = 80@583: BONK, []
Strength = 80@675: Adaptive Multi-Rate Codec (GSM telephony) [audio/amr]
Strength = 80@1011: Atari 8-bit SAP audio file [audio/x-sap]
Strength = 80@89: Binary Call Format (BCF) version 2.1 []
Strength = 80@102: Binary Call Format (BCF) version 2.2 []
Strength = 80@39: Blender3D BPython script []
Strength = 80@19: LHA archive (c64) []
Strength = 80@48: DWG AutoDesk AutoCAD Release 1.0 [image/vnd.dwg]
Strength = 80@50: DWG AutoDesk AutoCAD Release 1.2 [image/vnd.dwg]
Strength = 80@52: DWG AutoDesk AutoCAD Release 1.3 [image/vnd.dwg]
Strength = 80@107: PHP script Zend Optimizer data []
Strength = 80@333: AFX compressed file data []
Strength = 80@602: IPS patch file []
Strength = 80@605: Playstation Patch File version 3.0 []
Strength = 80@617: Playstation Patch File version 2.0 []
Strength = 80@623: Playstation Patch File version 1.0 []
Strength = 80@935: Vectrex ROM image []
Strength = 80@8: Map file for the Blood Frontier/Red Eclipse FPS games []
Strength = 80@124: ROOT file []
Strength = 80@537: PostgreSQL custom database dump []
Strength = 80@638: Redis RDB file, []
Strength = 80@34: Alpha COFF format core dump (Digital UNIX) []
Strength = 80@36: Alpha COFF format core dump (Digital UNIX) []
Strength = 80@1985: ISO 9660 CD-ROM filesystem data (raw 2352 byte sectors) [application/x-iso9660-image]
Strength = 80@1987: High Sierra CD-ROM filesystem data []
Strength = 80@2005: Nero CD image at 0x4B000 [application/x-nrg]
Strength = 80@2199: AFS Dump []
Strength = 80@108: X11 Speedo font data []
Strength = 80@71: SAIC generic sensor format (GSF) sonar data, []
Strength = 80@76: MGD77 Header, Marine Geophysical Data Exchange Format []
Strength = 80@233: HP text []
Strength = 80@525: clear text Computer Graphics Metafile []
Strength = 80@1176: Wavelet Scalar Quantization image data []
Strength = 80@1232: Ulead Photo Explorer5 []
Strength = 80@1265: PFS HDR image data []
Strength = 80@7: Interleaf document text []
Strength = 80@489: Kdump compressed dump []
Strength = 80@9: LLVM byte-codes, null compression []
Strength = 80@10: LLVM byte-codes, gzip compression []
Strength = 80@11: LLVM byte-codes, bzip2 compression []
Strength = 80@40: MBX mail folder []
Strength = 80@67: portable voice format []
Strength = 80@73: portable voice format []
Strength = 80@661: Microsoft Word 6.0 Document [application/msword]
Strength = 80@699: Microsoft Excel 5.0 Worksheet [application/vnd.ms-excel]
Strength = 80@702: Microsoft Excel 5.0 Worksheet [application/vnd.ms-excel]
Strength = 80@61: MSVC .sbr []
Strength = 80@17: MSX Gigamix MGSDRV2 music file []
Strength = 80@17: Netscape folder cache []
Strength = 80@56: XLD4(Q4) picture []
Strength = 80@142: SunClock's Vector Map Format data []
Strength = 80@8: Rich Text Format data, [text/rtf]
Strength = 80@20: Old EZD Electron Density Map []
Strength = 80@32: Sereal data packet, UTF-8 encoded [application/sereal]
Strength = 80@324: HP/UX nettl capture file []
Strength = 80@34: SoftQuad troff Context intermediate for AT&T 495 laser printer []
Strength = 80@133: Panasonic channel list DataBase []
Strength = 80@99: Snoop capture file []
Strength = 80@235: TiEmu skin []
Strength = 80@6: WARC Archive []
Strength = 80@363: MS Windows 3.1 registry file []
Strength = 80@209: ChiWriter file []
Strength = 80@17: o65 []
Strength = 73@1195: SYSLINUX MBR []
Strength = 72@1087: KOffice (>=1.2) []
Strength = 71@116: Adrift game file version []
Strength = 71@12: Dalvik dex file []
Strength = 71@15: Dalvik dex file (optimized for host) []
Strength = 71@103: Partition Information Table for Samsung smartphone []
Strength = 71@229: JVT NAL sequence, H.264 video []
Strength = 71@235: MPEG sequence [video/mpeg]
Strength = 71@857: MPEG transport stream data [video/MP2T]
Strength = 71@1065: LucasArts Smush Animation Format (SAN) video []
Strength = 71@1067: LucasArts Smush v2 (SANM) video []
Strength = 71@1074: Scaleform video []
Strength = 71@22: Apple ][ WOZ 1.0 Disk Image []
Strength = 71@30: Apple ][ WOZ 2.0 Disk Image []
Strength = 71@220: Applesoft BASIC program data, first line number %d []
Strength = 71@440: []
Strength = 71@484: Apple HFS/HFS+ resource fork []
Strength = 71@508: []
Strength = 71@518: iTunes cover art []
Strength = 71@39: APT cache data, version %u []
Strength = 71@47: APT cache data, version %u []
Strength = 71@1069: Zip archive data (empty) [application/zip]
Strength = 71@1572: Gentoo binary package (XPAK) []
Strength = 71@1581: XBMC texture package [application/x-xbmc-xbt]
Strength = 71@697: VGM Video Game Music dump v [audio/x-vgm]
Strength = 71@800: GVOX Encore music, version 5.0 or above []
Strength = 71@804: GVOX Encore music, version < 5.0 []
Strength = 71@76: SAMtools BCF (Binary Call Format) []
Strength = 71@150: Sequence Alignment/Map (SAM), with header []
Strength = 71@7: BlackBerry RIM ETP file []
Strength = 71@19: compiled Java class data, [application/x-java-applet]
Strength = 71@54: Mach-O universal binary with 1 architecture: [application/x-mach-binary]
Strength = 71@118: ksh byte-code version %d []
Strength = 71@254: LZMA compressed data, [application/x-lzma]
Strength = 71@285: []
Strength = 71@67: NES ROM image (UNIF v%d format) [application/x-nes-rom]
Strength = 71@86: Famicom Disk System disk image: [application/x-fds-disk]
Strength = 71@230: Sega 32X ROM image [application/x-genesis-32x-rom]
Strength = 71@257: Sega Mega Drive / Genesis ROM image (SMD format): [application/x-genesis-rom]
Strength = 71@263: Sega Mega Drive / Genesis ROM image (SMD format): [application/x-genesis-rom]
Strength = 71@717: Nintendo GameCube embedded disc image: [application/x-gamecube-rom]
Strength = 71@731: Nintendo Wii disc image (WBFS format): [application/x-wii-rom]
Strength = 71@745: Nintendo GameCube disc image (CISO format): [application/x-wii-rom]
Strength = 71@755: Nintendo GameCube disc image (GCZ format) [application/x-gamecube-rom]
Strength = 71@796: Nintendo Wii SDK disc image: [application/x-wii-rom]
Strength = 71@811: Nintendo 3DS Game Card image []
Strength = 71@472: Extensible storage engine [application/x-ms-ese]
Strength = 71@503: Windows application compatibility Shim DataBase [application/x-ms-sdb]
Strength = 71@7: Universal EFI binary with 1 architecture []
Strength = 71@13: Erlang BEAM file []
Strength = 71@1181: Syslinux bootloader (version 2.13 or older) []
Strength = 71@2026: Compressed ISO CD image []
Strength = 71@2286: GFS1 Filesystem []
Strength = 71@2317: XFS filesystem metadump image []
Strength = 71@2336: XFS filesystem metadump image []
Strength = 71@2350: JFS2 filesystem image []
Strength = 71@2409: UBIfs image []
Strength = 71@2418: UBI image, version %u []
Strength = 71@2429: NEC PC-88 disk image, name=%s []
Strength = 71@76: X11 SNF font data, LSB first [application/x-font-sfn]
Strength = 71@93: GRUB2 font [application/x-font-pf2]
Strength = 71@137: []
Strength = 71@148: []
Strength = 71@198: []
Strength = 71@202: []
Strength = 71@207: []
Strength = 71@317: TrueType [font/ttf]
Strength = 71@49: Quake I or II world or extension [application/x-dzip]
Strength = 71@155: GPG keybox database []
Strength = 71@212: []
Strength = 71@556: Award BIOS bitmap [image/x-award-bmp]
Strength = 71@798: PCX [image/x-pcx]
Strength = 71@1552: Sega PVR (Xbox) image: []
Strength = 71@1560: Sega PVR (Xbox) image: []
Strength = 71@1588: Sega GVR image: []
Strength = 71@1594: Sega GVR image: []
Strength = 71@1604: Lytro Light Field Picture []
Strength = 71@33: Compressed Google KML Document, including resources. [application/vnd.google-earth.kmz]
Strength = 71@425: Device Tree Blob version %d []
Strength = 71@56: Emacs/XEmacs v%d byte-compiled Lisp data [application/x-elc]
Strength = 71@243: Mach-O [application/x-mach-binary]
Strength = 71@248: Mach-O [application/x-mach-binary]
Strength = 71@467: Mac OSX datafork font, TrueType []
Strength = 71@14: WebM [video/webm]
Strength = 71@48: Gridded binary (GRIB) version 1 []
Strength = 71@12: Micro Focus File with Header (DAT) [application/octet-stream]
Strength = 71@16: Micro Focus File with Header (DAT) [application/octet-stream]
Strength = 71@665: Microsoft Word for Macintosh 1.0 [application/msword]
Strength = 71@717: Lotus 1-2-3 [application/vnd.lotus-1-2-3]
Strength = 71@918: []
Strength = 71@990: []
Strength = 71@1011: Windows Recycle Bin INFO2 file (Win98 or below) []
Strength = 71@1014: Windows Recycle Bin INFO2 file (Win2k - WinXP) []
Strength = 71@1034: Delphi compiled form '%s' []
Strength = 71@1043: Windows shortcut file []
Strength = 71@1100: Norton Guide []
Strength = 71@1393: Windows Enhanced Metafile (EMF) image data []
Strength = 71@1407: %s system BIOS []
Strength = 71@46: MSX Moonblaster for MoonSound music []
Strength = 71@74: MSX SCMD Music file []
Strength = 71@207: MSX-BASIC extension ROM []
Strength = 71@251: []
Strength = 71@149: Palm OS dynamic library data "%s" []
Strength = 71@11: OpenStreetMap Protocolbuffer Binary Format []
Strength = 71@14: NEC PC-88 disk image, name=%s []
Strength = 71@129: Zenographics ZjStream printer data (big-endian) []
Strength = 71@131: Zenographics ZjStream printer data (little-endian) []
Strength = 71@11: ps database []
Strength = 71@33: Git pack [application/x-git]
Strength = 71@15: Raspberry PI kernel image []
Strength = 71@20: QL OS dump data, []
Strength = 71@301: pcapng capture file []
Strength = 71@305: pcapng capture file []
Strength = 71@61: MySQL Maria control file []
Strength = 71@48: LG robot VR6[234]xx %dm^2 navigation []
Strength = 71@230: QEMU QCOW2 Image []
Strength = 71@29: VMS Alpha executable []
Strength = 71@33: MS Windows 32bit crash dump []
Strength = 71@64: System Deployment Image [application/x-ms-sdi]
Strength = 71@129: Windows Error Report [text/plain]
Strength = 71@173: MS []
Strength = 71@516: Windows setup INFormation [application/x-setupscript]
Strength = 71@648: Windows NTbackup archive []
Strength = 71@19: WordPerfect macro []
Strength = 71@40: Xilinx RAW bitstream (.BIN) []
Strength = 71@10: YARA 3.x compiled rule set []
Strength = 71@63: , %s []
Strength = 70@10: RISC OS Chunk data []
Strength = 70@15: RISC OS AIF executable []
Strength = 70@19: RISC OS Draw file data []
Strength = 70@54: Glulx game data []
Strength = 70@7: Allegro datafile (packed) []
Strength = 70@8: Allegro datafile (not packed/autodetect) []
Strength = 70@9: Allegro datafile (appended exe data) []
Strength = 70@9: AmigaOS shared library []
Strength = 70@10: AmigaOS loadseg()ble executable/binary []
Strength = 70@11: AmigaOS object/library data []
Strength = 70@28: Future Composer 1.4 Module sound file []
Strength = 70@29: Future Composer 1.3 Module sound file []
Strength = 70@34: The Holy Noise Module sound file []
Strength = 70@45: AmigaOS outline tag []
Strength = 70@53: Rigid Disk Block []
Strength = 70@55: Amiga DOS disk []
Strength = 70@56: Amiga FFS disk []
Strength = 70@57: Amiga Inter DOS disk []
Strength = 70@58: Amiga Inter FFS disk []
Strength = 70@59: Amiga Fastdir DOS disk []
Strength = 70@60: Amiga Fastdir FFS disk []
Strength = 70@61: Kickstart disk []
Strength = 70@67: AmigaDOS script []
Strength = 70@68: AmigaDOS script []
Strength = 70@78: AMOS Basic sprite bank []
Strength = 70@80: AMOS Basic icon bank []
Strength = 70@82: AMOS Basic memory bank []
Strength = 70@86: AMOS Basic memory banks []
Strength = 70@169: Android sparse image []
Strength = 70@180: Android binary XML []
Strength = 70@11: Silicon Graphics movie file [video/x-sgi-movie]
Strength = 70@13: Apple QuickTime [video/quicktime]
Strength = 70@19: Apple QuickTime movie (unoptimized) [video/quicktime]
Strength = 70@27: Apple QuickTime image (fast start) [image/x-quicktime]
Strength = 70@31: Apple QuickTime compressed archive [application/x-quicktime-player]
Strength = 70@36: ISO Media []
Strength = 70@713: MPEG ADIF, AAC [audio/x-hx-aac-adif]
Strength = 70@861: DIF []
Strength = 70@868: Microsoft ASF [video/x-ms-asf]
Strength = 70@872: MNG video data, [video/x-mng]
Strength = 70@880: JNG video data, [video/x-jng]
Strength = 70@999: Nullsoft Video []
Strength = 70@1004: REDCode Video []
Strength = 70@1009: MTV Multimedia File []
Strength = 70@1031: Sega FILM/CPK Multimedia, []
Strength = 70@1038: Nintendo THP Multimedia []
Strength = 70@1043: BBC Dirac Video []
Strength = 70@18: a.out little-endian 32-bit executable []
Strength = 70@22: a.out little-endian 32-bit pure executable []
Strength = 70@26: a.out little-endian 32-bit demand paged pure executable []
Strength = 70@38: a.out big-endian 32-bit executable []
Strength = 70@41: a.out big-endian 32-bit pure executable []
Strength = 70@44: a.out big-endian 32-bit demand paged executable []
Strength = 70@15: Apache Parquet []
Strength = 70@7: APL workspace (Ken's original?) []
Strength = 70@11: AppleSingle encoded Macintosh file []
Strength = 70@12: AppleDouble encoded Macintosh file []
Strength = 70@82: Apple ][ 2IMG Disk Image []
Strength = 70@258: Apple Mechanic font []
Strength = 70@328: CoreAudio Format audio file []
Strength = 70@335: Mac OS X Keychain File []
Strength = 70@339: Mac OS X Code Requirement []
Strength = 70@343: Mac OS X Code Requirement Set []
Strength = 70@347: Mac OS X Code Directory []
Strength = 70@352: Mac OS X Detached Code Signature (non-executable) []
Strength = 70@355: Mac OS X Detached Code Signature []
Strength = 70@512: Apple File System (APFS) []
Strength = 70@192: very old 32-bit-int little-endian archive []
Strength = 70@193: very old 32-bit-int big-endian archive []
Strength = 70@199: old 32-bit-int little-endian archive []
Strength = 70@201: old 32-bit-int big-endian archive []
Strength = 70@207: PDP-11 old archive []
Strength = 70@208: PDP-11 4.0 archive []
Strength = 70@215: apl workspace []
Strength = 70@220: System V Release 1 ar archive [application/x-archive]
Strength = 70@334: ARC archive data, dynamic LZW [application/x-arc]
Strength = 70@336: ARC archive data, squashed [application/x-arc]
Strength = 70@338: ARC archive data, uncompressed [application/x-arc]
Strength = 70@340: ARC archive data, packed [application/x-arc]
Strength = 70@342: ARC archive data, squeezed [application/x-arc]
Strength = 70@344: ARC archive data, crunched [application/x-arc]
Strength = 70@347: PAK archive data [application/x-arc]
Strength = 70@349: ARC+ archive data [application/x-arc]
Strength = 70@351: HYP archive data [application/x-arc]
Strength = 70@375: HPack archive data []
Strength = 70@377: HAP archive data []
Strength = 70@379: MDCD archive data []
Strength = 70@381: LIM archive data []
Strength = 70@387: BSArc archive data []
Strength = 70@400: ReSOF archive data []
Strength = 70@407: X1 archive data []
Strength = 70@409: CDC Codec archive data []
Strength = 70@417: ChArc archive data []
Strength = 70@451: DRY archive data []
Strength = 70@455: AR7 archive data []
Strength = 70@457: PPMZ archive data []
Strength = 70@569: MP3-Archiver archive data []
Strength = 70@571: ZET archive data []
Strength = 70@575: ARQ archive data []
Strength = 70@579: Terse archive data []
Strength = 70@586: ABComp archive data []
Strength = 70@592: InstallShield Z archive Data []
Strength = 70@604: BTS archive data []
Strength = 70@606: ELI 5750 archive data []
Strength = 70@608: QFC archive data []
Strength = 70@609: QFC archive data []
Strength = 70@615: LZS221 archive data []
Strength = 70@623: IMP archive data []
Strength = 70@627: Squish archive data []
Strength = 70@634: SBX archive data []
Strength = 70@645: InstallShield CAB []
Strength = 70@651: BlakHole archive data []
Strength = 70@653: BIX archive data []
Strength = 70@668: PFT archive data []
Strength = 70@672: PPMD archive data []
Strength = 70@676: MSXiE archive data []
Strength = 70@678: DeepFreezer archive data []
Strength = 70@680: DC archive data []
Strength = 70@687: Ai32 archive data []
Strength = 70@688: Ai32 archive data []
Strength = 70@696: DMS archive data []
Strength = 70@698: EPC archive data []
Strength = 70@704: ReDuq archive data []
Strength = 70@706: GCA archive data []
Strength = 70@716: WinHKI archive data []
Strength = 70@720: BSN archive data []
Strength = 70@721: BSN archive data []
Strength = 70@722: BSN archive data []
Strength = 70@731: SZip archive data []
Strength = 70@754: Xpack single archive data []
Strength = 70@828: HA archive data []
Strength = 70@838: HPACK archive data []
Strength = 70@1052: RAR archive data (<v1.5) [application/x-rar]
Strength = 70@1057: squished archive data (Acorn RISCOS) []
Strength = 70@1061: UC2 archive data []
Strength = 70@1218: Zoo archive data [application/x-zoo]
Strength = 70@1283: PARity archive data []
Strength = 70@1351: EET archive [application/x-eet]
Strength = 70@1355: rzip compressed data []
Strength = 70@1371: dar archive, []
Strength = 70@1382: Symbian installation file [application/vnd.symbian.install]
Strength = 70@1386: Symbian installation file (Symbian OS 9.x) [x-epoc/x-sisx-app]
Strength = 70@1390: MoPaQ (MPQ) archive []
Strength = 70@1405: xar archive [application/x-xar]
Strength = 70@1462: Parity Archive Volume Set []
Strength = 70@1467: Bacula volume []
Strength = 70@1481: ZPAQ file []
Strength = 70@1496: Norton GHost image []
Strength = 70@1528: Google Chrome extension [application/x-chrome-extension]
Strength = 70@8: Aster*x []
Strength = 70@13: Aster*x Version 2 []
Strength = 70@11: Sun/NeXT audio data: []
Strength = 70@49: DEC audio data: []
Strength = 70@86: Standard MIDI data [audio/midi]
Strength = 70@94: Creative Music (CMF) data [audio/x-unknown]
Strength = 70@106: MultiTrack sound data []
Strength = 70@111: Extended MOD sound data, []
Strength = 70@119: RealAudio sound file [audio/x-pn-realaudio]
Strength = 70@140: ScreamTracker III Module sound data []
Strength = 70@168: MikMod UNI format module sound data []
Strength = 70@181: 4-channel Protracker module sound data [audio/x-mod]
Strength = 70@185: 4-channel Protracker module sound data [audio/x-mod]
Strength = 70@189: 4-channel Startracker module sound data [audio/x-mod]
Strength = 70@193: 8-channel Startracker module sound data [audio/x-mod]
Strength = 70@197: 4-channel Fasttracker module sound data [audio/x-mod]
Strength = 70@201: 6-channel Fasttracker module sound data [audio/x-mod]
Strength = 70@205: 8-channel Fasttracker module sound data [audio/x-mod]
Strength = 70@209: 8-channel Octalyser module sound data [audio/x-mod]
Strength = 70@213: 8-channel Octalyzer module sound data [audio/x-mod]
Strength = 70@220: 16-channel Taketracker module sound data [audio/x-mod]
Strength = 70@224: 32-channel Taketracker module sound data [audio/x-mod]
Strength = 70@237: PlaySID v2.2+ (AMIGA) sidtune []
Strength = 70@246: RSID sidtune PlaySID compatible []
Strength = 70@257: IRCAM file (VAX little-endian) []
Strength = 70@258: IRCAM file (VAX big-endian) []
Strength = 70@259: IRCAM file (Sun big-endian) []
Strength = 70@260: IRCAM file (Sun little-endian) []
Strength = 70@261: IRCAM file (MIPS little-endian) []
Strength = 70@262: IRCAM file (MIPS big-endian) []
Strength = 70@263: IRCAM file (NeXT big-endian) []
Strength = 70@264: IRCAM file (NeXT big-endian) []
Strength = 70@265: IRCAM file (NeXT little-endian) []
Strength = 70@274: Audio Visual Research file, []
Strength = 70@319: Extended NES Sound File []
Strength = 70@341: Impulse Tracker module sound data - [audio/x-mod]
Strength = 70@348: Imago Orpheus module sound data - []
Strength = 70@355: Impulse Tracker Sample []
Strength = 70@360: Impulse Tracker Instrument []
Strength = 70@376: Scream Tracker Sample []
Strength = 70@389: MED music file, version 0 []
Strength = 70@390: OctaMED Pro music file, version 1 []
Strength = 70@391: OctaMED Soundstudio music file, version 3 []
Strength = 70@394: Symphonie SymMOD music file []
Strength = 70@415: DIGI Booster Pro Module []
Strength = 70@420: FaceTheMusic module []
Strength = 70@426: Xtracker DMF Module []
Strength = 70@430: Dynamic Studio Module DSM []
Strength = 70@431: DigiTrekker DTM Module []
Strength = 70@432: DigiTrakker MDL Module []
Strength = 70@433: Protracker Studio PSM Module []
Strength = 70@434: Poly Tracker PTM Module []
Strength = 70@436: MadTracker 2.0 Module MT2 []
Strength = 70@438: RTM Module []
Strength = 70@450: Yamaha SMAF file []
Strength = 70@458: FLAC audio bitstream data [audio/flac]
Strength = 70@502: VBOX voice message data []
Strength = 70@506: RBS Song file []
Strength = 70@521: Monkey's Audio compressed format [audio/x-ape]
Strength = 70@564: Surprise! Adlib Tracker []
Strength = 70@567: eXotic ADlib []
Strength = 70@571: FM Kingtracker Song []
Strength = 70@617: SNDH Atari ST music []
Strength = 70@655: Musepack audio (MPCK) [audio/x-musepack]
Strength = 70@670: SoundFX Module sound file []
Strength = 70@681: SuperCollider3 Synth Definition file, []
Strength = 70@687: True Audio Lossless Audio []
Strength = 70@692: WavPack Lossless Audio []
Strength = 70@952: IBK instrument data []
Strength = 70@953: IBK instrument data, 2 operators []
Strength = 70@954: IBK instrument data, 4 operators []
Strength = 70@1040: Nintendo Wii BRSTM audio file [audio/x-brstm]
Strength = 70@1068: Nintendo 3DS BCSTM audio file [audio/x-bcstm]
Strength = 70@1081: Nintendo Wii U BFSTM audio file [audio/x-bfstm]
Strength = 70@1106: Nintendo 3DS BCWAV audio file [audio/x-bcwav]
Strength = 70@8: BFLT executable []
Strength = 70@22: SAMtools TBI (Tabix index format) []
Strength = 70@43: SAMtools BAM (Binary Sequence Alignment/Map) []
Strength = 70@54: SAMtools BAI (BAM indexing format) []
Strength = 70@61: CRAM []
Strength = 70@14: Biosig/Axon Binary format [biosig/abf2]
Strength = 70@22: Biosig/Axon Text fomrat [biosig/atf]
Strength = 70@25: Biosig/Axona file format [biosig/axona]
Strength = 70@27: Biosig/Axona file format [biosig/axona]
Strength = 70@33: Biosig/AXG []
Strength = 70@34: Biosig/AXG [biosig/axg]
Strength = 70@72: Biosig/DEMG [biosig/demg]
Strength = 70@87: Biosig/IgorPro ITX file [biosig/igorpro]
Strength = 70@103: Biosig/NEX [biosig/nex1]
Strength = 70@106: Biosig/Plexon v1.0 []
Strength = 70@110: Biosig/RHD2000: Intan RHD2000 format []
Strength = 70@136: Biosig/Walter Graphtek []
Strength = 70@137: Biosig/Walter Graphtek []
Strength = 70@138: Biosig/Walter Graphtek [biosig/walter-graphtek]
Strength = 70@15: 68k Blit mpx/mux executable []
Strength = 70@6: i960 b.out relocatable object []
Strength = 70@9: 386 compact demand paged pure executable []
Strength = 70@14: SPARC demand paged []
Strength = 70@23: SPARC pure []
Strength = 70@29: SPARC []
Strength = 70@6: Chiasmus encrypted data []
Strength = 70@8: D64 Image []
Strength = 70@9: D71 Image []
Strength = 70@10: D81 Image []
Strength = 70@12: X64 Image []
Strength = 70@18: ARC archive (c64) []
Strength = 70@28: WRAptor packer (c64) []
Strength = 70@53: GoatTracker 2 song []
Strength = 70@143: Bentley/Intergraph MicroStation DGN cell library []
Strength = 70@144: Bentley/Intergraph MicroStation DGN vector CAD []
Strength = 70@145: Bentley/Intergraph MicroStation DGN vector CAD []
Strength = 70@34: JAR compressed with pack200, []
Strength = 70@40: JAR compressed with pack200, []
Strength = 70@9: cisco IOS microcode []
Strength = 70@11: cisco IOS experimental microcode []
Strength = 70@64: CLIPPER instruction trace []
Strength = 70@65: CLIPPER instruction profile []
Strength = 70@155: lzip compressed data [application/x-lzip]
Strength = 70@234: Amiga xpkf.library compressed data []
Strength = 70@235: Power Packer 1.1 compressed data []
Strength = 70@236: Power Packer 2.0 compressed data, []
Strength = 70@268: LRZIP compressed data []
Strength = 70@274: LZ4 compressed data (v1.4+) [application/x-lz4]
Strength = 70@277: LZ4 compressed data (v1.0-v1.3) [application/x-lz4]
Strength = 70@279: LZ4 compressed data (v0.1-v0.9) [application/x-lz4]
Strength = 70@310: Zstandard compressed data (v0.2) [application/x-zstd]
Strength = 70@312: Zstandard compressed data (v0.3) [application/x-zstd]
Strength = 70@314: Zstandard compressed data (v0.4) [application/x-zstd]
Strength = 70@316: Zstandard compressed data (v0.5) [application/x-zstd]
Strength = 70@318: Zstandard compressed data (v0.6) [application/x-zstd]
Strength = 70@320: Zstandard compressed data (v0.7) [application/x-zstd]
Strength = 70@323: Zstandard compressed data (v0.8+) [application/x-zstd]
Strength = 70@328: Zstandard dictionary [application/x-zstd-dictionary]
Strength = 70@341: rzip compressed data []
Strength = 70@346: FreeArc archive <http://freearc.org> []
Strength = 70@349: DACT compressed data []
Strength = 70@357: Valve Pak file []
Strength = 70@385: Softlib archive []
Strength = 70@391: lzfse encoded, no compression []
Strength = 70@392: lzfse compressed, uncompressed tables []
Strength = 70@393: lzfse compressed, compressed tables []
Strength = 70@394: lzfse encoded, lzvn compressed []
Strength = 70@49: NES ROM image (iNES) [application/x-nes-rom]
Strength = 70@54: NES ROM image (Wii U Virtual Console) [application/x-nes-rom]
Strength = 70@102: NES ROM image (Nintendo 3DS Virtual Console) [application/x-nes-rom]
Strength = 70@388: Sega Dreamcast VMU game image []
Strength = 70@389: Dream Animator file []
Strength = 70@510: Microsoft Xbox executable []
Strength = 70@535: XIP, Microsoft Xbox data []
Strength = 70@536: XTF, Microsoft Xbox data []
Strength = 70@551: Microsoft Xbox 360 executable []
Strength = 70@629: SNES9x input recording []
Strength = 70@683: ScummVM savegame []
Strength = 70@707: Nintendo GameCube disc image: [application/x-gamecube-rom]
Strength = 70@724: Nintendo Wii disc image: []
Strength = 70@781: Nintendo []
Strength = 70@873: Nintendo 3DS []
Strength = 70@895: Nintendo 3DS SMDH file []
Strength = 70@909: Nintendo 3DS Homebrew Application (3DSX) []
Strength = 70@12: Convex old-style object []
Strength = 70@14: Convex old-style demand paged executable []
Strength = 70@16: Convex old-style pre-paged executable []
Strength = 70@18: Convex old-style pre-paged, non-swapped executable []
Strength = 70@20: Core file []
Strength = 70@33: dump format, 4.2 or 4.3 BSD (IDC compatible) []
Strength = 70@34: dump format, Convex Storage Manager by-reference dump []
Strength = 70@39: Convex SOFF []
Strength = 70@57: Convex SOFF core []
Strength = 70@59: Convex SOFF checkpoint []
Strength = 70@29: GCC gcno coverage (-ftest-coverage), []
Strength = 70@34: GCC gcno coverage (-ftest-coverage), []
Strength = 70@41: GCC gcda coverage (-fprofile-arcs), []
Strength = 70@46: GCC gcda coverage (-fprofile-arcs), []
Strength = 70@6: Cracklib password index, little endian []
Strength = 70@10: Cracklib password index, big endian []
Strength = 70@9: Common Trace Format (CTF) trace data (LE) []
Strength = 70@10: Common Trace Format (CTF) trace data (BE) []
Strength = 70@13: Common Trace Format (CTF) packetized metadata (LE) []
Strength = 70@16: Common Trace Format (CTF) packetized metadata (BE) []
Strength = 70@6: Map file for the AssaultCube FPS game []
Strength = 70@7: Map file for cube and cube2 engine games []
Strength = 70@6: DACT compressed data []
Strength = 70@12: GNU dbm 1.x or ndbm database, big endian, 32-bit [application/x-gdbm]
Strength = 70@14: GNU dbm 1.x or ndbm database, big endian, old [application/x-gdbm]
Strength = 70@16: GNU dbm 1.x or ndbm database, big endian, 64-bit [application/x-gdbm]
Strength = 70@18: GNU dbm 1.x or ndbm database, little endian, 32-bit [application/x-gdbm]
Strength = 70@20: GNU dbm 1.x or ndbm database, little endian, old [application/x-gdbm]
Strength = 70@22: GNU dbm 1.x or ndbm database, little endian, 64-bit [application/x-gdbm]
Strength = 70@24: GNU dbm 2.x database [application/x-gdbm]
Strength = 70@35: Berkeley DB [application/x-dbm]
Strength = 70@46: Berkeley DB []
Strength = 70@56: Berkeley DB 1.85/1.86 []
Strength = 70@58: Berkeley DB 1.85/1.86 []
Strength = 70@60: Berkeley DB 1.85/1.86 []
Strength = 70@63: Berkeley DB []
Strength = 70@65: Berkeley DB []
Strength = 70@67: Berkeley DB []
Strength = 70@70: Berkeley DB []
Strength = 70@72: Berkeley DB []
Strength = 70@74: Berkeley DB []
Strength = 70@77: Berkeley DB []
Strength = 70@79: Berkeley DB []
Strength = 70@81: Berkeley DB []
Strength = 70@85: Berkeley DB []
Strength = 70@87: Berkeley DB []
Strength = 70@89: Berkeley DB []
Strength = 70@95: RRDTool DB []
Strength = 70@515: SE Linux policy []
Strength = 70@587: Zope Object Database File Storage v3 (data) []
Strength = 70@588: Zope Object Database File Storage v4 (data) []
Strength = 70@591: Zope Object Database Client Cache File (data) []
Strength = 70@594: IDA (Interactive Disassembler) database []
Strength = 70@8: Maxis Database Packed File []
Strength = 70@36: rdiff network-delta data []
Strength = 70@38: rdiff network-delta signature data []
Strength = 70@50: X image []
Strength = 70@65: new-fs dump file (big endian), []
Strength = 70@68: old-fs dump file (big endian), []
Strength = 70@76: old-fs dump file (little endian), []
Strength = 70@80: new-fs dump file (ufs2, big endian), []
Strength = 70@83: new-fs dump file (ufs2, little endian), []
Strength = 70@6: EBML file []
Strength = 70@6: T602 document data, []
Strength = 70@9: Psion Series 5 []
Strength = 70@36: Psion Series 5 ROM multi-bitmap image []
Strength = 70@38: Psion Series 5 []
Strength = 70@48: Psion Series 5 binary: []
Strength = 70@62: Psion Series 5 executable []
Strength = 70@7: ESRI Shapefile []
Strength = 70@187: PC formatted floppy with no filesystem []
Strength = 70@1140: FATX filesystem data []
Strength = 70@1148: Netboot image, []
Strength = 70@1154: OS/2 Boot Manager []
Strength = 70@1165: pxelinux loader (version 2.13 or older) []
Strength = 70@1167: pxelinux loader []
Strength = 70@1169: pxelinux loader (version 3.70 or newer) []
Strength = 70@1554: NTFS []
Strength = 70@1560: NTFS []
Strength = 70@1587: Unix Fast File system [v1] (little-endian), []
Strength = 70@1603: Unix Fast File system [v2] (little-endian) []
Strength = 70@1623: Unix Fast File system [v2] (little-endian) []
Strength = 70@1643: Unix Fast File system [v1] (big-endian), []
Strength = 70@1663: Unix Fast File system [v2] (big-endian) []
Strength = 70@1683: Unix Fast File system [v2] (big-endian) []
Strength = 70@1757: F2FS filesystem []
Strength = 70@1813: SGI disk label (volume header) []
Strength = 70@1816: SGI XFS filesystem data []
Strength = 70@1824: Atari-ST Minix kernel image []
Strength = 70@2029: Linux Compressed ROM File System data, little endian []
Strength = 70@2039: Linux Compressed ROM File System data, big endian []
Strength = 70@2061: Linux Journalled Flash File system, little endian []
Strength = 70@2062: Linux Journalled Flash File system, big endian []
Strength = 70@2075: u-boot legacy uImage, []
Strength = 70@2150: Squashfs filesystem, big endian, []
Strength = 70@2173: Squashfs filesystem, little endian, []
Strength = 70@2340: Delta ISO data, []
Strength = 70@2360: LFS filesystem image []
Strength = 70@54: Macromedia Flash Video [video/x-flv]
Strength = 70@7: FLIF []
Strength = 70@71: X11 SNF font data, MSB first [application/x-font-sfn]
Strength = 70@103: X11 Portable Compiled Font data, []
Strength = 70@121: libGrx font data, []
Strength = 70@126: DOS code page font data collection []
Strength = 70@127: DOS code page font data []
Strength = 70@128: DOS code page font data (from Linux?) []
Strength = 70@185: Portable Font Resource font data (new) []
Strength = 70@187: Portable Font Resource font data (old) []
Strength = 70@343: OpenType font data [application/vnd.ms-opentype]
Strength = 70@373: Web Open Font Format []
Strength = 70@378: Web Open Font Format (Version 2) []
Strength = 70@35: FrameMaker MML file [application/x-mif]
Strength = 70@77: FreeBSD/i386 []
Strength = 70@87: FreeBSD/i386 pure []
Strength = 70@97: FreeBSD/i386 demand paged []
Strength = 70@107: FreeBSD/i386 compact demand paged []
Strength = 70@130: ld.so hints file (Little Endian []
Strength = 70@133: ld.so hints file (Big Endian []
Strength = 70@8: Quake II 3D Model file, []
Strength = 70@18: Quake []
Strength = 70@22: Quake II SP2 sprite file []
Strength = 70@189: doom main IWAD data []
Strength = 70@191: doom patch PWAD data []
Strength = 70@209: Warcraft III map file []
Strength = 70@297: Unreal Engine Package, []
Strength = 70@6: GCC precompiled header []
Strength = 70@10: gconv module configuration cache data []
Strength = 70@30: Knudsen seismic KEL binary (KEB) - []
Strength = 70@68: XSE multibeam []
Strength = 70@82: Caris multibeam sonar related data []
Strength = 70@108: Surfer 6 binary grid file []
Strength = 70@121: LIDAR point data records []
Strength = 70@6: GEOS []
Strength = 70@35: GIMP pattern data, []
Strength = 70@43: GIMP brush data []
Strength = 70@8: glibc locale file LC_CTYPE []
Strength = 70@9: glibc locale file LC_NUMERIC []
Strength = 70@10: glibc locale file LC_TIME []
Strength = 70@11: glibc locale file LC_COLLATE []
Strength = 70@12: glibc locale file LC_MONETARY []
Strength = 70@13: glibc locale file LC_MESSAGES []
Strength = 70@14: glibc locale file LC_ALL []
Strength = 70@15: glibc locale file LC_PAPER []
Strength = 70@16: glibc locale file LC_NAME []
Strength = 70@17: glibc locale file LC_ADDRESS []
Strength = 70@18: glibc locale file LC_TELEPHONE []
Strength = 70@19: glibc locale file LC_MEASUREMENT []
Strength = 70@20: glibc locale file LC_IDENTIFICATION []
Strength = 70@36: GStreamer binary registry []
Strength = 70@15: GNU message catalog (little endian), []
Strength = 70@96: GNU message catalog (big endian), [application/x-gettext-translation]
Strength = 70@119: GPG key trust database []
Strength = 70@10: Khronos SPIR-V binary, big-endian []
Strength = 70@14: Khronos SPIR-V binary, little-endian []
Strength = 70@48: TML 0123 byte-order format []
Strength = 70@49: TML 1032 byte-order format []
Strength = 70@50: TML 2301 byte-order format []
Strength = 70@51: TML 3210 byte-order format []
Strength = 70@53: PA-RISC1.1 relocatable object []
Strength = 70@54: PA-RISC1.1 executable []
Strength = 70@59: PA-RISC1.1 shared executable []
Strength = 70@64: PA-RISC1.1 demand-load executable []
Strength = 70@69: PA-RISC1.1 shared library []
Strength = 70@72: PA-RISC1.1 dynamic load library []
Strength = 70@76: PA-RISC2.0 relocatable object []
Strength = 70@78: PA-RISC2.0 executable []
Strength = 70@83: PA-RISC2.0 shared executable []
Strength = 70@88: PA-RISC2.0 demand-load executable []
Strength = 70@93: PA-RISC2.0 shared library []
Strength = 70@96: PA-RISC2.0 dynamic load library []
Strength = 70@100: PA-RISC1.0 relocatable object []
Strength = 70@102: PA-RISC1.0 executable []
Strength = 70@107: PA-RISC1.0 shared executable []
Strength = 70@112: PA-RISC1.0 demand-load executable []
Strength = 70@117: PA-RISC1.0 shared library []
Strength = 70@120: PA-RISC1.0 dynamic load library []
Strength = 70@124: HP s500 relocatable executable []
Strength = 70@127: HP s500 executable []
Strength = 70@130: HP s500 pure executable []
Strength = 70@134: HP s200 pure executable []
Strength = 70@141: HP s200 executable []
Strength = 70@148: HP s200 demand-load executable []
Strength = 70@155: HP s200 relocatable executable []
Strength = 70@162: HP s200 (2.x release) pure executable []
Strength = 70@166: HP s200 (2.x release) executable []
Strength = 70@170: HP s200 shared library []
Strength = 70@175: HP s200 dynamic load library []
Strength = 70@181: HP old archive []
Strength = 70@182: HP s200 old archive []
Strength = 70@183: HP s200 old archive []
Strength = 70@184: HP s500 old archive []
Strength = 70@186: HP core file []
Strength = 70@188: HP-WINDOWS font []
Strength = 70@195: compiled Lisp []
Strength = 70@204: HP []
Strength = 70@17: AIX compiled message catalog []
Strength = 70@20: AIX backup/restore format file []
Strength = 70@21: AIX backup/restore format file []
Strength = 70@13: IFF data []
Strength = 70@225: MicroDesign data []
Strength = 70@228: MicroDesign page data []
Strength = 70@234: NIFF image data [image/x-niff]
Strength = 70@414: Big TIFF image data, big-endian [image/tiff]
Strength = 70@416: Big TIFF image data, little-endian [image/tiff]
Strength = 70@495: CMU window manager raster image data []
Strength = 70@504: Artisan image data []
Strength = 70@521: GKS Metafile []
Strength = 70@543: structured fax file []
Strength = 70@636: Sun raster image data []
Strength = 70@670: FIT image data []
Strength = 70@675: FIT image data []
Strength = 70@712: DICOM medical imaging data [application/dicom]
Strength = 70@743: PDS image data []
Strength = 70@755: Atari ST STAD bitmap image data (hor) []
Strength = 70@758: Atari ST STAD bitmap image data (vert) []
Strength = 70@823: Adobe Photoshop Image [image/vnd.adobe.photoshop]
Strength = 70@849: National Imagery Transmission Format []
Strength = 70@917: GEM Metafile data []
Strength = 70@957: KISS/GS []
Strength = 70@990: Squeak image data []
Strength = 70@1014: DCX multi-page PCX image data []
Strength = 70@1019: Cineon image data []
Strength = 70@1041: Minolta Dimage camera raw image data []
Strength = 70@1061: OpenEXR image data, [image/x-exr]
Strength = 70@1100: DPX image data, big-endian, [image/x-dpx]
Strength = 70@1103: DPX image data, little-endian, [image/x-dpx]
Strength = 70@1125: NetCDF Data Format data []
Strength = 70@1130: Hierarchical Data Format (version 4) data [application/x-hdf]
Strength = 70@1150: Cartesian Perceptual Compression image [image/x-cpi]
Strength = 70@1161: OLPC firmware icon image data []
Strength = 70@1167: Cytovision Metaphases file []
Strength = 70@1168: Cytovision Karyotype file []
Strength = 70@1169: Cytovision FISH Probe file []
Strength = 70@1170: Cytovision FLEX file []
Strength = 70@1171: Cytovision FLEX file []
Strength = 70@1172: Cytovision RATS file []
Strength = 70@1186: PCO B16 image data []
Strength = 70@1237: X11 cursor []
Strength = 70@1242: Olympus ORF raw image data, big-endian [image/x-olympus-orf]
Strength = 70@1244: Olympus ORF raw image data, little-endian [image/x-olympus-orf]
Strength = 70@1246: Olympus ORF raw image data, little-endian [image/x-olympus-orf]
Strength = 70@1275: Foveon X3F raw image data [image/x-x3f]
Strength = 70@1284: Paint.NET image data [image/x-paintnet]
Strength = 70@1289: ISO/IEC 19794-2 Format Minutiae Record (FMR) []
Strength = 70@1347: BPG (Better Portable Graphics) [image/bpg]
Strength = 70@1352: Mac OS X icon [image/x-icns]
Strength = 70@1363: TIM image, []
Strength = 70@1384: MDEC video stream, []
Strength = 70@1583: Sega GVR image: []
Strength = 70@1627: ARRI ARI image data, []
Strength = 70@1749: Valve Texture Format []
Strength = 70@1763: Valve Texture Format (PS3) []
Strength = 70@1774: ASTC []
Strength = 70@1795: icrosoft Paint image data (version 1.x) []
Strength = 70@1798: Microsoft Paint image data (version 2.0) []
Strength = 70@1888: PVR 3.0 texture: []
Strength = 70@1960: Microsoft Xbox XPR0 texture []
Strength = 70@68: Intel serial flash for ICH/PCH ROM <= 5 or 3400 series A-step []
Strength = 70@69: Intel serial flash for PCH ROM []
Strength = 70@6: Interleaf saved data []
Strength = 70@58: ispell []
Strength = 70@6: ISO Zipped file []
Strength = 70@13: Java KeyStore [application/x-java-keystore]
Strength = 70@15: Java JCE KeyStore [application/x-java-jce-keystore]
Strength = 70@32: Java jmod module version 1.0 [application/x-java-jmod]
Strength = 70@37: Java module image (big endian) []
Strength = 70@42: Java module image (little endian) []
Strength = 70@98: JPEG image data, HSI proprietary []
Strength = 70@118: JPEG 2000 codestream []
Strength = 70@11: Keepass password database []
Strength = 70@44: Kerberos Keytab file []
Strength = 70@6: DEC SRC Virtual Paper Lectern file []
Strength = 70@16: Linux/i386 impure executable (OMAGIC) []
Strength = 70@18: Linux/i386 pure executable (NMAGIC) []
Strength = 70@20: Linux/i386 demand-paged executable (ZMAGIC) []
Strength = 70@22: Linux/i386 demand-paged executable (QMAGIC) []
Strength = 70@28: Linux-8086 impure executable []
Strength = 70@30: Linux-8086 executable []
Strength = 70@33: Linux-8086 object file []
Strength = 70@35: Minix-386 impure executable []
Strength = 70@37: Minix-386 executable []
Strength = 70@39: Minix-386 NSYM/GNU executable []
Strength = 70@49: Linux/i386 LILO boot/chain loader []
Strength = 70@137: Linux kernel []
Strength = 70@149: User-mode Linux COW file []
Strength = 70@189: Linux []
Strength = 70@212: Linux kernel ARM boot executable zImage (little-endian) []
Strength = 70@215: Linux kernel ARM boot executable zImage (big-endian) []
Strength = 70@219: Linux-Dev86 executable, headerless []
Strength = 70@223: Linux-8086 executable []
Strength = 70@245: SYSLINUX' LSS16 image data [image/x-lss16]
Strength = 70@251: User-Mode-Linux's Copy-On-Write disk image []
Strength = 70@256: SE Linux policy []
Strength = 70@335: LVM Snapshot (CopyOnWrite store) []
Strength = 70@342: SE Linux policy []
Strength = 70@435: locale archive []
Strength = 70@449: Linux Software RAID []
Strength = 70@453: Linux Software RAID []
Strength = 70@476: iproute2 routes dump []
Strength = 70@477: iproute2 addresses dump []
Strength = 70@482: CRIU image file v1.1 []
Strength = 70@483: CRIU service file []
Strength = 70@484: CRIU inventory []
Strength = 70@67: CLISP memory image data []
Strength = 70@68: CLISP memory image data, other endian []
Strength = 70@71: MIT scheme (library?) []
Strength = 70@8: LLVM byte-codes, uncompressed []
Strength = 70@13: LLVM bitcode, wrapper []
Strength = 70@21: LLVM IR bitcode []
Strength = 70@19: Lua bytecode, []
Strength = 70@14: StuffIt Archive (data) [application/x-stuffit]
Strength = 70@18: StuffIt Deluxe (data) []
Strength = 70@350: SPSS Portable File []
Strength = 70@353: SPSS System File []
Strength = 70@356: SPSS System File []
Strength = 70@7: magic binary file for file(1) cmd []
Strength = 70@9: magic binary file for file(1) cmd []
Strength = 70@36: Transport Neutral Encapsulation Format [application/vnd.ms-tnef]
Strength = 70@48: JAM message area header file []
Strength = 70@9: FIT Map data []
Strength = 70@17: Maple help database []
Strength = 70@39: Maple something []
Strength = 70@34: Mathematica notebook version 2.x []
Strength = 70@10: Mercurial changeset bundle []
Strength = 70@8: Mirage Assembler m.out executable []
Strength = 70@38: Mini DuMP crash report [application/x-dmp]
Strength = 70@6: MLSSA datafile, []
Strength = 70@6: MMDF mailbox []
Strength = 70@60: raw modem data []
Strength = 70@42: Atari ST M68K contiguous executable []
Strength = 70@47: Atari ST M68K non-contig executable []
Strength = 70@33: Mozilla archive omni.ja [application/x-zip]
Strength = 70@489: DR-DOS executable (COM) []
Strength = 70@572: FREE-DOS executable (COM), UPX compressed [application/x-dosexec]
Strength = 70@575: FREE-DOS executable (COM), UPX compressed [application/x-dosexec]
Strength = 70@658: Microsoft Word Document [application/msword]
Strength = 70@686: Microsoft WinWord 2.0 Document [application/msword]
Strength = 70@692: Microsoft WinWord 2.0 Document [application/msword]
Strength = 70@787: Lotus [application/vnd.lotus-1-2-3]
Strength = 70@877: Windows metafile [image/wmf]
Strength = 70@880: Windows metafile [image/wmf]
Strength = 70@883: Windows metafile [image/wmf]
Strength = 70@1022: Borland Delphi .DCU file []
Strength = 70@1027: TurboC BGI file []
Strength = 70@1028: TurboC Font file []
Strength = 70@1038: Windows 3.x .GRP file []
Strength = 70@1081: DOS EPS Binary File [image/x-eps]
Strength = 70@1092: TNEF [application/vnd.ms-tnef]
Strength = 70@1111: 4DOS help file []
Strength = 70@1367: InstallShield Cabinet archive data []
Strength = 70@23: Microsoft Visual C library []
Strength = 70@24: Microsoft Visual C library []
Strength = 70@25: Microsoft Visual C library []
Strength = 70@65: MSVC .bsc []
Strength = 70@23: KSS music file v1.03 []
Strength = 70@31: KSS music file v1.20 []
Strength = 70@12: National Instruments, []
Strength = 70@24: National Instruments, VXI File, data []
Strength = 70@7: NekoVM bytecode []
Strength = 70@57: a.out NetBSD/i386 demand paged []
Strength = 70@60: a.out NetBSD/i386 pure []
Strength = 70@63: a.out NetBSD/i386 []
Strength = 70@66: a.out NetBSD/i386 core []
Strength = 70@69: a.out NetBSD/m68k demand paged []
Strength = 70@72: a.out NetBSD/m68k pure []
Strength = 70@75: a.out NetBSD/m68k []
Strength = 70@78: a.out NetBSD/m68k core []
Strength = 70@81: a.out NetBSD/m68k4k demand paged []
Strength = 70@84: a.out NetBSD/m68k4k pure []
Strength = 70@87: a.out NetBSD/m68k4k []
Strength = 70@90: a.out NetBSD/m68k4k core []
Strength = 70@93: a.out NetBSD/ns32532 demand paged []
Strength = 70@96: a.out NetBSD/ns32532 pure []
Strength = 70@99: a.out NetBSD/ns32532 []
Strength = 70@102: a.out NetBSD/ns32532 core []
Strength = 70@105: a.out NetBSD/powerpc core []
Strength = 70@108: a.out NetBSD/SPARC demand paged []
Strength = 70@111: a.out NetBSD/SPARC pure []
Strength = 70@114: a.out NetBSD/SPARC []
Strength = 70@117: a.out NetBSD/SPARC core []
Strength = 70@120: a.out NetBSD/pmax demand paged []
Strength = 70@123: a.out NetBSD/pmax pure []
Strength = 70@126: a.out NetBSD/pmax []
Strength = 70@129: a.out NetBSD/pmax core []
Strength = 70@132: a.out NetBSD/vax 1k demand paged []
Strength = 70@135: a.out NetBSD/vax 1k pure []
Strength = 70@138: a.out NetBSD/vax 1k []
Strength = 70@141: a.out NetBSD/vax 1k core []
Strength = 70@144: a.out NetBSD/vax 4k demand paged []
Strength = 70@147: a.out NetBSD/vax 4k pure []
Strength = 70@150: a.out NetBSD/vax 4k []
Strength = 70@153: a.out NetBSD/vax 4k core []
Strength = 70@159: ECOFF NetBSD/alpha binary []
Strength = 70@162: a.out NetBSD/alpha core []
Strength = 70@166: a.out NetBSD/mips demand paged []
Strength = 70@170: a.out NetBSD/mips pure []
Strength = 70@173: a.out NetBSD/mips []
Strength = 70@176: a.out NetBSD/mips core []
Strength = 70@179: a.out NetBSD/arm32 demand paged []
Strength = 70@182: a.out NetBSD/arm32 pure []
Strength = 70@185: a.out NetBSD/arm32 []
Strength = 70@190: a.out NetBSD/arm core []
Strength = 70@194: NetBSD kernel core file []
Strength = 70@13: Netscape Communicator address book []
Strength = 70@8: NeWS bitmap font []
Strength = 70@9: NeWS font family []
Strength = 70@10: scalable OpenFont binary []
Strength = 70@11: encrypted scalable OpenFont binary []
Strength = 70@12: X11/NeWS bitmap font []
Strength = 70@13: X11/NeWS font family []
Strength = 70@6: NItpicker Flow File []
Strength = 70@14: OLF []
Strength = 70@7: OSF/Rose object []
Strength = 70@128: A GutenPalm zTXT e-book []
Strength = 70@150: Palm OS operating system patch data []
Strength = 70@6: PDP-11 single precision APL workspace []
Strength = 70@7: PDP-11 double precision APL workspace []
Strength = 70@64: perl Storable (v0.7) data []
Strength = 70@146: PGP RSA encrypted session key - []
Strength = 70@163: PGP RSA encrypted session key - []
Strength = 70@180: PGP RSA encrypted session key - []
Strength = 70@197: PGP RSA encrypted session key - []
Strength = 70@7: Plan 9 executable, Motorola 68k []
Strength = 70@8: Plan 9 executable, Intel 386 []
Strength = 70@9: Plan 9 executable, Intel 960 []
Strength = 70@10: Plan 9 executable, SPARC []
Strength = 70@11: Plan 9 executable, MIPS R3000 []
Strength = 70@12: Plan 9 executable, AT&T DSP 3210 []
Strength = 70@13: Plan 9 executable, MIPS R4000 BE []
Strength = 70@14: Plan 9 executable, AMD 29000 []
Strength = 70@15: Plan 9 executable, ARM 7-something []
Strength = 70@16: Plan 9 executable, PowerPC []
Strength = 70@17: Plan 9 executable, MIPS R4000 LE []
Strength = 70@18: Plan 9 executable, DEC Alpha []
Strength = 70@33: DOS EPS Binary File []
Strength = 70@115: RST-format raster font data []
Strength = 70@10: Pulsar POP3 daemon mailbox cache file. []
Strength = 70@14: Password Safe V3 database []
Strength = 70@8: Pyramid 90x family executable []
Strength = 70@9: Pyramid 90x family pure executable []
Strength = 70@11: Pyramid 90x family demand paged pure executable []
Strength = 70@13: python 1.5/1.6 byte-compiled []
Strength = 70@14: python 2.0 byte-compiled []
Strength = 70@15: python 2.1 byte-compiled []
Strength = 70@16: python 2.2 byte-compiled []
Strength = 70@17: python 2.3 byte-compiled []
Strength = 70@18: python 2.4 byte-compiled []
Strength = 70@19: python 2.5 byte-compiled []
Strength = 70@20: python 2.6 byte-compiled []
Strength = 70@21: python 2.7 byte-compiled []
Strength = 70@22: python 3.0 byte-compiled []
Strength = 70@23: python 3.1 byte-compiled []
Strength = 70@24: python 3.2 byte-compiled []
Strength = 70@25: python 3.3 byte-compiled []
Strength = 70@26: python 3.4 byte-compiled []
Strength = 70@27: python 3.5.1- byte-compiled []
Strength = 70@28: python 3.5.2+ byte-compiled []
Strength = 70@29: python 3.6 byte-compiled []
Strength = 70@30: python 3.7 byte-compiled []
Strength = 70@10: Conary changeset data []
Strength = 70@42: Git pack index []
Strength = 70@47: Git index []
Strength = 70@53: Mercurial bundle, []
Strength = 70@72: RIFF (little-endian) data []
Strength = 70@265: RIFF (big-endian) data []
Strength = 70@7: RPM [application/x-rpm]
Strength = 70@34: Delta RPM [application/x-rpm]
Strength = 70@10: MTZ reflection file []
Strength = 70@30: CCP4 Electron Density Map []
Strength = 70@102: GDSII Stream file []
Strength = 70@6: Sun 'jks' Java Keystore File data []
Strength = 70@6: SE Linux modular policy []
Strength = 70@8: BALANCE NS32000 .o []
Strength = 70@11: BALANCE NS32000 executable (0 @ 0) []
Strength = 70@14: BALANCE NS32000 executable (invalid @ 0) []
Strength = 70@17: BALANCE NS32000 standalone executable []
Strength = 70@26: Sereal data packet [application/sereal]
Strength = 70@29: Sereal data packet [application/sereal]
Strength = 70@24: IRIS Showcase file []
Strength = 70@26: IRIS Showcase template []
Strength = 70@28: IRIX Parallel Arena []
Strength = 70@34: IRIX core dump []
Strength = 70@38: IRIX 64-bit core dump []
Strength = 70@42: IRIX N32 core dump []
Strength = 70@74: PCP compiled namespace (V.0) []
Strength = 70@78: PCP archive []
Strength = 70@107: PCP Help []
Strength = 70@119: SpeedShop data file []
Strength = 70@122: mdbm file, version 0 (obsolete) []
Strength = 70@123: mdbm file, []
Strength = 70@137: Alias Maya Image File []
Strength = 70@138: Alias Maya Image File []
Strength = 70@12: SVG Scalable Vector Graphics image [image/svg]
Strength = 70@32: QDOS executable []
Strength = 70@36: QL plugin-ROM data, []
Strength = 70@12: NetMon capture file []
Strength = 70@25: NetMon capture file []
Strength = 70@69: NetXRay capture file []
Strength = 70@271: pcap capture file, microseconds ts (big-endian) [application/vnd.tcpdump.pcap]
Strength = 70@274: pcap capture file, microsecond ts (little-endian) [application/vnd.tcpdump.pcap]
Strength = 70@279: pcap capture file, nanosecond ts (big-endian) [application/vnd.tcpdump.pcap]
Strength = 70@282: pcap capture file, nanosecond ts (little-endian) [application/vnd.tcpdump.pcap]
Strength = 70@289: pcap capture file, microsecond ts, extensions (big-endian) []
Strength = 70@291: pcap capture file, microsecond ts, extensions (little-endian) []
Strength = 70@336: NetStumbler log file []
Strength = 70@342: EtherPeek/AiroPeek/OmniPeek capture file []
Strength = 70@347: Visual Networks traffic capture file []
Strength = 70@357: 5View capture file []
Strength = 70@35: SoftQuad troff Context intermediate for HP LaserJet []
Strength = 70@37: SoftQuad troff Context intermediate for PostScript []
Strength = 70@8: SPEC []
Strength = 70@42: Spectrum .RZX data []
Strength = 70@60: zx-state snapshot []
Strength = 70@43: MySQL ISAM index file []
Strength = 70@45: MySQL ISAM compressed data file []
Strength = 70@47: MySQL MyISAM index file []
Strength = 70@54: MySQL MyISAM compressed data file []
Strength = 70@56: MySQL Maria index file []
Strength = 70@58: MySQL Maria compressed data file []
Strength = 70@63: MySQL replication log, []
Strength = 70@123: SQLite Write-Ahead Log, []
Strength = 70@12: a.out SunOS SPARC demand paged []
Strength = 70@20: a.out SunOS SPARC pure []
Strength = 70@25: a.out SunOS SPARC []
Strength = 70@30: a.out SunOS mc68020 demand paged []
Strength = 70@38: a.out SunOS mc68020 pure []
Strength = 70@43: a.out SunOS mc68020 []
Strength = 70@48: a.out SunOS mc68010 demand paged []
Strength = 70@56: a.out SunOS mc68010 pure []
Strength = 70@61: a.out SunOS mc68010 []
Strength = 70@70: SunOS core file []
Strength = 70@92: SunPC 4.0 Hard Disk []
Strength = 70@141: COBALT boot rom data (Flat boot rom or file system) []
Strength = 70@17: SymbOS driver []
Strength = 70@320: Roland TR-707 Data []
Strength = 70@62: PDCurses screen image []
Strength = 70@108: LyX document text []
Strength = 70@9: timezone data []
Strength = 70@8: Unicode text, UTF-7 []
Strength = 70@9: Unicode text, UTF-7 []
Strength = 70@10: Unicode text, UTF-7 []
Strength = 70@11: Unicode text, UTF-7 []
Strength = 70@12: Unicode text, UTF-8-EBCDIC []
Strength = 70@13: Unicode text, UTF-32, big-endian []
Strength = 70@14: Unicode text, UTF-32, little-endian []
Strength = 70@32: unknown demand paged pure executable []
Strength = 70@34: unknown readable demand paged pure executable []
Strength = 70@7: uterus file []
Strength = 70@18: Ultrix core file []
Strength = 70@28: GNU prof performance data []
Strength = 70@32: Harbour HRB file []
Strength = 70@35: Harbour variable dump file []
Strength = 70@44: ST40 component image format []
Strength = 70@8: a []
Strength = 70@14: a []
Strength = 70@6: VAX single precision APL workspace []
Strength = 70@7: VAX double precision APL workspace []
Strength = 70@13: a.out VAX demand paged (first page unmapped) pure executable []
Strength = 70@205: VMWare3 []
Strength = 70@213: VMware4 disk image []
Strength = 70@214: VMware4 disk image []
Strength = 70@286: QEMU suspend to disk image []
Strength = 70@290: QEMU QED Image []
Strength = 70@296: VirtualBox Disk Image []
Strength = 70@306: Bochs Sparse disk image []
Strength = 70@7: Virtutech CRAFF []
Strength = 70@15: VMS VAX executable []
Strength = 70@6: VMware nvram []
Strength = 70@25: Ogg data []
Strength = 70@13: VXL data file, []
Strength = 70@13: WebAssembly (wasm) binary module []
Strength = 70@20: MS Outlook Express DBX file []
Strength = 70@137: MS Windows 3.1 group files []
Strength = 70@279: MS Windows help Full Text Search index [application/x-winhelp-fts]
Strength = 70@342: Microsoft Outlook email folder []
Strength = 70@361: MS Windows registry file, NT/2000 or above []
Strength = 70@362: MS Windows 95/98/ME registry file []
Strength = 70@6: CRDA wireless regulatory database file []
Strength = 70@204: Ted Neslson's CosmicBook hypertext file []
Strength = 70@206: AmigaWriter file []
Strength = 70@211: ChiWriter file []
Strength = 70@221: Adobe InDesign []
Strength = 70@262: gfxboot compiled html help file []
Strength = 70@9: PHP WSDL cache, []
Strength = 70@13: VCDIFF binary diff []
Strength = 70@14: core file (Xenix) []
Strength = 70@73: b.out []
Strength = 70@7: xo65 object, []
Strength = 70@13: xo65 library, []
Strength = 70@20: Jaleo XFS file []
Strength = 70@32: Xcursor data [image/x-xcursor]
Strength = 70@9: object file (z8000 a.out) []
Strength = 70@10: pure object file (z8000 a.out) []
Strength = 70@11: separate object file (z8000 a.out) []
Strength = 70@12: overlay object file (z8000 a.out) []
Strength = 61@24: Apache Hadoop Sequence file version %d []
Strength = 61@465: MS Compress archive data, KWAJ variant [application/x-ms-compress-kwaj]
Strength = 61@563: MS Compress archive data, QBasic variant [application/x-ms-compress-sz]
Strength = 61@865: General Digital Music. []
Strength = 61@883: Hively Tracker Song []
Strength = 61@888: MOdule with MP3 []
Strength = 61@900: by Bastian Spiegel(twice/lego)" []
Strength = 61@911: Farandole Tracker Song []
Strength = 61@59: RAP 1.%d Batch (TD.32, Returned Account Procedure), []
Strength = 61@65: RAP Acknowledgement (TD.32, Returned Account Procedure) []
Strength = 61@379: BWC compressed data []
Strength = 61@54: LCOV coverage tracefile []
Strength = 61@43: Cups Raster version 1, Big Endian []
Strength = 61@52: Cups Raster version 1, Little Endian []
Strength = 61@248: HP 38 []
Strength = 61@267: HP 38 []
Strength = 61@124: JPEG-XR [image/jxr]
Strength = 61@106: MSX G9B image, depth=%d []
Strength = 61@139: Oak Technologies printer stream []
Strength = 61@28: Spectrum .TAP data "%-10.10s" []
Strength = 61@232: Just System Word Processor Ichitaro v4 [application/x-ichitaro4]
Strength = 61@237: Just System Word Processor Ichitaro v5 [application/x-ichitaro5]
Strength = 61@241: Just System Word Processor Ichitaro v6 [application/x-ichitaro6]
Strength = 61@10: Yanagisawa PIC image file, []
Strength = 60@64: LZX compressed archive (Amiga) []
Strength = 60@973: Bink Video []
Strength = 60@1048: RAD Game Tools Smacker Multimedia []
Strength = 60@7: Apache Avro []
Strength = 60@12: Apache ORC []
Strength = 60@18: Apache Hive RC file []
Strength = 60@7: Binary II (apple ][) data []
Strength = 60@383: SAR archive data []
Strength = 60@390: MAR archive data []
Strength = 60@398: Quantum archive data []
Strength = 60@411: AMGC archive data []
Strength = 60@419: PSA archive data []
Strength = 60@443: ESP archive data []
Strength = 60@449: UFA archive data []
Strength = 60@583: UHarc archive data []
Strength = 60@585: ABComp archive data []
Strength = 60@588: CMP archive data []
Strength = 60@590: Splint archive data []
Strength = 60@594: Gather archive data []
Strength = 60@596: BOA archive data []
Strength = 60@611: PRO-PACK archive data []
Strength = 60@613: 777 archive data []
Strength = 60@617: HPA archive data []
Strength = 60@630: Par archive data []
Strength = 60@636: NaShrink archive data []
Strength = 60@641: Disintegrator archive data []
Strength = 60@643: ASD archive data []
Strength = 60@647: TOP4 archive data []
Strength = 60@664: AKT archive data []
Strength = 60@670: SemOne archive data []
Strength = 60@674: FIZ archive data []
Strength = 60@690: SBC archive data []
Strength = 60@692: Ybs archive data []
Strength = 60@694: DitPack archive data []
Strength = 60@700: VSARC archive data []
Strength = 60@702: PDZ archive data []
Strength = 60@714: UHBC archive data []
Strength = 60@718: WWPack archive data []
Strength = 60@723: BSN archive data []
Strength = 60@724: BSN archive data []
Strength = 60@725: BSN archive data []
Strength = 60@743: XPA []
Strength = 60@785: ZZip archive data []
Strength = 60@788: PAQ archive data []
Strength = 60@1004: PUT archive data []
Strength = 60@1477: ZPAQ stream []
Strength = 60@1536: SeqBox, []
Strength = 60@96: SoundBlaster instrument data [audio/x-unknown]
Strength = 60@231: TOC sound file []
Strength = 60@296: Audio file with ID3 version 2 []
Strength = 60@393: MED_Song []
Strength = 60@398: AHX version []
Strength = 60@441: AMF Module []
Strength = 60@558: AMUSIC Adlib Tracker []
Strength = 60@560: EdLib []
Strength = 60@573: DFM Song []
Strength = 60@621: Musepack audio (MP+) [audio/x-musepack]
Strength = 60@877: Multitracker []
Strength = 60@996: Portable Sound Format [audio/x-psf]
Strength = 60@58: Biosig/GDF: General data format for biosignals [biosig/gdf]
Strength = 60@9: Chiasmus key []
Strength = 60@21: Microstation []
Strength = 60@6: Concise Binary Object Representation (CBOR) container [application/cbor]
Strength = 60@21: Message Sequence Chart (chart) []
Strength = 60@144: bzip2 compressed data [application/x-bzip2]
Strength = 60@150: bzip compressed data [application/x-bzip]
Strength = 60@505: CPE executable []
Strength = 60@592: Nintendo Gameboy Music/Audio Data []
Strength = 60@522: ICE authority data []
Strength = 60@46: ddis/ddif []
Strength = 60@47: ddis/dots archive []
Strength = 60@48: ddis/dtif table data []
Strength = 60@49: LN03 output []
Strength = 60@2382: floppy image data (TeleDisk, compressed) []
Strength = 60@2383: floppy image data (TeleDisk) []
Strength = 60@2385: floppy image data (CopyQM, []
Strength = 60@10: libfprint fingerprint data V1 []
Strength = 60@14: libfprint fingerprint data V2 []
Strength = 60@114: FIGlet font []
Strength = 60@116: FIGlet controlfile []
Strength = 60@5: FuseCompress(ed) data []
Strength = 60@42: LADS Caris Ascii Format (CAF) bathymetric lidar []
Strength = 60@45: LADS Caris Binary Format (CBF) bathymetric lidar waveform data []
Strength = 60@96: ECMA-363, Universal 3D []
Strength = 60@8: Gringotts data file []
Strength = 60@470: PBF image (deflate compression) [image/x-unknown]
Strength = 60@25: Linux/i386 object file []
Strength = 60@270: LVM1 (Linux Logical Volume Manager), version 1 []
Strength = 60@273: LVM1 (Linux Logical Volume Manager), version 2 []
Strength = 60@20: StuffIt Deluxe Segment (data) []
Strength = 60@334: SAS []
Strength = 60@341: SAS 7+ []
Strength = 60@64: MAthematica .ml file []
Strength = 60@6: mcrypt 2.5 encrypted data, []
Strength = 60@11: mcrypt 2.2 encrypted data, []
Strength = 60@356: FreeDOS KEYBoard Layout collection []
Strength = 60@367: FreeDOS KEYBoard Layout file []
Strength = 60@1397: Microsoft Word Document [application/msword]
Strength = 60@1433: Mallard BASIC program data (v1.11) []
Strength = 60@1434: Mallard BASIC program data (v1.29+) []
Strength = 60@1435: Mallard BASIC protected program data (v1.11) []
Strength = 60@1436: Mallard BASIC protected program data (v1.29+) []
Strength = 60@10: MSX Gigamix MGSDRV3 music file, []
Strength = 60@49: MSX Music Player K-kaz song []
Strength = 60@8: Progressive Graphics image data, [image/x-pgf]
Strength = 60@129: PGP RSA encrypted session key - []
Strength = 60@19: PostScript document text [application/postscript]
Strength = 60@88: HP PCL printer data []
Strength = 60@22: SCCS archive data []
Strength = 60@75: PCP compiled namespace []
Strength = 60@115: PCP memory mapped values []
Strength = 60@9: QL disk dump data, []
Strength = 60@22: Smile binary data []
Strength = 60@230: Virtual TI skin []
Strength = 60@15: Unicode text, SCSU (Standard Compression Scheme for Unicode) []
Strength = 60@20: a []
Strength = 60@26: script executable []
Strength = 60@8: Compiled XKB Keymap: lsb, []
Strength = 60@11: Compiled XKB Keymap: msb, []
Strength = 56@28: []
Strength = 55@71: new-fs dump file (little endian), []
Strength = 51@41: Infocom (Z-machine %d []
Strength = 51@450: MPEG ADTS, layer III, v1, 32 kbps [audio/mpeg]
Strength = 51@801: FLI animation, 320x200x8 [video/x-fli]
Strength = 51@812: FLC animation [video/x-flc]
Strength = 51@372: Apple Driver Map [application/x-apple-diskimage]
Strength = 51@440: TTComp archive, binary, 4K dictionary []
Strength = 51@738: Xpack DiskImage archive data []
Strength = 51@776: Dzip archive data [application/x-dzip]
Strength = 51@986: Lossless audio version 0.3 []
Strength = 51@13: Blocked GNU Zip Format (BGZF; gzip compatible) []
Strength = 51@114: Kompas drawing 12.0 SP1 []
Strength = 51@154: 3D Studio model [image/x-3ds]
Strength = 51@41: Monu-Cad Drawing, Component or Font []
Strength = 51@575: Lynx homebrew cartridge [application/x-atari-lynx-rom]
Strength = 51@11: COFF format alpha pure []
Strength = 51@17: Dyalog APL []
Strength = 51@12: configuration of Tasmota firmware (ESP8266) [application/x-tasmota-dmp]
Strength = 51@193: Sun disk label []
Strength = 51@1308: GRand Unified Bootloader []
Strength = 51@51: []
Strength = 51@34: Printer Font Metrics [application/x-font-pfm]
Strength = 51@138: GPG symmetrically encrypted data (3DES cipher) []
Strength = 51@36: GPT partition table []
Strength = 51@28: AIX core file []
Strength = 51@576: PC bitmap, OS/2 1.x format [image/x-ms-bmp]
Strength = 51@872: []
Strength = 51@1615: Vision Research CINE Video, []
Strength = 51@41: []
Strength = 51@46: []
Strength = 51@48: []
Strength = 51@119: []
Strength = 51@37: Emacs v18 byte-compiled Lisp data [application/x-elc]
Strength = 51@389: Macintosh HFS data [application/x-apple-diskimage]
Strength = 51@38: []
Strength = 51@17: MARC21 Bibliographic [application/marc]
Strength = 51@35: raw G3 (Group 3) FAX, byte-padded [image/g3fax]
Strength = 51@46: raw G3 (Group 3) FAX [image/g3fax]
Strength = 51@80: Brooktrout 301 fax image, []
Strength = 51@54: MS-DOS executable [application/x-dosexec]
Strength = 51@563: FREE-DOS executable (COM), UPX compressed [application/x-dosexec]
Strength = 51@594: COM executable for DOS [application/x-dosexec]
Strength = 51@599: COM executable for DOS [application/x-dosexec]
Strength = 51@66: MSX OPX Music file []
Strength = 51@136: MSX BIOS+BASIC []
Strength = 51@176: MSX2/2+/TR SubROM []
Strength = 51@190: MSX ROM []
Strength = 51@226: MSX ROM []
Strength = 51@247: MSX ROM with nonstandard page order []
Strength = 51@255: MSX ROM with nonstandard page order []
Strength = 51@263: MSX MegaROM with nonstandard page order []
Strength = 51@303: Konami King's Valley-2 custom stage, title: "%-8.8s" []
Strength = 51@64: Yanagisawa Pi 16 color picture, []
Strength = 51@19: PDP-11 UNIX/RT ldp []
Strength = 51@31: Perl script text executable [text/x-perl]
Strength = 51@26: Sendmail frozen configuration []
Strength = 51@40: SYMMETRY i386 standalone executable []
Strength = 51@17: Compiled terminfo entry "%-s" [application/x-terminfo]
Strength = 51@30: Compiled 32-bit terminfo entry "%-s" [application/x-terminfo2]
Strength = 51@409: []
Strength = 51@18: Xilinx BIT data []
Strength = 50@7: COFF DSP21k []
Strength = 50@13: ALAN game data []
Strength = 50@13: 0420 Alliant virtual executable []
Strength = 50@16: 0421 Alliant compact executable []
Strength = 50@13: Amiga Workbench []
Strength = 50@43: AmigaOS bitmap font []
Strength = 50@44: AmigaOS outline font []
Strength = 50@33: JPEG 2000 image [image/jp2]
Strength = 50@496: MPEG ADTS, layer II, v1 [audio/mpeg]
Strength = 50@571: MPEG ADTS, layer III, v2 [audio/mpeg]
Strength = 50@606: MPEG ADTS, layer II, v2 [audio/mpeg]
Strength = 50@641: MPEG ADTS, layer I, v2 [audio/mpeg]
Strength = 50@676: MPEG ADTS, layer III, v2.5 [audio/mpeg]
Strength = 50@738: MPEG ADTS, AAC [audio/x-hx-aac-adts]
Strength = 50@775: MPEG-4 LOAS [audio/x-mp4a-latm]
Strength = 50@8: Squeezed (apple ][) data []
Strength = 50@166: cpio archive [application/x-cpio]
Strength = 50@168: byte-swapped cpio archive [application/x-cpio]
Strength = 50@190: very old 16-bit-int little-endian archive []
Strength = 50@191: very old 16-bit-int big-endian archive []
Strength = 50@195: old 16-bit-int little-endian archive []
Strength = 50@197: old 16-bit-int big-endian archive []
Strength = 50@402: QuArk archive data []
Strength = 50@404: YAC archive data []
Strength = 50@406: X1 archive data []
Strength = 50@427: NSQ archive data []
Strength = 50@447: Sky archive data []
Strength = 50@619: Arhangel archive data []
Strength = 50@632: HIT archive data []
Strength = 50@659: Logitech Compress archive data []
Strength = 50@708: PPMN archive data []
Strength = 50@727: AIN archive data []
Strength = 50@728: AIN archive data []
Strength = 50@796: ARJ archive data [application/x-arj]
Strength = 50@815: ARJ archive data []
Strength = 50@1263: PRCS packaged project []
Strength = 50@1295: Atari MSA archive data []
Strength = 50@21: WE32000 COFF []
Strength = 50@33: WE32000 COFF executable (TV) []
Strength = 50@990: Sony PlayStation Audio []
Strength = 50@14: VAX-order 68K Blit (standalone) executable []
Strength = 50@16: VAX-order2 68k Blit mpx/mux executable []
Strength = 50@17: VAX-order 68k Blit mpx/mux executable []
Strength = 50@25: C64 PCLink Image []
Strength = 50@146: Bentley/Intergraph MicroStation []
Strength = 50@10: Clarion Developer (v2 and above) data file []
Strength = 50@21: Clarion Developer (v2 and above) memo data []
Strength = 50@27: Clarion Developer (v2 and above) help data []
Strength = 50@31: CLIPPER COFF executable (VAX #) []
Strength = 50@39: CLIPPER COFF executable []
Strength = 50@12: compress'd data [application/x-compress]
Strength = 50@122: packed data [application/octet-stream]
Strength = 50@128: old packed data [application/octet-stream]
Strength = 50@134: compacted data [application/octet-stream]
Strength = 50@138: compacted data [application/octet-stream]
Strength = 50@140: huf output [application/octet-stream]
Strength = 50@161: squeezed data, []
Strength = 50@163: crunched data, []
Strength = 50@165: LZH compressed data, []
Strength = 50@169: frozen file 2.1 []
Strength = 50@170: frozen file 1.0 (or gzip 0.5) []
Strength = 50@173: SCO compress -H (LZH) data []
Strength = 50@231: Quasijarus strong compressed data []
Strength = 50@41: Alpha compressed COFF []
Strength = 50@42: Alpha u-code object []
Strength = 50@56: locale data table []
Strength = 50@9: ATSC A/52 aka AC-3 aka Dolby Digital stream, [audio/vnd.dolby.dd-raw]
Strength = 50@86: old-fs dump file (16-bit, assuming PDP-11 endianness), []
Strength = 50@61: Dyalog APL transfer []
Strength = 50@9: Encore []
Strength = 50@18: Encore unsupported executable []
Strength = 50@1714: Linux []
Strength = 50@2146: Linux old jffs2 filesystem data little endian []
Strength = 50@2147: Linux jffs2 filesystem data little endian []
Strength = 50@2391: floppy image data (IBM SaveDskF, old) []
Strength = 50@2392: floppy image data (IBM SaveDskF) []
Strength = 50@2393: floppy image data (IBM SaveDskF, compressed) []
Strength = 50@7: Berkeley vfont data []
Strength = 50@8: byte-swapped Berkeley vfont data []
Strength = 50@8: fsav macro virus signatures []
Strength = 50@12: RDI Acoustic Doppler Current Profiler (ADCP) []
Strength = 50@57: GeoSwath RDF []
Strength = 50@122: GPG encrypted data [text/PGP]
Strength = 50@42: Apollo m68k COFF executable []
Strength = 50@45: apollo a88k COFF executable []
Strength = 50@284: hp200 (68010) BSD []
Strength = 50@288: hp300 (68020+68881) BSD []
Strength = 50@21: 370 XA sysV executable []
Strength = 50@25: 370 XA sysV pure executable []
Strength = 50@29: 370 sysV pure executable []
Strength = 50@31: 370 XA sysV pure executable []
Strength = 50@33: 370 sysV executable []
Strength = 50@35: 370 XA sysV executable []
Strength = 50@37: SVR2 executable (Amdahl-UTS) []
Strength = 50@40: SVR2 pure executable (Amdahl-UTS) []
Strength = 50@43: SVR2 pure executable (USS/370) []
Strength = 50@46: SVR2 executable (USS/370) []
Strength = 50@6: executable (RISC System/6000 V3.1) or obj module []
Strength = 50@13: shared library []
Strength = 50@14: ctab data []
Strength = 50@15: structured file []
Strength = 50@23: 64-bit XCOFF executable or object module []
Strength = 50@218: Netpbm PAM image file [image/x-portable-pixmap]
Strength = 50@222: Solitaire Image Recorder format []
Strength = 50@528: MGR bitmap, modern format, 8-bit aligned []
Strength = 50@529: MGR bitmap, old format, 1-bit deep, 16-bit aligned []
Strength = 50@530: MGR bitmap, old format, 1-bit deep, 32-bit aligned []
Strength = 50@531: MGR bitmap, modern format, squeezed []
Strength = 50@547: Award BIOS Logo, 136 x 84 [image/x-award-bioslogo]
Strength = 50@549: Award BIOS Logo, 136 x 126 [image/x-award-bioslogo]
Strength = 50@617: RLE image data, []
Strength = 50@658: SGI image data []
Strength = 50@706: PEX Binary Archive []
Strength = 50@764: Atari ATR image []
Strength = 50@1393: BS image, []
Strength = 50@1786: Zebra Metafile graphic []
Strength = 50@17: basic-16 executable []
Strength = 50@20: basic-16 executable (TV) []
Strength = 50@23: x86 executable []
Strength = 50@25: x86 executable (TV) []
Strength = 50@27: iAPX 286 executable small model (COFF) []
Strength = 50@30: iAPX 286 executable large model (COFF) []
Strength = 50@55: BIOS (ia32) ROM Ext. [application/octet-stream]
Strength = 50@12: little endian ispell []
Strength = 50@34: big endian ispell []
Strength = 50@10: Java serialization data []
Strength = 50@8: lif file []
Strength = 50@60: Linux/i386 PC Screen Font v1 data, []
Strength = 50@372: Macintosh MFS data []
Strength = 50@417: Macintosh HFS Extended []
Strength = 50@7: MIPSEB ECOFF executable []
Strength = 50@16: MIPSEL-BE ECOFF executable []
Strength = 50@25: MIPSEB-LE ECOFF executable []
Strength = 50@34: MIPSEL ECOFF executable []
Strength = 50@45: MIPSEB MIPS-II ECOFF executable []
Strength = 50@54: MIPSEL-BE MIPS-II ECOFF executable []
Strength = 50@63: MIPSEB-LE MIPS-II ECOFF executable []
Strength = 50@72: MIPSEL MIPS-II ECOFF executable []
Strength = 50@83: MIPSEB MIPS-III ECOFF executable []
Strength = 50@92: MIPSEL-BE MIPS-III ECOFF executable []
Strength = 50@101: MIPSEB-LE MIPS-III ECOFF executable []
Strength = 50@110: MIPSEL MIPS-III ECOFF executable []
Strength = 50@119: MIPSEB Ucode []
Strength = 50@120: MIPSEL-BE Ucode []
Strength = 50@10: ID tags data []
Strength = 50@8: mc68k COFF []
Strength = 50@17: mc68k executable (shared) []
Strength = 50@19: mc68k executable (shared demand paged) []
Strength = 50@24: 68K BCS executable []
Strength = 50@30: 88K BCS executable []
Strength = 50@33: Motorola S-Record; binary data in text format []
Strength = 50@54: Atari 68xxx executable, []
Strength = 50@70: Atari 68xxx CPX file []
Strength = 50@37: MS Windows COFF MIPS R4000 object file []
Strength = 50@39: MS Windows COFF Alpha object file []
Strength = 50@41: MS Windows COFF Motorola 68000 object file []
Strength = 50@43: MS Windows COFF PowerPC object file []
Strength = 50@45: MS Windows COFF PA-RISC object file []
Strength = 50@581: COM executable for DOS [application/x-dosexec]
Strength = 50@585: COM executable for DOS [application/x-dosexec]
Strength = 50@589: COM executable for DOS [application/x-dosexec]
Strength = 50@603: COM executable for DOS [application/x-dosexec]
Strength = 50@607: COM executable for MS-DOS [application/x-dosexec]
Strength = 50@611: COM executable for MS-DOS [application/x-dosexec]
Strength = 50@615: COM executable for MS-DOS [application/x-dosexec]
Strength = 50@619: COM executable for DOS [application/x-dosexec]
Strength = 50@636: MS-DOS executable (built-in) []
Strength = 50@10: Tower/XP rel 2 object []
Strength = 50@15: Tower/XP rel 2 object []
Strength = 50@20: Tower/XP rel 3 object []
Strength = 50@25: Tower/XP rel 3 object []
Strength = 50@30: Tower32/600/400 68020 object []
Strength = 50@35: Tower32/800 68020 []
Strength = 50@43: Tower32/800 68010 []
Strength = 50@31: OS9/6809 module: []
Strength = 50@53: OS9/68K module: []
Strength = 50@10: i386 COFF object []
Strength = 50@8: PARIX []
Strength = 50@8: "compact bitmap" format (Poskanzer) []
Strength = 50@11: PDP-11 executable []
Strength = 50@22: PDP-11 old overlay []
Strength = 50@24: PDP-11 pure executable []
Strength = 50@28: PDP-11 separate I&D executable []
Strength = 50@32: PDP-11 kernel overlay []
Strength = 50@35: PDP-11 demand-paged pure executable []
Strength = 50@38: PDP-11 overlaid pure executable []
Strength = 50@41: PDP-11 overlaid separate executable []
Strength = 50@48: PGP key security ring [application/x-pgp-keyring]
Strength = 50@50: PGP key security ring [application/x-pgp-keyring]
Strength = 50@52: PGP encrypted data [text/PGP]
Strength = 50@8: mumps avl global []
Strength = 50@12: mumps blt global []
Strength = 50@8: PostScript document text [application/postscript]
Strength = 50@110: interLaced eXtensible Trace (LXT) file []
Strength = 50@24: SYMMETRY i386 .o []
Strength = 50@27: SYMMETRY i386 executable (0 @ 0) []
Strength = 50@30: SYMMETRY i386 executable (invalid @ 0) []
Strength = 50@16: disk quotas file []
Strength = 50@18: IRIS Showcase file []
Strength = 50@21: IRIS Showcase template []
Strength = 50@21: SHARC COFF binary []
Strength = 50@28: QDOS object []
Strength = 50@318: Novell LANalyzer capture file []
Strength = 50@319: Novell LANalyzer capture file []
Strength = 50@16: Compiled PSI (v1) data []
Strength = 50@17: Compiled PSI (v2) data []
Strength = 50@20: SoftQuad DESC or font file binary []
Strength = 50@26: SoftQuad troff Context intermediate []
Strength = 50@11: MySQL table definition file []
Strength = 50@9: SysEx File - []
Strength = 50@39: SVr2 curses screen image, big-endian []
Strength = 50@40: SVr3 curses screen image, big-endian []
Strength = 50@41: SVr4 curses screen image, big-endian []
Strength = 50@43: SVr2 curses screen image, little-endian []
Strength = 50@44: SVr3 curses screen image, little-endian []
Strength = 50@45: SVr4 curses screen image, little-endian []
Strength = 50@13: TeX DVI file [application/x-dvi]
Strength = 50@16: TeX generic font data []
Strength = 50@17: TeX packed font data []
Strength = 50@19: TeX virtual font data []
Strength = 50@26: TeX font metric data [application/x-tex-tfm]
Strength = 50@29: TeX font metric data [application/x-tex-tfm]
Strength = 50@38: very old (C/A/T) troff output data []
Strength = 50@10: Perkin-Elmer executable []
Strength = 50@12: amd 29k coff noprebar executable []
Strength = 50@13: amd 29k coff prebar executable []
Strength = 50@14: amd 29k coff archive []
Strength = 50@16: unicos (cray) executable []
Strength = 50@22: VAX COFF executable []
Strength = 50@25: VAX COFF pure executable []
Strength = 50@6: VISX image file []
Strength = 50@35: x.out []
Strength = 50@38: Microsoft a.out []
Strength = 50@66: old Microsoft 8086 x.out []
Strength = 50@92: XENIX 8086 relocatable or 80286 small model []
Strength = 48@53: SVG XML document [image/svg+xml]
Strength = 46@544: Windows Precompiled iNF [application/x-pnf]
Strength = 41@158: AppleWorks Word Processor [application/x-appleworks3]
Strength = 41@31: TAP 3.%d Batch (TD.57, Transferred Account) []
Strength = 41@39: TAP 3.%d Notification (TD.57, Transferred Account) []
Strength = 41@47: NRT 2.%d (TD.35, Near Real Time Roaming Data Exchange) []
Strength = 41@949: Nintendo amiibo NFC dump - amiibo ID: %08X- []
Strength = 41@185: DBF []
Strength = 41@13: eml://ecoinformatics.org/%s []
Strength = 41@40: https://www.openarchives.org/ore/terms [application/rdf+xml]
Strength = 41@30: DER Encoded Certificate request []
Strength = 41@37: DER Encoded Key Pair, 512 bits []
Strength = 41@42: DER Encoded Key Pair, 1024 bits []
Strength = 41@47: DER Encoded Key Pair, 2048 bits []
Strength = 41@52: DER Encoded Key Pair, 4096 bits []
Strength = 41@57: DER Encoded Key Pair, 8192 bits []
Strength = 41@62: DER Encoded Key Pair, 16k bits []
Strength = 41@67: DER Encoded Key Pair, 32k bits []
Strength = 41@72: DER Encoded Certificate, 512 bits []
Strength = 41@20: []
Strength = 41@28: []
Strength = 41@728: XWD X Window Dump image data [image/x-xwindowdump]
Strength = 41@96: []
Strength = 41@325: TomTom activity file, v7 []
Strength = 41@20: Micro Focus Index File (IDX) [application/octet-stream]
Strength = 41@475: DOS executable (COM, 0x8C-variant) [application/x-dosexec]
Strength = 41@511: []
Strength = 41@524: []
Strength = 41@533: COM executable (32-bit COMBOOT [application/x-c32-comboot-syslinux-exec]
Strength = 41@1479: DOS 2.0-3.2 backed up []
Strength = 41@88: MSX SC2/GRP raw image []
Strength = 41@100: MSX Graph Saurus compressed image []
Strength = 41@278: MSX-BASIC program []
Strength = 41@287: MSX Mega-Assembler source []
Strength = 41@24: PGP key public ring (v%u) [application/pgp-keys]
Strength = 41@535: PGP Secret Sub-key []
Strength = 41@20: Sendmail frozen configuration []
Strength = 41@39: Soundtrakker 128 ST2 music, []
Strength = 41@16: []
Strength = 41@412: []
Strength = 41@415: []
Strength = 41@28: 8086 relocatable (Microsoft) [application/x-object]
Strength = 40@175: AutoCAD Drawing Exchange Format [application/x-dxf]
Strength = 40@623: COM executable for MS-DOS [application/x-dosexec]
Strength = 40@626: COM executable for DOS [application/x-dosexec]
Strength = 40@15: IBM OS/400 save file data []
Strength = 40@255: PGP symmetric key encrypted data - []
Strength = 40@520: PGP Secret Key - []
Strength = 40@522: PGP Secret Sub-key - []
Strength = 40@62: GLF_BINARY_LSB_FIRST []
Strength = 40@64: GLF_BINARY_MSB_FIRST []
Strength = 40@68: GLS_BINARY_LSB_FIRST []
Strength = 40@70: GLS_BINARY_MSB_FIRST []
Strength = 38@13: Cracklib password index, big endian ("64-bit") []
Strength = 35@42: Linux/i386 core file []
Strength = 26@1770: Minix filesystem, V1, 14 char names, %d zones []
Strength = 26@1775: Minix filesystem, V1 (big endian), %d zones []
Strength = 26@1780: Minix filesystem, V1, 30 char names, %d zones []
Strength = 26@1785: Minix filesystem, V1, 30 char names (big endian), %d zones []
Strength = 21@1032: Bio-Rad .PIC Image File []
Strength = 21@491: []
Strength = 21@1451: DOS 2.0 backup id file, sequence %d []
Strength = 18@42: a []
Strength = 17@34: a []
Strength = 11@918: Atari 7800 ROM image [application/x-atari-7800-rom]
Strength = 11@383: []
Strength = 11@608: Panorama database []
Strength = 11@31: (Lepton 3.x), []
Strength = 11@37: (Lepton 2.x), []
Strength = 2@374: zlib compressed data [application/zlib]
Text patterns:
Strength = 250@27: Tenex C shell script text executable [text/x-shellscript]
Strength = 250@46: new awk script text executable [text/x-nawk]
Strength = 250@52: GNU awk script text executable [text/x-gawk]
Strength = 250@77: Bourne-Again shell script text executable [text/x-shellscript]
Strength = 240@36: Paul Falstad's zsh script text executable [text/x-shellscript]
Strength = 240@38: Neil Brown's ash script text executable [text/x-shellscript]
Strength = 230@40: Neil Brown's ae script text executable [text/x-shellscript]
Strength = 230@81: Bourne-Again shell script text executable [text/x-shellscript]
Strength = 220@6: KDE desktop entry [application/x-kdelnk]
Strength = 210@25: Tenex C shell script text executable [text/x-shellscript]
Strength = 210@73: Bourne-Again shell script text executable [text/x-shellscript]
Strength = 200@8: KDE config file [application/x-kdelnk]
Strength = 190@23: Tenex C shell script text executable [text/x-shellscript]
Strength = 190@44: new awk script text executable [text/x-nawk]
Strength = 190@50: GNU awk script text executable [text/x-gawk]
Strength = 190@69: Bourne-Again shell script text executable [text/x-shellscript]
Strength = 185@103: XML [text/xml]
Strength = 185@106: XML [text/xml]
Strength = 181@30: XHTML document text []
Strength = 181@34: XHTML document text []
Strength = 181@38: broken XHTML document text []
Strength = 180@34: Paul Falstad's zsh script text executable [text/x-shellscript]
Strength = 180@57: awk script text executable [text/x-awk]
Strength = 171@7: %s []
Strength = 171@18: XML Sitemap document text [application/xml-sitemap]
Strength = 170@7: old news text [message/rfc822]
Strength = 161@9: %s []
Strength = 160@7: GIMP gradient data []
Strength = 160@1208: Polar Monitor Bitmap text [image/x-polar-monitor-bitmap]
Strength = 160@17: SMTP mail text [message/rfc822]
Strength = 160@32: MIME entity text []
Strength = 150@21: Tenex C shell script text executable [text/x-shellscript]
Strength = 150@42: new awk script text executable [text/x-nawk]
Strength = 150@48: GNU awk script text executable [text/x-gawk]
Strength = 150@65: Bourne-Again shell script text executable [text/x-shellscript]
Strength = 150@11: GIMP palette data []
Strength = 150@19: SMTP mail text [message/rfc822]
Strength = 150@6: cvs password text file []
Strength = 150@131: Alias Maya Ascii File, []
Strength = 140@12: C shell script text executable [text/x-shellscript]
Strength = 140@16: Korn shell script text executable [text/x-shellscript]
Strength = 140@32: Paul Falstad's zsh script text executable [text/x-shellscript]
Strength = 140@55: awk script text executable [text/x-awk]
Strength = 137@176: GNU gettext message catalogue text [text/x-po]
Strength = 130@7: POSIX shell script text executable [text/x-shellscript]
Strength = 130@62: Plan 9 rc shell script text executable []
Strength = 130@13: mail forwarding text [message/rfc822]
Strength = 129@27: unified diff output text [text/x-diff]
Strength = 120@11: mailed, batched news text [message/rfc822]
Strength = 120@30: RFC 822 mail text [message/rfc822]
Strength = 110@9: batched news text [message/rfc822]
Strength = 106@179: , bitmap [image/x-portable-bitmap]
Strength = 106@186: , greymap [image/x-portable-greymap]
Strength = 106@193: , pixmap [image/x-portable-pixmap]
Strength = 100@6: magic text file for file(1) cmd []
Strength = 100@15: mail piping text [message/rfc822]
Strength = 100@27: saved news text [message/news]
Strength = 100@27: PDF document [application/pdf]
Strength = 90@10: xmcd database file for kscd [text/x-xmcd]
Strength = 81@11: Google KML document [application/vnd.google-earth.kml+xml]
Strength = 80@21: news text [message/news]
Strength = 80@23: news text [message/news]
Strength = 80@25: news or mail text [message/rfc822]
Strength = 80@29: Emacs RMAIL text []
Strength = 80@33: Ruby script text [text/x-ruby]
Strength = 78@37: Perl5 module source text []
Strength = 76@42: Perl5 module source text []
Strength = 71@63: C++ source text [text/x-c++]
Strength = 70@58: C++ source text [text/x-c++]
Strength = 70@88: C++ source text [text/x-c++]
Strength = 70@86: PHP script text [text/x-php]
Strength = 70@5: a []
Strength = 70@11: a []
Strength = 69@67: C++ source text [text/x-c++]
Strength = 69@36: Python script text executable [text/x-python]
Strength = 68@71: C++ source text [text/x-c++]
Strength = 68@84: C++ source text [text/x-c++]
Strength = 68@28: Ruby script text [text/x-ruby]
Strength = 67@80: C++ source text [text/x-c++]
Strength = 67@42: Python script text executable [text/x-python]
Strength = 67@12: Ruby script text executable [text/x-ruby]
Strength = 66@39: Python script text executable [text/x-python]
Strength = 65@18: Ruby script text executable [text/x-ruby]
Strength = 65@128: ConTeXt document text []
Strength = 64@15: Ruby script text executable [text/x-ruby]
Strength = 63@94: Objective-C source text [text/x-objective-c]
Strength = 63@33: Python script text executable [text/x-python]
Strength = 63@116: ConTeXt document text []
Strength = 63@126: ConTeXt document text []
Strength = 62@9: Public Suffix List data []
Strength = 62@52: LaTeX document text [text/x-tex]
Strength = 62@136: ConTeXt document text []
Strength = 61@93: PHP script text executable [text/x-php]
Strength = 61@24: Perl script text [text/x-perl]
Strength = 61@9: Ruby script text executable [text/x-ruby]
Strength = 61@102: BibTeX standard bibliography style text file []
Strength = 61@120: ConTeXt document text []
Strength = 61@138: ConTeXt document text []
Strength = 61@24: bencoded News text []
Strength = 60@14: Perl script text [text/x-perl]
Strength = 60@22: Perl script text [text/x-perl]
Strength = 60@9: Python script text executable []
Strength = 60@38: Ruby script text [text/x-ruby]
Strength = 60@130: ConTeXt document text []
Strength = 60@17: a []
Strength = 60@23: script text executable []
Strength = 59@58: LaTeX 2e document text [text/x-tex]
Strength = 59@134: ConTeXt document text []
Strength = 59@28: BinHex binary text []
Strength = 58@24: libtool library file []
Strength = 58@55: Python script text executable [text/x-python]
Strength = 58@13: Qt C-code resource file []
Strength = 58@4: RFC1421 Security Certificate text []
Strength = 58@64: LaTeX table of contents [text/x-tex]
Strength = 58@112: ConTeXt document text []
Strength = 58@114: ConTeXt document text []
Strength = 58@122: ConTeXt document text []
Strength = 58@124: ConTeXt document text []
Strength = 57@29: libtool object file []
Strength = 57@61: Python script text executable []
Strength = 57@133: Netscape cookie text []
Strength = 56@92: Python script text executable [text/x-python]
Strength = 56@5: RFC1421 Security Certificate Signing Request text []
Strength = 56@46: LaTeX document text [text/x-tex]
Strength = 56@55: LaTeX document text [text/x-tex]
Strength = 56@132: ConTeXt document text []
Strength = 55@96: PHP script text executable [text/x-php]
Strength = 55@49: LaTeX document text [text/x-tex]
Strength = 54@76: C++ source text [text/x-c++]
Strength = 54@9: M4 macro processor script text [text/x-m4]
Strength = 54@12: Perl script text [text/x-perl]
Strength = 54@20: Perl script text [text/x-perl]
Strength = 54@84: Python script text executable [text/x-python]
Strength = 54@99: Python script text executable [text/x-python]
Strength = 54@100: BibTeX style text file (with full header) []
Strength = 53@12: diff output text [text/x-diff]
Strength = 53@118: ConTeXt document text []
Strength = 52@16: C []
Strength = 52@26: Lisp/Scheme program text [text/x-lisp]
Strength = 52@49: Python script text executable [text/x-python]
Strength = 52@17: Tcl/Tk script text executable [text/x-tcl]
Strength = 51@16: Node.js script text executable [application/javascript]
Strength = 51@11: Lua script text executable [text/x-lua]
Strength = 51@9: Tcl script text executable [text/x-tcl]
Strength = 51@40: TeX document text [text/x-tex]
Strength = 51@43: LaTeX document text [text/x-tex]
Strength = 51@61: LaTeX auxiliary file [text/x-tex]
Strength = 50@109: DCL command file []
Strength = 50@54: Linux make config build file []
Strength = 50@10: Perl script text [text/x-perl]
Strength = 50@18: Perl script text [text/x-perl]
Strength = 50@21: Tcl/Tk script text executable [text/x-tcl]
Strength = 49@14: Node.js script text executable [application/javascript]
Strength = 49@15: Lua script text executable [text/x-lua]
Strength = 49@46: Ruby script text [text/x-ruby]
Strength = 49@47: HTML document text [text/html]
Strength = 49@13: Tcl script text executable [text/x-tcl]
Strength = 49@19: Tcl/Tk script text executable [text/x-tcl]
Strength = 49@77: LaTeX sorted glossary []
Strength = 48@6: binscii (apple ][) text []
Strength = 48@13: Lua script text executable [text/x-lua]
Strength = 48@26: BSD makefile script text [text/x-makefile]
Strength = 48@53: SVG XML document [image/svg+xml]
Strength = 48@132: Web browser cookie text []
Strength = 48@11: Tcl script text executable [text/x-tcl]
Strength = 47@113: Variant Call Format (VCF) []
Strength = 47@12: Node.js script text executable [application/javascript]
Strength = 47@10: C program text (from flex) []
Strength = 47@34: automake makefile script text [text/x-makefile]
Strength = 47@134: Konqueror cookie text []
Strength = 47@21: METAFONT transcript text []
Strength = 47@36: GNU Info text [text/x-info]
Strength = 47@78: Makeindex log file []
Strength = 46@27: FrameMaker Dictionary text [application/x-mif]
Strength = 46@20: BSD makefile script text [text/x-makefile]
Strength = 46@30: BSD makefile script text [text/x-makefile]
Strength = 46@9: MS Windows 95 Internet shortcut text []
Strength = 46@15: Tcl/Tk script text executable [text/x-tcl]
Strength = 46@75: LaTeX sorted index []
Strength = 45@8: Node.js script text executable [application/javascript]
Strength = 45@9: Lua script text executable [text/x-lua]
Strength = 45@8: Perl script text [text/x-perl]
Strength = 45@16: Perl script text [text/x-perl]
Strength = 45@100: XML document text [text/xml]
Strength = 45@7: Tcl script text executable [text/x-tcl]
Strength = 45@90: BibTeX text file []
Strength = 44@9: Inform source text []
Strength = 44@34: Texinfo source text [text/x-texinfo]
Strength = 44@76: LaTeX raw glossary []
Strength = 44@89: BibTeX text file []
Strength = 43@10: Node.js script text executable [application/javascript]
Strength = 43@75: HTML document text [text/html]
Strength = 43@78: HTML document text [text/html]
Strength = 43@94: HTML document text [text/html]
Strength = 43@5: SiSU text insert []
Strength = 43@8: SiSU text master []
Strength = 43@67: LaTeX document text [text/x-tex]
Strength = 43@96: BibTeX text file []
Strength = 42@991: Squeak program text []
Strength = 42@63: HTML document text [text/html]
Strength = 42@66: HTML document text [text/html]
Strength = 42@81: HTML document text [text/html]
Strength = 42@84: HTML document text [text/html]
Strength = 42@87: HTML document text [text/html]
Strength = 42@90: HTML document text [text/html]
Strength = 42@26: Tcl script []
Strength = 42@20: TeX transcript text []
Strength = 42@95: BibTeX text file []
Strength = 42@106: TeX font aliases text file []
Strength = 41@176: Sequence Alignment/Map (SAM) []
Strength = 41@27: C source text [text/x-c]
Strength = 41@43: C source text [text/x-c]
Strength = 41@49: C source text [text/x-c]
Strength = 41@52: C source text [text/x-c]
Strength = 41@6: Node.js script text executable [application/javascript]
Strength = 41@10: DOS batch file text [text/x-msdos-batch]
Strength = 41@54: Perl POD document text []
Strength = 41@57: HTML document text [text/html]
Strength = 41@60: HTML document text [text/html]
Strength = 41@69: HTML document text [text/html]
Strength = 41@72: HTML document text [text/html]
Strength = 41@11: SiSU text []
Strength = 41@74: LaTeX raw index file []
Strength = 41@94: BibTeX text file []
Strength = 41@16: btoa'd text []
Strength = 41@266: []
Strength = 40@12: Algol 68 source text [text/x-Algol68]
Strength = 40@612: PLS playlist text []
Strength = 40@6: Exuberant Ctags tag file text []
Strength = 40@6: diff output text [text/x-diff]
Strength = 40@80: X11 BDF font text []
Strength = 40@7: C program text (from lex) []
Strength = 40@12: lex description text []
Strength = 40@20: Lisp/Scheme program text [text/x-lisp]
Strength = 40@24: Lisp/Scheme program text [text/x-lisp]
Strength = 40@6: M4 macro processor script text [text/x-m4]
Strength = 40@8: makefile script text [text/x-makefile]
Strength = 40@27: OS/2 REXX batch file text []
Strength = 40@29: OS/2 REXX batch file text []
Strength = 40@47: Perl POD document text []
Strength = 40@53: Perl POD document text []
Strength = 40@23: SoftQuad Raster Format text []
Strength = 40@93: BibTeX text file []
Strength = 40@98: BibTeX-file{ BibTex text file (with full header) []
Strength = 40@104: BibTeX custom bibliography style text file []
Strength = 40@15: troff or preprocessor input text [text/troff]
Strength = 39@325: Software Tools format archive text []
Strength = 39@34: C source text [text/x-c]
Strength = 39@89: PHP script text [text/x-php]
Strength = 39@91: PHP script text [text/x-php]
Strength = 39@613: X pixmap image text [image/x-xpmi]
Strength = 39@74: TeXmacs document text [text/texmacs]
Strength = 39@14: makefile script text [text/x-makefile]
Strength = 39@79: MSX SCMD source MML file []
Strength = 39@124: exported SGML document text []
Strength = 39@86: BibTeX text file []
Strength = 39@9: troff or preprocessor input text [text/troff]
Strength = 39@11: troff or preprocessor input text [text/troff]
Strength = 39@17: troff or preprocessor input text [text/troff]
Strength = 39@21: troff or preprocessor input text [text/troff]
Strength = 39@25: ditroff output text []
Strength = 38@8: Algol 68 source text [text/x-Algol68]
Strength = 38@5: assembler source text [text/x-asm]
Strength = 38@8: BCPL source text [text/x-bcpl]
Strength = 38@10: BCPL source text [text/x-bcpl]
Strength = 38@26: Clojure module source text [text/x-clojure]
Strength = 38@29: Clojure module source text [text/x-clojure]
Strength = 38@59: awk or perl script text []
Strength = 38@8: diff output text [text/x-diff]
Strength = 38@10: diff output text [text/x-diff]
Strength = 38@6: ASCII vfont text []
Strength = 38@510: FIG image text []
Strength = 38@142: Linux kernel symbol map text []
Strength = 38@18: Lisp/Scheme program text [text/x-lisp]
Strength = 38@12: makefile script text [text/x-makefile]
Strength = 38@6: X-Post-It-Note text []
Strength = 38@50: Perl POD document text []
Strength = 38@52: Perl POD document text []
Strength = 38@51: Ruby script text [text/x-ruby]
Strength = 38@54: Ruby script text [text/x-ruby]
Strength = 38@125: exported SGML subdocument text []
Strength = 38@14: SiSU text []
Strength = 38@17: SiSU text []
Strength = 38@6: Sketch document text []
Strength = 38@55: Solaris xcurses screen image []
Strength = 38@71: TeX document text []
Strength = 38@88: BibTeX text file []
Strength = 38@91: BibTeX text file []
Strength = 38@13: troff or preprocessor input text [text/troff]
Strength = 38@19: troff or preprocessor input text [text/troff]
Strength = 37@6: Algol 68 source text [text/x-Algol68]
Strength = 37@14: Algol 68 source text [text/x-Algol68]
Strength = 37@11: assembler source text [text/x-asm]
Strength = 37@610: M3U playlist text []
Strength = 37@23: C source text [text/x-c]
Strength = 37@31: C source text [text/x-c]
Strength = 37@37: C source text [text/x-c]
Strength = 37@40: C source text [text/x-c]
Strength = 37@46: C source text [text/x-c]
Strength = 37@218: Smart Game Format []
Strength = 37@286: Smart Game Format []
Strength = 37@19: Java source [text/x-java]
Strength = 37@22: Lisp/Scheme program text [text/x-lisp]
Strength = 37@10: makefile script text [text/x-makefile]
Strength = 37@5: Pascal source text [text/x-pascal]
Strength = 37@49: Perl POD document text []
Strength = 37@51: Perl POD document text []
Strength = 37@68: Python script text executable [text/x-python]
Strength = 36@10: Algol 68 source text [text/x-Algol68]
Strength = 36@7: assembler source text [text/x-asm]
Strength = 36@9: assembler source text [text/x-asm]
Strength = 36@13: assembler source text [text/x-asm]
Strength = 36@15: assembler source text [text/x-asm]
Strength = 36@17: assembler source text [text/x-asm]
Strength = 36@12: CDDB(tm) format CD text data []
Strength = 36@23: Clojure module source text [text/x-clojure]
Strength = 36@15: RCS/CVS diff output text [text/x-diff]
Strength = 36@145: Linux Software Map entry text []
Strength = 36@146: Linux Software Map entry text (new format) []
Strength = 36@16: Lisp/Scheme program text [text/x-lisp]
Strength = 36@6: makefile script text [text/x-makefile]
Strength = 36@13: Mup music publication program input text []
Strength = 36@48: Perl POD document text []
Strength = 36@65: GEDCOM genealogy text []
Strength = 36@87: BibTeX text file []
Strength = 36@92: BibTeX text file []
Strength = 36@13: uuencoded or xxencoded text []
Strength = 36@20: ship'd binary text []
Strength = 30@118: broken XML document text [text/xml]
Strength = 28@126: exported SGML document text []
Strength = 18@38: a []
Strength = 17@30: a []
Strength = 2@7: FORTRAN program text [text/x-fortran]
Strength = 2@29: Tcl script []
Set 1:
Binary patterns:
Text patterns:
Tags:
Steps To Reproduce:
Additional Information: ■ file --version
file-5.37
magic file from /usr/share/file/misc/magic
■ uname -srvmo
Linux 5.4.2-arch1-1 0000001 SMP PREEMPT Thu, 05 Dec 2019 12:29:40 +0000 x86_64 GNU/Linux

Thank you for maintaining this essential utility.
Attached Files: 2020-01-22.mp4.8k (8,192 bytes) 2020-02-14 01:56
https://bugs.astron.com/file_download.php?file_id=118&type=bug
2020-01-15.mp4.8k (8,192 bytes) 2020-02-14 01:56
https://bugs.astron.com/file_download.php?file_id=117&type=bug
2019-12-25.mp4.8k (8,192 bytes) 2020-02-14 01:56
https://bugs.astron.com/file_download.php?file_id=116&type=bug
2019-12-11.mp4.8k (8,192 bytes) 2020-02-14 01:56
https://bugs.astron.com/file_download.php?file_id=115&type=bug
Bonus.mp4.8k (8,192 bytes) 2020-02-14 01:58
https://bugs.astron.com/file_download.php?file_id=119&type=bug
Notes
(0003354)
christos   
2020-02-12 22:33   
Can you attatch the first few K of this file?
(0003360)
Kid   
2020-02-14 01:56   
Certainly. Here are four samples, identical in their misidentification.
(0003361)
Kid   
2020-02-14 01:58   
And here is a bonus MP4 sample that is misidentified as application/octet-stream. Should I report a second bug?

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
139 [file] General minor always 2020-02-04 22:49 2020-02-13 18:10
Reporter: gockelhahn Platform: x86_64  
Assigned To: christos OS: arch linux  
Priority: normal OS Version:  
Status: resolved Product Version: 5.38  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: massive memory usage (leak!?) for small crafted magic files
Description: fuzzing with stock afl found some plain magic files, taking a lot of memory and time to produce a result (mostly white trash)
Tags: magic
Steps To Reproduce:     git clone https://github.com/file/file.git
    cd file
    export CFLAGS="-g -fsanitize=address -fno-omit-frame-pointer"
    autoreconf -i
    ./configure --disable-libseccomp
    make all
    ./src/.libs/lt-file -m ~/test2_1 /etc/services
Additional Information: master @ 85b214cd422dd2538800c8b6d6e6c383d9ee17bf
Attached Files: test2_1 (59 bytes) 2020-02-04 22:49
https://bugs.astron.com/file_download.php?file_id=109&type=bug
test2_2 (59 bytes) 2020-02-04 22:49
https://bugs.astron.com/file_download.php?file_id=108&type=bug
test2_3 (59 bytes) 2020-02-04 22:49
https://bugs.astron.com/file_download.php?file_id=107&type=bug
test2_4 (90 bytes) 2020-02-04 22:49
https://bugs.astron.com/file_download.php?file_id=106&type=bug
test2_5 (58 bytes) 2020-02-04 22:49
https://bugs.astron.com/file_download.php?file_id=105&type=bug
test2_6 (57 bytes) 2020-02-04 22:49
https://bugs.astron.com/file_download.php?file_id=104&type=bug
Notes
(0003358)
christos   
2020-02-13 18:10   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
138 [file] General crash always 2020-02-04 22:30 2020-02-13 17:09
Reporter: gockelhahn Platform: x86_64  
Assigned To: christos OS: arch linux  
Priority: normal OS Version:  
Status: resolved Product Version: 5.38  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: crash (heap-buffer-overflow with) with crafted binary magic file
Description: fuzzing with stock afl found this:

    ==14786==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60f000000030 at pc 0x7f0c5ad0fd41 bp 0x7ffe3ec50b20 sp 0x7ffe3ec50b10
    READ of size 4 at 0x60f000000030 thread T0
        #0 0x7f0c5ad0fd40 in mget /home/build/file/src/softmagic.c:1701
        0000001 0x7f0c5ad0453a in match /home/build/file/src/softmagic.c:244
        0000002 0x7f0c5ad03d37 in file_softmagic /home/build/file/src/softmagic.c:134
        0000003 0x7f0c5ad14551 in file_ascmagic_with_encoding /home/build/file/src/ascmagic.c:156
        0000004 0x7f0c5ad1405e in file_ascmagic /home/build/file/src/ascmagic.c:95
        0000005 0x7f0c5ad2ee56 in file_buffer /home/build/file/src/funcs.c:352
        0000006 0x7f0c5acf064c in file_or_fd /home/build/file/src/magic.c:514
        0000007 0x7f0c5aceff2f in magic_file /home/build/file/src/magic.c:398
        0000008 0x563f499a5a9c in process /home/build/file/src/file.c:542
        #9 0x563f499a4f51 in main /home/build/file/src/file.c:413
        0000010 0x7f0c5aae5152 in __libc_start_main (/usr/lib/libc.so.6+0x27152)
        0000011 0x563f499a43cd in _start (/home/build/file/src/.libs/lt-file+0x53cd)

    0x60f000000030 is located 16 bytes to the left of 168-byte region [0x60f000000040,0x60f0000000e8)
    allocated by thread T0 here:
        #0 0x7f0c5ae77aca in __interceptor_malloc /build/gcc/src/gcc/libsanitizer/asan/asan_malloc_linux.cc:144
        0000001 0x7f0c5aaf07de in _nl_intern_locale_data (/usr/lib/libc.so.6+0x327de)

    SUMMARY: AddressSanitizer: heap-buffer-overflow /home/build/file/src/softmagic.c:1701 in mget
    Shadow bytes around the buggy address:
    0x0c1e7fff7fb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    0x0c1e7fff7fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    0x0c1e7fff7fd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    0x0c1e7fff7fe0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    0x0c1e7fff7ff0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    =>0x0c1e7fff8000: fa fa fa fa fa fa[fa]fa 00 00 00 00 00 00 00 00
    0x0c1e7fff8010: 00 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa
    0x0c1e7fff8020: fa fa fa fa fa fa 00 00 00 00 00 00 00 00 00 00
    0x0c1e7fff8030: 00 00 00 00 00 00 00 00 00 00 00 03 fa fa fa fa
    0x0c1e7fff8040: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
    0x0c1e7fff8050: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
    Shadow byte legend (one shadow byte represents 8 application bytes):
    Addressable: 00
    Partially addressable: 01 02 03 04 05 06 07
    Heap left redzone: fa
    Freed heap region: fd
    Stack left redzone: f1
    Stack mid redzone: f2
    Stack right redzone: f3
    Stack after return: f5
    Stack use after scope: f8
    Global redzone: f9
    Global init order: f6
    Poisoned by user: f7
    Container overflow: fc
    Array cookie: ac
    Intra object redzone: bb
    ASan internal: fe
    Left alloca redzone: ca
    Right alloca redzone: cb
    Shadow gap: cc
    ==14786==ABORTING
Tags: magic
Steps To Reproduce:     git clone https://github.com/file/file.git
    cd file
    export CFLAGS="-g -fsanitize=address -fno-omit-frame-pointer"
    autoreconf -i
    ./configure --disable-libseccomp
    make all
    ./src/.libs/lt-file -m ~/test.mgc /etc/services
Additional Information: master @ 85b214cd422dd2538800c8b6d6e6c383d9ee17bf
Attached Files: test.mgc (752 bytes) 2020-02-04 22:30
https://bugs.astron.com/file_download.php?file_id=103&type=bug
Notes
(0003356)
christos   
2020-02-13 17:09   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
136 [file] General major always 2020-01-31 19:37 2020-02-12 22:31
Reporter: Fabrice Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.38  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: Static build failure (can be fixed by adding libmagic.pc)
Description: libmagic can optionally depends on xz (for lzma) or bzip2 since version
5.38 and
https://github.com/file/file/commit/b259a07ea95827f565faa20f0316e5b2704064f7
so add libmagic.pc so package (such as gerbera) that links with libmagic
will be able to use pkg-config to retrieve those static dependencies
For example, this will avoid the following build failure:

[100%] Linking CXX executable gerbera
/home/br-user/autobuild/run/instance-0/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/8.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: /home/br-user/autobuild/run/instance-0/output-1/host/arm-buildroot-linux-uclibcgnueabi/sysroot/usr/lib/libmagic.a(compress.o): in function `uncompressbuf':
compress.c:(.text+0x69c): undefined reference to `BZ2_bzDecompressInit'
/home/br-user/autobuild/run/instance-0/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/8.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: compress.c:(.text+0x710): undefined reference to `BZ2_bzDecompress'
/home/br-user/autobuild/run/instance-0/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/8.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: compress.c:(.text+0x730): undefined reference to `BZ2_bzDecompressEnd'
/home/br-user/autobuild/run/instance-0/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/8.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: compress.c:(.text+0x7bc): undefined reference to `lzma_auto_decoder'
/home/br-user/autobuild/run/instance-0/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/8.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: compress.c:(.text+0x828): undefined reference to `lzma_code'
/home/br-user/autobuild/run/instance-0/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/8.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: compress.c:(.text+0x848): undefined reference to `lzma_end'

Fixes:
 - http://autobuild.buildroot.org/results/37b1ef54dc41100689f311fbc31fc9300dc6ae63
Tags:
Steps To Reproduce:
Additional Information: You'll find attached a patch that adds libmagic.pc
Attached Files: 0001-Add-libmagic.pc.patch (3,860 bytes) 2020-01-31 19:37
https://bugs.astron.com/file_download.php?file_id=102&type=bug
Notes
(0003353)
christos   
2020-02-12 22:31   
Committed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
135 [file] General minor always 2020-01-30 18:17 2020-02-12 22:25
Reporter: jj05 Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version: 5.38  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Misdetection text/troff instead of text/plain for MT940 files
Description: This isn't a troff file, so shouldn't be detected as one
Tags:
Steps To Reproduce: $ file mt940-troff-bug.txt
mt940-troff-bug.txt: troff or preprocessor input, UTF-8 Unicode (with BOM) text, with CRLF, LF line terminators
Additional Information:
Attached Files: mt940-troff-bug.txt (639 bytes) 2020-01-30 18:17
https://bugs.astron.com/file_download.php?file_id=101&type=bug
Notes
(0003349)
jj05   
2020-01-30 18:20   
More information about MT940 format: http://martin.hinner.info/bankconvert/swift_mt940_942.pdf
(0003352)
christos   
2020-02-12 22:25   
Restricted troff not to match .[0-9]

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
133 [file] General minor always 2020-01-24 15:36 2020-02-12 22:18
Reporter: eschwartz Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.38  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: file 5.38 removed support for detecting pie executable
Description: What is the purpose of commit https://github.com/file/file/commit/d653309de04ed10fdeda79f2c6ca7a7e96e122f1?
Tags: magic
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003348)
eschwartz   
2020-01-24 20:39   
It was pointed out in this downstream bug report ( https://bugs.archlinux.org/task/65256 ) that the intention may be to unify pie-executable and shared libraries.

"the unification makes sense as +x is not a appropriate way to detect if its a shared library or an application, which way around it should be is a matter of choice but technically PIE executables are not any different, except some subtile ways in relative references."

I did not read this into the commit message which was used to describe the change, so forgive me if I've misunderstood the situation. But if there was any intent to heuristically detect pie executables vs. shared libraries, then at the moment it does not seem to be happening in actuality.a
(0003351)
christos   
2020-02-12 22:18   
You are right, I put it back.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
132 [file] General minor always 2020-01-22 13:44 2020-02-12 22:13
Reporter: tumik Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: Many source files get recognized as "TI-XX Graphing Calculator (FLASH)"
Description: The detection for "TI-XX Graphing Calculator (FLASH)" seems way too broad, with only checking the word "Advanced" at offset of 0x16.

I've run into many files, for example source code files, which start with an copyright of a company beginning with "Advanced".

An example:
// Copyright (c) 2019 Advanced RISC Machines Ltd. All Rights Reserved.

This file gets incorrectly tagged as "TI-XX Graphing Calculator (FLASH)".
Tags:
Steps To Reproduce: $ echo "// Copyright (c) 2019 Advanced" > test
$ file test
test: TI-XX Graphing Calculator (FLASH)
$
Additional Information:
Attached Files:
Notes
(0003350)
christos   
2020-02-12 22:13   
commented out, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
131 [file] General minor always 2020-01-14 03:35 2020-01-17 21:29
Reporter: david_keeffe Platform: RHEL 7  
Assigned To: christos OS: Linux  
Priority: normal OS Version: 3.10.0  
Status: assigned Product Version:  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: The magic file in File 5.11 reports some HTML as C++
Description: If an HTML file has the word 'class' starting at the beginning of a line, file reports it as C++.
This appears often in HTML output by Microsoft Word: text between <...> is line wrapped.

The issue seems to be that the distributed magic file raises the strength of C++ constructs and/or C++ appears before HTML.
Tags:
Steps To Reproduce: On RHEL 7:

file /path/to/file
Additional Information:
Attached Files:
Notes
(0003343)
christos   
2020-01-17 17:26   
Can you please share an example?
(0003346)
david_keeffe   
2020-01-17 21:29   
I think the problem has been fixed in a newer version - testing on a Mac gives expected results. I think this bug needs raising with RedHat since they choose to use much older version of 'file'.

Idril:~ david$ cat small.html
<html>
<body>
<div class='xxx'>
    

Hello World


</div>
</body>
</html>
Idril:~ david$ file small.html
small.html: HTML document text, ASCII text
Idril:~ david$ cat small-c.html
<html>
<body>
<div
class='xxx'>
    

Hello World


</div>
</body>
</html>
Idril:~ david$ file small-c.html
small-c.html: HTML document text, ASCII text
Idril:~ david$ file -v
file-5.33
magic file from /usr/share/file/magic

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
129 [file] General feature N/A 2020-01-10 16:26 2020-01-17 17:40
Reporter: Fabian Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: Classification of SYLK Files
Description: SYLK is an old Microsoft file format for spread sheets [1]. It recently got some attention as it can be used to weaponise documents as it can run macros [2].

It would be great to be able to classify SYLK documents with libmagic. This could be used to filter SYLK documents by true content.

Information about the file format can be found on [3]. Summary:
* SYLK files contain line-based operations which each start on a new line
* Start with "ID". Possibly followed by ";P" but that is not mandatory.
* Macros are enabled with the "O;E" operation. They are also enabled in combination with other options like "O;P;E".
* Macros can be automatically executed with auto_open string.
* The operations like "ID" "O;E" are case-sensitive. "auto_open" is case insensitive.

Do you support adding SYLK classification to Libmagic?

Just basing the classification on a file starting with "ID" may cause false positives. The classification could be made more precise by also checking whether support for macros is enabled. This would mean the classification is not for SYLK files, but SYLK files with macros.

Two test files have been attached.

[1] https://en.wikipedia.org/wiki/SYmbolic_LinK_(SYLK)
[2] https://outflank.nl/blog/2019/10/30/abusing-the-sylk-file-format/
[3] https://outflank.nl/upload/sylksum.txt
Tags: magic
Steps To Reproduce:
Additional Information:
Attached Files: sylk_test_obfuscated.slk (99 bytes) 2020-01-10 16:26
https://bugs.astron.com/file_download.php?file_id=98&type=bug
sylk_test.slk (101 bytes) 2020-01-10 16:26
https://bugs.astron.com/file_download.php?file_id=97&type=bug
Notes
(0003344)
christos   
2020-01-17 17:40   
Added, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
130 [file] General minor always 2020-01-11 11:07 2020-01-17 17:20
Reporter: tobias Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.38  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: sandbox blocks required TCGETS on console with glibc
Description: Calling file from a terminal like tty0, i.e. not from a terminal emulator or multiplexer, just plain old /bin/bash as login shell, results in a bad system call.

The problem is that glibc on a terminal calls ioctl TCGETS, which is not allowed by sandbox.

I have attached a patch that fixes the issue.
Tags:
Steps To Reproduce: 1. Log in on a tty, do not use a virtual terminal emulator like xterm etc.
2. Call "file /" or anything else which accesses the file system
3. You see "Bad system call"
4. Call "strace file /" and notice that ioctl(1, TCGETS, ...) = ?" gets interrupted
Additional Information: I'm using:

- x86_64
- linux 5.4.10
- glibc 2.30
- libseccomp 2.4.2
- file 5.38 (compiled with libseccomp support)
Attached Files: file-5.38-seccomp.patch (431 bytes) 2020-01-11 11:07
https://bugs.astron.com/file_download.php?file_id=99&type=bug
Notes
(0003342)
christos   
2020-01-17 17:20   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
126 [file] General minor have not tried 2019-12-17 14:50 2020-01-06 18:23
Reporter: bodqhrohro Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: ASF, WMA and WMV are all detected as "Microsoft ASF"
Description: @bq:16:48:02:/tmp/dl$ ffprobe -hide_banner loudspeaker.asf
Input #0, asf, from 'loudspeaker.asf':
  Metadata:
    major_brand : isom
    minor_version : 512
    compatible_brands: isomiso2avc1mp41
    encoder : Lavf58.29.100
  Duration: 00:00:55.86, start: 0.000000, bitrate: 480 kb/s
    Stream #0:0: Video: msmpeg4v3 (MP43 / 0x3334504D), yuv420p, 640x480, SAR 1:1 DAR 4:3, 23.98 fps, 23.98 tbr, 1k tbn, 1k tbc
    Stream #0:1: Audio: wmav2 (a[1][0][0] / 0x0161), 44100 Hz, 2 channels, fltp, 128 kb/s
@bq:16:48:13:/tmp/dl$ ffprobe -hide_banner loudspeaker.wma
Input #0, asf, from 'loudspeaker.wma':
  Metadata:
    major_brand : isom
    minor_version : 512
    compatible_brands: isomiso2avc1mp41
    encoder : Lavf58.29.100
  Duration: 00:00:55.69, start: 0.000000, bitrate: 136 kb/s
    Stream #0:0: Audio: wmav2 (a[1][0][0] / 0x0161), 44100 Hz, 2 channels, fltp, 128 kb/s
@bq:16:48:15:/tmp/dl$ ffprobe -hide_banner loudspeaker.wmv
Input #0, asf, from 'loudspeaker.wmv':
  Metadata:
    major_brand : isom
    minor_version : 512
    compatible_brands: isomiso2avc1mp41
    encoder : Lavf58.29.100
  Duration: 00:00:55.90, start: 0.000000, bitrate: 476 kb/s
    Stream #0:0: Video: msmpeg4v3 (MP43 / 0x3334504D), yuv420p, 640x480, SAR 1:1 DAR 4:3, 23.98 fps, 23.98 tbr, 1k tbn, 1k tbc
    Stream #0:1: Audio: wmav2 (a[1][0][0] / 0x0161), 44100 Hz, 2 channels, fltp, 128 kb/s
@bq:16:48:18:/tmp/dl$ file loudspeaker.asf
loudspeaker.asf: Microsoft ASF
@bq:16:48:24:/tmp/dl$ file loudspeaker.wma
loudspeaker.wma: Microsoft ASF
@bq:16:48:25:/tmp/dl$ file loudspeaker.wmv
loudspeaker.wmv: Microsoft ASF

ASF and WMV may be the same, but WMA should definitely be printed exactly, as it's important if a file contains a video track or only audio.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003341)
christos   
2020-01-06 18:23   
There is better detection for ASF contents now, but it still needs work.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
90 [file] General feature N/A 2019-07-04 19:12 2019-12-31 03:12
Reporter: Pysis Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: assigned Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Adds Nintendo Console Wii U/Switch file formats
Description: Adds header detailed output support for these formats:
 - Yaz0
 - BYAML
 - BFRES
 - BLWP
 - STAT
 - BARS
 - BFSAR
 - SARC

Lightly Documents these formats "clearinghouse" style:
 - BTSND
 - RPL/RPX
 - BFMA
 - (Non-archive) ARC

Tested with local sample files and Bats-core tests:
 - tests/data/A-1.00.autoplacement_forbid.agstats
 - tests/data/MapTex_A-0_0.bfres
 - tests/data/yaz0.sarc
 - tests/data/AkkareLabBgm.bars
 - tests/data/_DistanceView_Dynamic.byml
 - tests/data/DummySound.bfsar
 - tests/data/yaz0/_DistanceView_TeraTree.sblwp
 - tests/data/yaz0/AncientArrow.sbitemico
 - tests/data/yaz0/MapOpen_00.sbmapopen
 - tests/data/yaz0/MapTex_A-0_0.sbmaptex
 - tests/data/yaz0/5000000000.grass.extm.sstera
 - tests/data/yaz0/_DistanceView_Dynamic.smubin
 - tests/data/yaz0/Demo109_1.sbreviewtex
 - tests/data/yaz0/A-1.00.sstats
 - tests/data/yaz0/Rollpict001.sbstftex
 - tests/data/A-1.00_Clustering.blwp

 - (tests/_setup.sh)
 - tests/stat.bats
 - tests/bfres.bats
 - tests/yaz0.bats
 - tests/sarc.bats
 - tests/byml.bats
 - tests/bfsar.bats
 - tests/blwp.bats
 - tests/bars.bats

~ fileutil -v
file-5.37
magic file from /usr/local/Cellar/libmagic/5.37/share/misc/magic
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: file.tests.2019-07-04.19-19.gz (2,485 bytes) 2019-07-04 20:20
https://bugs.astron.com/file_download.php?file_id=60&type=bug
file.2019-07-04.19-11.gz (3,550 bytes) 2019-07-04 20:20
https://bugs.astron.com/file_download.php?file_id=59&type=bug
file.2019-07-07.13-32.gz (27,358 bytes) 2019-07-07 17:32
https://bugs.astron.com/file_download.php?file_id=62&type=bug
file.2019-07-07.10-42.gz (2,777 bytes) 2019-07-07 17:32
https://bugs.astron.com/file_download.php?file_id=61&type=bug
file.2019-22-08.22-33.gz (1,748 bytes) 2019-08-23 02:35
https://bugs.astron.com/file_download.php?file_id=74&type=bug
Notes
(0003258)
Pysis   
2019-07-07 17:32   
From the file headers:
grep -oPiz '\n\n#-+\n([^\n]+?)\n#[^\n]+?\n' \
      console \
      | grep -oPiz '\n\n#-+\n([^\n]+?)\n' \
      | grep -oPiz '\w.+?\n' \
      | sed 's|\x0||g' \
      > reference/file_current_console_magics.txt

Only from the section headers:
grep -oPiz '\n\n#-+\n([^\n]+?)\n#\n' \
        console \
        | grep -oPiz '\w.+?\n' \
        | sed 's|\x0||g' \
        > reference/file_current_console_magic_sections.txt
(0003262)
christos   
2019-07-21 09:35   
Some of these are too weak (too few bytes of magic and the magic is text) so they would be produce spurious matches to text files. We should add these commented out. These days the minimum magic is around 32 bits. Can you restructure (where possible) the magic to look like:


0x0 string SARC
>0x6 beshort 0xFEFF SARC archive file, BOM Big Endian,
>> use nintendo_sark
>0x6 beshort 0xFFFE SARC archive file, BOM Little Endian,
>>0 use nintendo_sark

0 name nintendo_sark
!:ext sarc
>0x4 beshort x Header length %xh,
>0x8 belong x File size %d bytes,
>0x0C belong x Data offset %xh,
>0x10 beshort x Version Number %d

This way you need SARK and a valid BOM for a match. What do you think?
(0003286)
Pysis   
2019-08-23 02:18   
Sorry for the delay.

I saw that note, but I believe those 4 ASCII letters do technically suffice. I see what you mean as an alternative, and it seems ok, but the way I have it just seems cleaner and done.
(0003304)
christos   
2019-09-12 16:02   
The advantage of my approach is that it makes the effective magic 8 bytes... I.e. it requires SARC\xfe\xff or SARC\xff\xfe before a match instead of just SARK.
(0003312)
Pysis   
2019-10-05 22:50   
But they're fine as is and if people confuse an ASCII and proprietary binary file using this then they have a bigger problem.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
127 [file] General minor always 2019-12-21 08:31 2019-12-24 17:41
Reporter: pierre Platform: Linux from scratch  
Assigned To: christos OS: GNU/Linux  
Priority: normal OS Version:  
Status: feedback Product Version: 5.38  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Problems building when only a static libbz2 is installed
Description: There are two issues actually, the second one I think can be easily fixed:
1. When building file in chapter 5 of LFS (http://www.linuxfromscratch.org/lfs/view/development/), there is only libbz2.a available.
This leads to an error when linking libmagic, since it tries to link a shared library with a static one. This can be worked around in two ways (either --disable-bzlib, or --disable-shared --enable-static), but maybe there could be a check somewhere to rpevent this from happening.
2. Now, when building in chapter 6, the libbz2 library is not found by configure, but the bzip.h header is found. This leads correctly to /* #undef BZLIBSUPPORT */ and #define HAVE_BZLIB_H 1 in config.h. But then, src/compress.c has:

#if defined(HAVE_BZLIB_H) || defined(BZLIBSUPPORT)
#define BUILTIN_BZLIB
#include <bzlib.h>
#endif

then

#ifdef BUILTIN_BZLIB
private int uncompressbzlib(const unsigned char *, unsigned char **, size_t,
    size_t *);
#endif

so that BZ2_bzDecompressInit is called, and leads to undefined symbols...
Tags: compression
Steps To Reproduce: Remove libbz2.so - > first issue
Remove libbz2.* and keep /usr/include/bzip.h -> second issue
Additional Information: I guess the second issue is because the stanza in compress.c should be:

#if defined(HAVE_BZLIB_H) && defined(BZLIBSUPPORT)
#define BUILTIN_BZLIB
#include <bzlib.h>
#endif

(change || to &&, as is done with zlib). Note that I think there is the same issue with xz, but I have not tested.
Attached Files:
Notes
(0003340)
christos   
2019-12-24 17:41   
I fixed the ifdef's but I don't see an easy way to check for shared libraries in autoconf: https://www.gnu.org/software/gnulib/manual/html_node/Searching-for-Libraries.html

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
125 [file] General crash always 2019-12-11 01:15 2019-12-13 16:57
Reporter: ahupp Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version:  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Crash with MAGIC_COMPRESS and magic_buffer
Description: (I already reported this, but it does not appear in my list of submitted bugs here so re-submitting).

With libmagic 5.25, running magic_buffer on the contents of a Microsoft Word .docx file and MAGIC_COMPRESS enabled produced a crash. For some reason I'm not able to capture a stack in gdb. This does not reproduce in 5.30, nor with magic_file.

I'm reporting despite the fact that it's apparently fixed in case this is a security issue; 5.25 is in Ubuntu Xenial and that's supported for 5 more years.

Original report here: https://github.com/ahupp/python-magic/issues/200

Tags:
Steps To Reproduce: adam@gaba:~/file-5.25/src/.libs$ LD_LIBRARY_PATH=. PYTHONPATH=../../python python
Python 2.7.13 (default, Sep 26 2018, 18:42:22)
[GCC 6.3.0 20170516] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import magic
>>> m=magic.open(magic.MAGIC_COMPRESS)
>>> m.load('/home/adam/file-5.25/magic/magic.mgc')
0
>>> m.buffer(open('/home/adam/test.docx').read())
adam@gaba:~/file-5.25/src/.libs$

Additional Information: I've attached a sample empty word doc to aid reproducing the issue.
Attached Files: test.docx (6,087 bytes) 2019-12-11 01:15
https://bugs.astron.com/file_download.php?file_id=93&type=bug
Notes
(0003339)
christos   
2019-12-13 16:57   
The responsibility for fixing this should be with the xenial folks. They chose the version of file to support and the period of time to support it. They can always upgrade to a newer one or track or fix the bug themselves.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
88 [tcsh] General minor always 2019-06-27 01:14 2019-12-05 01:17
Reporter: sharifib Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 6.21.00  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: HEAD  
    Target Version:  
Summary: :q does not preserve empty strings
Description: The :q modifier appears to skip empty strings. This makes it very difficult to pass verbatim arguments to another program.
Tags:
Steps To Reproduce: Minimal example:
> echo $tcsh
6.21.00
> set arr= ( '1st arg' '' '3rd arg' )
> echo ${#arr}
3
> tcsh -c 'echo ${#argv}' $arr:q
2
> tcsh -c 'echo ${#argv}' '1st arg' '' '3rd arg'
3

Expected result:
3
3
3
Additional Information: This is not new behavior, but complicates writing scripts that want to maintain and pass a variable number of arguments to other programs, some of which could possibly be empty. For example, something like the env command which may consume some initial arguments but does an exec with the remaining verbatim arguments. In tcsh, attempting to do the same with exec $argv[2-]:q apparently doesn't preserve any of the empty arguments.
Attached Files:
Notes
(0003256)
sharifib   
2019-06-27 01:18   
Another example:
> set arr= ( '1st arg' '' '3rd arg' )
> set arr2= ( $arr:q )
> echo ${#arr}
3
> echo ${#arr2}
2

Expected result:
3
3
(0003276)
christos   
2019-08-01 16:05   
Fixed, thanks!
(0003337)
christos   
2019-11-30 14:52   
I had to revert the change because it causes NUL characters inside expanded strings...
(0003338)
christos   
2019-12-05 01:17   
Committed a new Q modifier so $args:gQ should DTRT.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
121 [file] General trivial always 2019-11-12 18:10 2019-11-19 05:41
Reporter: roramirez Platform:  
Assigned To: christos OS:  
Priority: low OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: [PATCH] tab tests/test.c
Description: Fix tab in test.c
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: 00eb39616db1ca824f3e670a53dc1a7e8475b073.patch (854 bytes) 2019-11-12 18:10
https://bugs.astron.com/file_download.php?file_id=90&type=bug
Notes
(0003336)
christos   
2019-11-19 05:41   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
122 [file] General minor always 2019-11-12 18:15 2019-11-19 05:39
Reporter: roramirez Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: [PATCH] Add test for ARM
Description: Add test for Adaptive Multi-Rate Codec (GSM telephony) format
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: 63915ccf157b586a39023de666f0f891e5b3b4ac.patch (19,660 bytes) 2019-11-12 18:15
https://bugs.astron.com/file_download.php?file_id=91&type=bug
Notes
(0003335)
christos   
2019-11-19 05:39   
Added, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
124 [file] General minor always 2019-11-14 17:13 2019-11-19 05:30
Reporter: Essem Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: S3M files detected as mimetype application/octet-stream
Description: Hello,

I was wondering whether file could report the mime type for S3M files, especially considering that other audio module formats are correctly reported. However, when I tried to check the mime type for these files, they were reported as a generic octet stream. This confused me especially since the source code references these files alongside their mime types in /magic/Magdir/audio at around line 128. Why is file/libmagic not reporting the correct mime type if it's defined in the code? An example file showing this behavior has been attached.
Tags: magic
Steps To Reproduce: $ file <filename>.s3m
<filename>.s3m: ScreamTracker III Module sound data Title: "<title>"
$ file --mime-type <filename>.s3m
<filename>.s3m: application/octet-stream
Additional Information:
Attached Files: CLICK.S3M (295,008 bytes) 2019-11-14 17:13
https://bugs.astron.com/file_download.php?file_id=92&type=bug
Notes
(0003334)
christos   
2019-11-19 05:30   
Added.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
120 [file] General minor always 2019-11-12 18:08 2019-11-19 05:25
Reporter: roramirez Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: [PATCH] tests/test ignore
Description: Add into .gitignore the file tests/test
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: 8d57fd78109f1169aebff8334b44867f64c3fd39.patch (546 bytes) 2019-11-12 18:08
https://bugs.astron.com/file_download.php?file_id=89&type=bug
Notes
(0003333)
christos   
2019-11-19 05:25   
Added.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
123 [file] General minor have not tried 2019-11-13 15:21 2019-11-19 05:22
Reporter: progval Platform:  
Assigned To: christos OS:  
Priority: low OS Version:  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Character 0x1C prevents a file from being detected as text
Description: Hello,

Inserting 0x1C in a text file (ASCII or UTF-8) makes `file`/libmagic detect it as "data" instead of "ASCII text" or "UTF-8 Unicode text".

I'm not sure this is a bug as this character is non-printable, feel free to close this ticket if it isn't.
Tags:
Steps To Reproduce: $ echo "abcde \x1c fghij" > test.txt
$ file test.txt
test.txt: data
Additional Information:
Attached Files:
Notes
(0003332)
christos   
2019-11-19 05:22   
Will not fix. 0x1c is "File Separator" and typically does not belong in text files (it is a control character).

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
119 [file] General minor always 2019-11-03 06:22 2019-11-09 00:36
Reporter: atrosinenko Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: UBSan: funcs.c:576:9: runtime error: null pointer passed as argument 1, which is declared to never be null
Description: Memset is called with the `NULL` pointer.
Tags:
Steps To Reproduce: 1. Clone the fresh repo, tested on commit 069daf5c
2. autoreconf -i
3. ./configure CC=clang CFLAGS=-fsanitize=undefined --disable-libseccomp
4. make
5. Execute
```
$ ./src/file -m magic/magic.mgc /tmp/file-memset-null.bin
funcs.c:576:9: runtime error: null pointer passed as argument 1, which is declared to never be null
/usr/include/string.h:60:62: note: nonnull attribute specified here
/tmp/file-memset-null.bin: JPEG image data, baseline, precision 0, 0x0, components 0
```
Additional Information:
Attached Files: file-memset-null.bin (160 bytes) 2019-11-03 06:22
https://bugs.astron.com/file_download.php?file_id=88&type=bug
Notes
(0003331)
christos   
2019-11-09 00:36   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
118 [file] General minor always 2019-11-03 06:03 2019-11-09 00:31
Reporter: atrosinenko Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: UBSan: readelf.c:1350:19: runtime error: signed integer overflow: 4281348144 + 9223372033368272944 cannot be represented in type
Description: The attached fuzzed file triggers signed integer overflow in calculation of `pread` arguments.
Tags:
Steps To Reproduce: 1. Clone the fresh repository, tested on commit 069daf5c
2. autoreconf -i
3. ./configure CC=gcc CFLAGS=-fsanitize=undefined --disable-libseccomp
4. make
5. Execute
```
$ ./src/file -m magic/magic.mgc /tmp/file-int-overflow.bin
readelf.c:1350:19: runtime error: signed integer overflow: 4281348144 + 9223372033368272944 cannot be represented in type 'long int'
/tmp/file-int-overflow.bin: ERROR: error reading (Invalid argument)
```
Additional Information:
Attached Files: file-int-overflow.bin (285 bytes) 2019-11-03 06:03
https://bugs.astron.com/file_download.php?file_id=87&type=bug
Notes
(0003330)
christos   
2019-11-09 00:31   
Thanks, now I check the offset against the file size.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
111 [file] General minor always 2019-10-06 10:20 2019-11-02 18:44
Reporter: doronbehar Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: acknowledged Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Support for brotli compressed file detection
Description: https://en.wikipedia.org/wiki/Brotli, is a new compression algorithm implemented by google. It is already supported by most browsers. it seems it's mime type should be `application/x-brotli`. Currently, `file` detects it as `application/octet-stream`.

It seems that Google's implementation doesn't include the magic bytes needed for libmagic to detect it - there's an open issue about it: https://github.com/google/brotli/issues/727 So I thought an issue should be opened here as well.
Tags: magic
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003329)
christos   
2019-11-02 18:44   
Yes, this needs to be changed upstream.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
109 [file] General minor always 2019-09-27 12:10 2019-11-02 18:42
Reporter: bcb Platform: Linux  
Assigned To: christos OS: Arch Linux  
Priority: normal OS Version:  
Status: feedback Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: reStructuredText with embedded code detected as Python script
Description: We're documenting our Python project with reStructuredText files. These contain various snippets of Python code which serve as examples. I've attached a simple document showing this.

When run on this document, file picks up on the embedded code and detects it as a Python script:

$ file -v
file-5.37
magic file from /usr/share/file/misc/magic
$ file document.rst
document.rst: Python script, ASCII text executable
$ file -b --mime-type document.rst
text/x-python

The particular use-case where we ran into this was in a Git hook which runs a code formatting tool to reject any Python code which doesn't meet the project coding style. It was using file to only run the checker on Python files. For the time being we've changed this to a simple file extension test.

Note that it doesn't happen on every document, just those with enough magic matches to get the strength high enough. On documents which don't meet the threshold it reports "ASCII text text/plain". Ideally, it would report this in all cases.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: document.rst (566 bytes) 2019-09-27 12:10
https://bugs.astron.com/file_download.php?file_id=84&type=bug
Notes
(0003328)
christos   
2019-11-02 18:42   
Added some magic to recognize ReStructuredText but it is not easy as there is no pattern for it.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
117 [file] General minor always 2019-10-31 15:42 2019-11-02 18:18
Reporter: jagdpanther Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: file --mime result for gzip changed in 5.37
Description: In file-5.36 (and prior) "file --mime" for a <file>.tar.gz file returned "application/x-gzip". Now in file-5.37 the same files returns "application/gzip".
Tags:
Steps To Reproduce: file --mime <gzip file>
    (while using file-5.37)
Additional Information: This is an issue for programmatic use of "file --mime" and expecting "application/x-gzip" for .gz files.
Attached Files:
Notes
(0003327)
christos   
2019-11-02 18:18   
Yes, unfortunately file output changes periodically because standards evolve. In this case file follows the recommendation from https://tools.ietf.org/html/rfc6713, which was ratified in 2012

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
115 [file] General minor always 2019-10-28 17:21 2019-11-02 18:15
Reporter: ikrivosheev Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: PDF file detect fix
Description: A pdf file is defined as "text/c-x".
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: 0001-Detect-pdf-fix.patch (1,218 bytes) 2019-10-28 17:21
https://bugs.astron.com/file_download.php?file_id=86&type=bug
foxit-reader-9.0.1.1049.pdf (3,369 bytes) 2019-10-28 17:21
https://bugs.astron.com/file_download.php?file_id=85&type=bug
Notes
(0003322)
christos   
2019-10-30 03:02   
My guess is that this is some hand-crafted pdf file that does not follow the standard. Instead of fixing the magic I suggest that you ask the author to change his file. Quiting from: https://en.wikipedia.org/wiki/PDF:

A PDF file is a 7-bit ASCII file, except for certain elements that may have binary content. A PDF file starts with a header containing the magic number and the version of the format such as %PDF-1.7. The format is a subset of a COS ("Carousel" Object Structure) format.[15] A COS tree file consists primarily of objects, of which there are eight types:[16]

(0003324)
ikrivosheev   
2019-10-30 14:38   
Ok, I think we can close issue.
(0003326)
christos   
2019-11-02 18:15   
Won't fix. Problem with hand-crafted PDF file.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
116 [file] General feature always 2019-10-30 07:38 2019-11-02 18:14
Reporter: fractale Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: support lepton file type
Description: lepton file are detect like data or dBase IV DBT
lepton is a compressed jpeg develop by dropbox
https://github.com/dropbox/lepton
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003325)
christos   
2019-11-02 18:14   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
114 [file] General minor always 2019-10-21 13:53 2019-10-30 03:17
Reporter: danyspin97 Platform: Linux  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: zsh shellscript recognized as plain text when the shebang is "#!/usr/bin/env zsh"
Description: zsh shellscrpt is incorrectly reported as plain text when --mime-type arg is passed and the shebang of the script is "#!/usr/bin/env zsh". Without --mime-type, it is reported as zsh script. Changing the shebang to "#!/usr/bin/zsh", makes file recognize the script. "#!/usr/bin/env bash" is used, the script is correctly recognized as shellscript.
Tags:
Steps To Reproduce: echo "#!/usr/bin/env zsh" > myzshscript && chmod +x myzshscript && file --mime-type myzshscript
Additional Information:
Attached Files:
Notes
(0003323)
christos   
2019-10-30 03:17   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
59 [file] General minor always 2019-01-30 11:43 2019-10-29 01:18
Reporter: magicus Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: assigned Product Version: 5.35  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Magic is missing for Java jmod and module image files
Description: There is no magic formula for Java jmod and image files (as produced by jlink); these are artefacts generated by Java since JDK 9.
Tags:
Steps To Reproduce: Actual results:

$ file jdk/jmods/java.base.jmod
jdk/jmods/java.base.jmod: Zip archive data

$ file jdk/lib/modules
jdk/lib/modules: data

Expected results:

$ file jdk/jmods/java.base.jmod
jdk/jmods/java.base.jmod: Java jmod module, version 1.0

$ file jdk/lib/modules
jdk/lib/modules: Java module image (little endian), version 1.0
Additional Information: Provided patch has been tested on all three types (jmod, BE image and LE image), and a sanity check that it did not break zip detection.
Attached Files: add-java-jmod-and-image.patch (1,190 bytes) 2019-01-30 11:43
https://bugs.astron.com/file_download.php?file_id=38&type=bug
Notes
(0003209)
christos   
2019-02-18 16:53   
Thanks! JM magic is too short. I only added it for v1.0 so that it does not generate false positives.
(0003319)
magicus   
2019-10-23 11:35   
I just noticed right now that my patch got stuck here, sorry for the long delay in my response.

I'm not sure what you mean. By "JM magic", do you mean the jmod beshort 0x4a4d marker?

I agree that a 32 bit marker had been preferable, but that's not the way the file format is designed. :-( The jmod header is followed by a zip entry. Is there a way to link this requirement to the zip definition? If so, the identification mechanism surely cannot be too generic. (I assume you worry about false positives.) I do not understand the syntax of the magic file good enough to figure out how to do that, if it's possible.

I can see only four possible solutions:
1) specify that a zip header must follow (if this possible)
2) copy/reimplement the definition of the zip header with a slight offset into the jmod definition
3) accept the entry anyway, since we have nothing else to go on
4) omit that part of the patch and never be able to support jmod files
(0003320)
magicus   
2019-10-23 11:43   
Ah, now I understand. 0x4a4d of course spells "JM". And what you are saying is that if I hard-code the match to jmod version 1.0, I'd get 0x4a4d0100, and that would be an acceptable magic marker?
(0003321)
christos   
2019-10-29 01:18   
Yes, that would even be better (to make it look further for a zip header... I've already added the 0100, but we can make it better if we just match on the JM then the zip header and print the version dynamically...

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
99 [tcsh] General minor always 2019-08-13 14:44 2019-10-20 15:21
Reporter: xdelaruelle Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: assigned Product Version: 6.21.00  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: use of :q in back-tick context leads to erroneous extra history entries
Description: I am developing a tool called Modules (http://modules.sourceforge.net/) which enables to dynamically update user's shell environment. In short, this tool provides a shell alias called `module` which evaluates in the current shell the output of a script producing shell code.

The `module` command is currently defined this way:

  $ alias module 'eval "`/usr/share/Modules/libexec/modulecmd.tcl tcsh \!*:q`"'

Which leads to erroneous entries in the ~/.history file:

  #+1565705427
  module load foo bar
  #+1565705427
  load foo bar#+1565705430
  history

All arguments passed from the alias to the modulecmd.tcl script are added as a second history line. These erroneous entries seem to come from the use of the quote modifier `:q` within a back-tick context ``.

Some explanation on the use of the quote modifier :q in this alias: as the modulecmd.tcl script outputs shell codes, it contains sometime special characters like curly braces, so the result of the script execution is enclosed in double quotes to pass it to eval. In this situation to correctly obtain quoted arguments, the quote modifier is used.

The issue has been reproduced on tcsh versions 6.18, 6.19, 6.20 and 6.21.
Tags:
Steps To Reproduce: To reproduce the issue on a small example, here is a script that produces some shell code (to define an alias or set an environment variable):

$ cat ./dispatch
#!/bin/csh
if ( $#argv != 1 ) then
  echo echo should get exactly 1 arg
  exit 1
endif

switch ( $argv[1] )
case myname:
  echo alias myname getent\\ passwd\\ \\\$USER\ \\\|\\ awk\\ -F:\\ \\\'\\\{print\ \\\$5\\\}\\\';
  breaksw;
case "":
  echo setenv EMPTY 1;
  breaksw;
endsw

$ echo $tcsh
6.21.00

Here we define the shell alias that calls the script and evaluates the shell code this script outputs:

$ alias tuneenv 'eval "`./dispatch \!*:q`"'

Then we use the alias:

$ tuneenv ""
$ echo $EMPTY
1
$ tuneenv myname
$ myname
Xavier
$ exit

Looking at history file, erroneous entries can be seen:

$ tail ~/.history
#+1565702553
tuneenv ""
#+1565702553
""#+1565702559
echo $EMPTY
#+1565702565
tuneenv myname
#+1565702565
myname#+1565702567
myname
Additional Information: Some additional tests to demonstrate the need to enclose script result in double quotes to pass it to eval:

$ alias tuneenv 'eval `./dispatch \!*`'
$ tuneenv myname
Missing '}'.

So without the double quotes, the shell alias myname which contains curly braces cannot be set

Then if we enclose script result in double quotes, !* should get the quote modifier applied to correctly transmit quoted arguments:

$ alias tuneenv 'eval "`./dispatch \!*`"'
$ tuneenv myname
$ myname
Xavier
$ tuneenv ""
should get exactly 1 arg

Without :q, the "" argument is not transmitted to the dispatch script.
Attached Files: dispatch (279 bytes) 2019-08-13 14:44
https://bugs.astron.com/file_download.php?file_id=72&type=bug
Notes
(0003317)
christos   
2019-10-19 18:54   
Sorry, I can't reproduce it with 6.21.00 on either Linux or NetBSD. Did that break with 6.21.00 or the bug was always there?
(0003318)
xdelaruelle   
2019-10-20 15:21   
I get the exact same result whether I test this on tcsh version 6.18, 6.19, 6.20 and 6.21 on a Linux system.

Here are the details of the tcsh 6.21.00 ran:

$ echo $version
tcsh 6.21.00 (Astron) 2019-05-08 (x86_64-unknown-linux) options wide,nls,dl,al,kan,sm,rh,color,filec

With that shell, applying code sequence described in 'Steps To Reproduce' section with dispatch script attached to this ticket (shebang adapted to match the tcsh shell ran), the same erroneous ~/.history file is obtained (as described in section).

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
113 [tcsh] General major always 2019-10-11 22:04 2019-10-19 12:54
Reporter: sobomax Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 6.22.00  
    Target Version:  
Summary: Error handling is seriously broken in kill built-in when started in non-interactive mode and with SIGINT ignored
Description: We were investigating an issue with one of our Jenkins script hanging indefinitely with 100% CPU usage occasionally. It appears that very simple command such as tcsh -c "kill TERM XYZ" just hangs forever in an infinite loop when the following 3 conditions are met:

1. tcsh is started with standard output being anything but terminal (file, dev null, pipe);
2. Parent process that invoked tcsh sets SIGINT to SIG_IGN, in our case, we are starting it using su(1) which does it apparently;
3. kill(2) fails (e.g. ENOENT, etc).

The issue seems to be [Free]BSD specific, as we cannot reproduce it on Linux using the very same version of the software. The tcsh invokes kill(2) over and over again.

14:46:59.309 95884: No such process
14:46:59.309 95884: No such process
14:46:59.309 95884: No such process
14:46:59.309 95884: No such process
14:46:59.309 95884: No such process
[...ad infinitum...]
Tags:
Steps To Reproduce: #include <assert.h>
#include <fcntl.h>
#include <signal.h>
#include <unistd.h>

int main(void)
{
  int devnull;

  assert(signal(SIGINT, SIG_IGN) != SIG_ERR);
  devnull = open("/dev/null", O_WRONLY);
  assert(devnull >= 0);
  assert(dup2(devnull, STDOUT_FILENO) >= 0);
  assert(close(devnull) == 0);
  execl("/bin/tcsh", "/bin/tcsh", "-c", "kill -TERM 99999", NULL);

  return (255);
}
Additional Information: Version 6.20.00.
Attached Files:
Notes
(0003315)
sobomax   
2019-10-11 22:17   
This is how it looks while it hangs:

99089 - R 53:05.77 _su -m -c kill -TERM 95884 (csh)

Some of the ktrace logs of the actual issue (not our simulated test case):

 99089 csh CALL ioctl(0x6,TIOCGETA,0x7fffffffc1d8)
 99089 csh RET ioctl -1 errno 25 Inappropriate ioctl for device
 99089 csh CALL sigprocmask(SIG_SETMASK,0x687fd0,0)
 99089 csh RET sigprocmask 0
 99089 csh CALL close(0x6)
 99089 csh RET close 0
 99089 csh CALL openat(AT_FDCWD,0x8014407f0,0<O_RDONLY>)
 99089 csh NAMI "/root/.history"
 99089 csh RET openat -1 errno 13 Permission denied
 99089 csh CALL sigprocmask(SIG_BLOCK,0,0x687fd0)
 99089 csh RET sigprocmask 0
 99089 csh CALL setitimer(0,0x7fffffffe400,0x7fffffffe3e0)
 99089 csh STRU itimerval { .interval = {0, 0}, .value = {0, 0} }
 99089 csh STRU itimerval { .interval = {0, 0}, .value = {0, 0} }
 99089 csh RET setitimer 0
 99089 csh CALL close(0)
 99089 csh RET close -1 errno 9 Bad file descriptor
 99089 csh CALL dup(0x13)
 99089 csh RET dup 0
 99089 csh CALL fcntl(0,F_SETFD,0)
 99089 csh RET fcntl 0
 99089 csh CALL close(0x1)
 99089 csh RET close -1 errno 9 Bad file descriptor
 99089 csh CALL dup(0x11)
 99089 csh RET dup 1
 99089 csh CALL fcntl(0x1,F_SETFD,0)
 99089 csh RET fcntl 0
 99089 csh CALL close(0x2)
 99089 csh RET close -1 errno 9 Bad file descriptor
 99089 csh CALL dup(0x12)
 99089 csh RET dup 2
 99089 csh CALL fcntl(0x2,F_SETFD,0)
 99089 csh RET fcntl 0
 99089 csh CALL sigprocmask(SIG_BLOCK,0,0x687fd0)
 99089 csh RET sigprocmask 0
 99089 csh CALL kill(0x1768c,SIGTERM)
 99089 csh RET kill -1 errno 3 No such process
 99089 csh CALL stat(0x7fffffffd9c0,0x7fffffffd948)
 99089 csh NAMI "/usr/share/nls/C/libc.cat"
 99089 csh RET stat -1 errno 2 No such file or directory
 99089 csh CALL stat(0x7fffffffd9c0,0x7fffffffd948)
 99089 csh NAMI "/usr/share/nls/libc/C"
 99089 csh RET stat -1 errno 2 No such file or directory
 99089 csh CALL stat(0x7fffffffd9c0,0x7fffffffd948)
 99089 csh NAMI "/usr/local/share/nls/C/libc.cat"
 99089 csh RET stat -1 errno 2 No such file or directory
 99089 csh CALL stat(0x7fffffffd9c0,0x7fffffffd948)
 99089 csh NAMI "/usr/local/share/nls/libc/C"
 99089 csh RET stat -1 errno 2 No such file or directory
 99089 csh CALL write(0x1,0x6aa960,0x17)
 99089 csh GIO fd 1 wrote 23 bytes
       "95884: No such process
       "
 99089 csh RET write 23/0x17
 99089 csh CALL lseek(0x10,0,SEEK_END)
 99089 csh RET lseek -1 errno 29 Illegal seek
 99089 csh CALL sigprocmask(SIG_SETMASK,0x687fd0,0)
 99089 csh RET sigprocmask 0
 99089 csh CALL sigprocmask(SIG_BLOCK,0,0x687fd0)
 99089 csh RET sigprocmask 0
 99089 csh CALL sigprocmask(SIG_SETMASK,0x687fd0,0)
 99089 csh RET sigprocmask 0
 99089 csh CALL sigprocmask(SIG_BLOCK,0,0x687fd0)
 99089 csh RET sigprocmask 0
 99089 csh CALL setitimer(0,0x7fffffffe400,0x7fffffffe3e0)
 99089 csh STRU itimerval { .interval = {0, 0}, .value = {0, 0} }
 99089 csh STRU itimerval { .interval = {0, 0}, .value = {0, 0} }
 99089 csh RET setitimer 0
 99089 csh CALL close(0)
 99089 csh RET close 0
 99089 csh CALL dup(0x13)
 99089 csh RET dup 0
 99089 csh CALL fcntl(0,F_SETFD,0)
 99089 csh RET fcntl 0
 99089 csh CALL close(0x1)
 99089 csh RET close 0
 99089 csh CALL dup(0x11)
 99089 csh RET dup 1
 99089 csh CALL fcntl(0x1,F_SETFD,0)
 99089 csh RET fcntl 0
 99089 csh CALL close(0x2)
 99089 csh RET close 0
 99089 csh CALL dup(0x12)
 99089 csh RET dup 2
 99089 csh CALL fcntl(0x2,F_SETFD,0)
 99089 csh RET fcntl 0
 99089 csh CALL sigprocmask(SIG_BLOCK,0,0x687fd0)
 99089 csh RET sigprocmask 0
 99089 csh CALL kill(0x1768c,SIGTERM)
 99089 csh RET kill -1 errno 3 No such process
 99089 csh CALL write(0x1,0x6aa960,0x17)
 99089 csh GIO fd 1 wrote 23 bytes
       "95884: No such process
       "
[cycle repeats after that]
(0003316)
christos   
2019-10-19 12:54   
FIxed on HEAD, please re-open if you have issues.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
112 [file] General minor always 2019-10-06 13:43 2019-10-08 20:25
Reporter: connesc Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: Incorrect output with -iz on gzip file
Description: Starting with v5.37, combining -i and -z leads to incorrect results for gzip files.

Running it on a gzipped text file produces: text/plain; charset=us-ascii compressed-encoding=application/octet-stream; charset=binary
Versions bellow v5.37 produce what I would expect: text/plain; charset=us-ascii compressed-encoding=application/x-gzip; charset=binary
Tags:
Steps To Reproduce: # Create a simple test file
gzip <<< 'Hello World!' > hello.txt.gz

# Call file 5.37 with -i and -z
file -biz hello.txt.gz
Additional Information: I guess that gzip is properly detected since it is reported without -i. Only the MIME output seems to be broken.

Also, I get a correct output when using the v5.37 binary with the v5.36 magic file.
Attached Files:
Notes
(0003314)
christos   
2019-10-08 20:25   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
110 [file] General minor have not tried 2019-10-05 15:06 2019-10-08 14:26
Reporter: rickrich Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version:  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: 3D STL files needs help
Description: $ file 0.stl
0.stl: data

$ xod 0.stl | head -9

Dump: 0.stl

Offset: 0 1 2 3 4 5 6 7 8 9 a b c d e f 0123456789abcdef

00000000: 53 54 4c 42 20 41 54 46 20 38 2e 32 2e 30 2e 31 | STLB ATF 8.2.0.1 |
00000010: 30 32 39 20 43 4f 4c 4f 52 3d a0 a0 a0 ff 20 20 | 029 COLOR=.... |
00000020: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | |
*
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003311)
rickrich   
2019-10-05 15:08   
https://en.wikipedia.org/wiki/STL_(file_format)
(0003313)
christos   
2019-10-08 14:26   
https://all3dp.com/what-is-stl-file-format-extension-3d-printing/
https://en.wikipedia.org/wiki/STL_(file_format)

There seems to be no magic number for the binary format or any kind of structure except that it perhaps contains COLOR=
Am I missing something?

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
107 [file] General feature always 2019-09-26 01:39 2019-09-30 15:51
Reporter: lucas.hartmann Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.36  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: Add report for squashfs compression algorithm
Description: Feature request: Report compression algorithm for squashfs files.

Compression is included in the squashfs superblock, uint16_t at offset 20 from the start of the file. Values are:
0 - uncompressed (unsure)
1 - zlib compressed
2 - lzma compressed
3 - lzo compressed
4 - xz compressed
5 - lz4 compressed
6 - zstd compressed

Source: *_COMPRESSION macros, and struct squashfs_super_block at
https://sourceforge.net/p/squashfs/code/ci/master/tree/squashfs-tools/squashfs_fs.h#l295
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: squashfs_compression.patch (1,040 bytes) 2019-09-26 15:09
https://bugs.astron.com/file_download.php?file_id=83&type=bug
Notes
(0003308)
lucas.hartmann   
2019-09-26 15:09   
This may do it.
(0003310)
christos   
2019-09-30 15:51   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
108 [file] General trivial always 2019-09-26 14:05 2019-09-30 15:45
Reporter: izhidkov Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: Incorrect mime type for sgml/svg
Description: SVG spec v1.1 and v1.2 both describe SVG mime type only as 'image/svg+xml', there is no option without '+xml'
link to spec v1.1 https://www.w3.org/TR/SVG11/mimereg.html
link to spec v1.2 https://www.w3.org/TR/SVGTiny12/mimereg.html

magic/Magdir/sgml:13 describe it as 'image/svg' which is incorrect according to spec
Tags: magic
Steps To Reproduce: Try to detect mime type of text file with content(also attached as file):
<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 30 30" version="1.1" viewBox="0 0 30 30" style="zoom: 1;" width="240(null)" height="240(null)"><rect x="-1.997164px" y="-6.79887px" width="800px" fill="#303860" height="800px"></rect><g fill="#fff"><path d="M25.5,4.4 c1.6,-0.6 2.9,-0.1 3,0 c-0.1,0 -1.3,0.2 -2.3,1.3 s-1.9,2.7 -2.4,3.4 c-1.4,2 -2.7,2.8 -4.3,3.2 c-2,0.5 -3.2,-0.6 -3.3,-0.7 c0.1,0 1.3,0.3 2.4,-0.5 c1.1,-0.7 2.3,-2.3 3.1,-3.4 c1.2,-1.6 2.4,-2.7 3.8,-3.3 m-22.4,2.8 c-1.4,-1.1 -1.6,-2.6 -1.6,-2.6 s0.8,1.1 2.3,1.3 c1.5,0.3 3.3,0.3 4.2,0.4 c2.5,0.2 3.8,1 4.9,2.2 c1.4,1.5 1,3.1 1.1,3.2 c0,-0.1 -0.4,-1.2 -1.6,-1.8 s-3.1,-0.8 -4.5,-1 c-2.1,-0.3 -3.7,-0.8 -4.8,-1.7 m13.6,18 c-0.2,1.7 -1.4,2.5 -1.4,2.6 c0,-0.1 0.5,-1.2 0,-2.6 s-1.4,-3 -1.8,-3.8 c-1.1,-2.2 -1,-3.7 -0.6,-5.3 c0.6,-2 2.2,-2.4 2.2,-2.5 c-0.1,0.1 -0.9,1 -0.8,2.3 c0,1.3 0.8,3.1 1.4,4.4 c0.8,1.8 1.2,3.5 1,4.9 z "></path><path d="m17.2 13c0.6 0.3 1.7 0.4 2.4 0.6 1.1 0.1 2 0.4 2.6 0.9 0.7 0.6 0.8 1.4 0.8 1.4s-0.4-0.6-1.2-0.7c-0.8-0.2-1.8-0.2-2.2-0.2-1.3-0.1-2-0.5-2.6-1.2-0.7-0.8-0.6-1.6-0.6-1.7 0 0 0.2 0.6 0.8 0.9"></path><path d="m15 11c0.1 0 0.8-0.4 1-1.2 0.3-0.8 0.2-2.1 0.1-3-0.1-1.3 0-2.4 0.5-3.3 0.5-1 1.5-1.3 1.5-1.3s-0.6 0.6-0.6 1.6 0.2 2.2 0.2 2.7c0.2 1.6-0.2 2.5-0.8 3.4-0.8 1.1-1.8 1.1-1.9 1.1"></path><path d="m14.7 10c0-0.7-0.4-1.7-0.7-2.4-0.4-1-0.7-1.9-0.5-2.7 0.1-0.9 0.8-1.4 0.8-1.4s-0.3 0.6 0 1.4c0.2 0.8 0.8 1.6 0.9 2.1 0.6 1.2 0.5 2 0.3 2.9-0.3 1-1.1 1.3-1.2 1.4 0-0.1 0.4-0.5 0.4-1.3"></path><path d="m14 13c-0.1 0-0.7-0.4-1.6-0.3-0.9 0.2-1.9 0.9-2.7 1.4-1.1 0.7-2.1 1.2-3.1 1.2-1.2 0-1.9-0.7-1.8-0.6 0 0 0.8 0.2 1.7-0.3s1.8-1.3 2.3-1.6c1.3-0.9 2.3-1.1 3.4-1 1.3 0.2 1.7 1.1 1.8 1.2"></path><path d="m13.3 13.7c-0.6 0.4-1.2 1.2-1.7 1.8-0.7 0.9-1.3 1.5-2.1 1.8-0.9 0.3-1.6 0-1.6 0s0.7-0.1 1.2-0.7 1-1.5 1.3-1.8c0.8-1.1 1.5-1.5 2.3-1.7 1.1-0.2 1.7 0.3 1.8 0.4 0.1 0-0.6-0.2-1.2 0.2"></path><path d="m16.2 12.9c0 0.1 0 0.9 0.6 1.5 0.6 0.7 1.7 1.2 2.6 1.6 1.2 0.6 2.1 1.2 2.6 2.1 0.6 1 0.4 1.9 0.4 1.9s-0.2-0.8-1.1-1.3c-0.8-0.5-2-0.9-2.5-1.2-1.5-0.7-2.1-1.5-2.5-2.4-0.7-1.3-0.1-2.2-0.1-2.2"></path><path d="m15.7 11.2c0.1 0 1-0.2 1.7-1 0.7-0.9 1.1-2.4 1.4-3.5 0.5-1.6 1.1-2.8 2-3.6 1.1-0.9 2.3-0.8 2.2-0.9 0 0-0.9 0.5-1.3 1.6-0.5 1.2-0.7 2.7-0.9 3.3-0.5 1.9-1.3 2.9-2.4 3.6-1.4 1-2.6 0.5-2.7 0.5"></path><path d="m13.8 12.3c-0.1-0.1-0.7-0.8-1.7-0.9-1.1-0.2-2.6 0.2-3.7 0.5-1.6 0.4-3 0.5-4.1 0.1-1.3-0.4-1.9-1.5-1.9-1.5s0.9 0.6 2.1 0.3c1.2-0.2 2.6-0.7 3.3-0.9 1.9-0.5 3.1-0.3 4.3 0.3 1.5 0.7 1.7 2 1.7 2.1"></path><path d="m15.7 13.4c0 0.1-0.4 1 0 2s1.5 2.1 2.3 3c1.1 1.2 1.9 2.3 2.1 3.5 0.3 1.3-0.3 2.3-0.4 2.4 0-0.1 0-1.1-0.8-2-0.8-1-1.9-1.9-2.4-2.4-1.4-1.4-1.8-2.6-1.9-3.9 0-1.7 1.1-2.5 1.1-2.6"></path></g></svg>
Additional Information: Patch (also attached as file):
--- a/file/magic/Magdir/sgml
+++ b/file/magic/Magdir/sgml
@@ -10,7 +10,7 @@
 >>19 search/4096 \<gnc-v2 GnuCash file
 !:mime application/x-gnucash
 0 string \<svg SVG Scalable Vector Graphics image
-!:mime image/svg
+!:mime image/svg+xml

 # Sitemap file
 0 string/t \<?xml\ version=
Attached Files: svg_magic.patch (288 bytes) 2019-09-26 14:05
https://bugs.astron.com/file_download.php?file_id=82&type=bug
example.svg (2,727 bytes) 2019-09-26 14:05
https://bugs.astron.com/file_download.php?file_id=81&type=bug
Notes
(0003309)
christos   
2019-09-30 15:45   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
106 [file] General trivial N/A 2019-09-23 09:26 2019-09-23 13:04
Reporter: chuckthedude Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: add support for ILDA files
Description: Update magic to detect .lid ILDA files
Tags:
Steps To Reproduce: chein@GeekLab-2 file % git diff origin/master master
diff --git a/magic/Magdir/ilda b/magic/Magdir/ilda
new file mode 100644
index 00000000..c5be6870
--- /dev/null
+++ b/magic/Magdir/ilda
@@ -0,0 +1,18 @@
+
+#------------------------------------------------------------------------------
+# $File$
+# ilda: file(1) magic for ilda
+#
+# ILDA Image Data Transfer Format
+# https://www.ilda.com/resources/StandardsDocs/ILDA_IDTF14_rev011.pdf
+#
+# Updated by Chuck Hein (laser@geekdude.com)
+#
+
+0 string ILDA ILDA Image Data Transfer Format
+>7 byte 0x00 3D Coordinates with Indexed Color
+>7 byte 0x01 2D Coordinates with Indexed Color
+>7 byte 0x02 Color Palette
+>7 byte 0x04 3D Coordinates with True Color
+>7 byte 0x05 2D Coordinates with True Color
+
diff --git a/magic/Makefile.am b/magic/Makefile.am
index 6aeeb4ce..aee9d2bb 100644
--- a/magic/Makefile.am
+++ b/magic/Makefile.am
@@ -129,6 +129,7 @@ $(MAGIC_FRAGMENT_DIR)/ibm370 \
 $(MAGIC_FRAGMENT_DIR)/ibm6000 \
 $(MAGIC_FRAGMENT_DIR)/icc \
 $(MAGIC_FRAGMENT_DIR)/iff \
+$(MAGIC_FRAGMENT_DIR)/ilda \
 $(MAGIC_FRAGMENT_DIR)/images \
 $(MAGIC_FRAGMENT_DIR)/inform \
 $(MAGIC_FRAGMENT_DIR)/intel \
Additional Information:
Attached Files: 0001-Support-for-ILDA-files.patch (1,527 bytes) 2019-09-23 09:33
https://bugs.astron.com/file_download.php?file_id=79&type=bug
formatt.ild (38,522 bytes) 2019-09-23 09:42
https://bugs.astron.com/file_download.php?file_id=80&type=bug
Notes
(0003305)
chuckthedude   
2019-09-23 09:33   
patchfile
(0003306)
chuckthedude   
2019-09-23 09:42   
Attached sample ILDA file for testing if desired or required.
http://laserboy.org/formatt/formatt.ild

From: http://laserboy.org/ilda_file_format.html
A LOT MORE THAN YOU EVER WANTED TO KNOW ABOUT THE ILDA FILE FORMAT
(0003307)
christos   
2019-09-23 13:04   
Added to images, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
105 [file] General major always 2019-09-11 06:12 2019-09-12 15:38
Reporter: lighe Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Docx files exported by MacOS's Pages not recognized
Description: 1) Create a document in Pages
2) File > Export to > Word > Docx
3) file -i file.docx reports application/octet-stream; charset=binary instead of application/vnd.openxmlformats-officedocument.wordprocessingml.document; charset=binary

Seems to be with any content.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: Incorrect.docx (383,370 bytes) 2019-09-11 06:12
https://bugs.astron.com/file_download.php?file_id=78&type=bug
Notes
(0003289)
christos   
2019-09-11 14:48   
[10:46am] 191>./file macosx.docx
macosx.docx: Microsoft Word 2007+
[10:46am] 192>./file -i macosx.docx
macosx.docx: application/vnd.openxmlformats-officedocument.wordprocessingml.document; charset=binary
[10:46am] 193>./file -v
file-5.37
magic file from /usr/local/share/misc/magic

What do you get?
(0003290)
christos   
2019-09-11 14:50   
ah, there are some changes on HEAD which might have fixed the issue.
(0003299)
lighe   
2019-09-12 13:25   
I am getting application/octet-stream; charset=binary
(0003300)
lighe   
2019-09-12 13:39   
Sorry.
file -v reportd file-5.30. So it looks like I confused myself thinking I'm on the latest version!
(0003301)
christos   
2019-09-12 15:38   
please try with the latest version from github.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
95 [tcsh] General minor always 2019-08-01 14:59 2019-09-12 01:54
Reporter: mnowak Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 6.21.00  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: 'nice' test fails on OpenIndiana
Description: 68. commands.at:893: testing nice ...
/export/home/newman/ws/oi-userland/components/shell/tcsh/tcsh-6.21.00/commands.at:896: tcsh -f -c 'nice set var=1; echo $?var'
--- /dev/null 2019-08-01 16:49:34.000000000 +0000
+++ /export/home/newman/ws/oi-userland/components/shell/tcsh/build/amd64/testsuite.dir/at-groups/68/stderr 2019-08-01 16:49:36.642047795 +0000
@@ -0,0 +1 @@
+setpriority: Permission denied.
68. commands.at:893: 68. nice (commands.at:893): FAILED (commands.at:896)
Tags:
Steps To Reproduce: Run tests as user like this:

/usr/bin/env PATH=/usr/gnu/bin:/usr/bin:/usr/sbin:/usr/perl5/bin /usr/gnu/bin/make check

Here GNU tools take precedence to illumos ones otherwise even more tests fail.
Additional Information:
Attached Files: testsuite.log (91,561 bytes) 2019-08-01 14:59
https://bugs.astron.com/file_download.php?file_id=68&type=bug
Notes
(0003278)
christos   
2019-08-02 10:47   
I can't reproduce this, but I fixed the tests so that the ones that failed because /usr/bin/false returns 255 instead of 0 are fixed.
(0003279)
mnowak   
2019-08-02 16:23   
Right, now I see it pass too... Thanks.
(0003298)
christos   
2019-09-12 01:54   
Submitter can't reproduce

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
100 [file] General minor always 2019-08-16 14:50 2019-09-11 22:55
Reporter: SIGSTACKFAULT Platform: x86_64 (vbox)  
Assigned To: christos OS: Ubuntu  
Priority: low OS Version: 19.04  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: device tree configuration (.dts) files listed as "C source"
Description: Device tree configuration files, `.dts` are listed as "C source" files despite being, well, not C source code.
Tags: magic
Steps To Reproduce: For example, I'm going to use .dts files from the zephyr RTOS.

    git clone https://github.com/zephyrproject-rtos/zephyr --depth 10
    file zephyr/boards/arm/nrf52840_mdk/nrf52840_mdk.dts

files in `zephyr/boards/*/*/*.dts` all do this. Some are listed as just "ASCII text". I'm not sure if that says anything about your C magic. One is marked as UTF-8 unicode but I think that's zephyr's fault.

`--extension` doesn't help either.
Additional Information:
Attached Files: reproduce.sh (98 bytes) 2019-08-16 14:50
https://bugs.astron.com/file_download.php?file_id=73&type=bug
Notes
(0003285)
SIGSTACKFAULT   
2019-08-16 15:04   
The magic string you're looking for is "/dts-v1/", but it's not necessarily at the start; there may be comments before it.
(0003297)
christos   
2019-09-11 22:55   
Added magic.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
104 [file] General minor have not tried 2019-09-10 21:04 2019-09-11 17:07
Reporter: Ilrandar Platform:  
Assigned To: christos OS: ArchLinux  
Priority: normal OS Version:  
Status: assigned Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: pdf file incorrectly reported as `data`
Description: Some pdf files downloaded from the internet are incorrectly reported as `data` by file. Their associated mime-type is `application/octet-stream` and not `application/pdf`. I join such a pdf to this report.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: certificat_scolarité_l2_eco.pdf (1,184,843 bytes) 2019-09-10 21:04
https://bugs.astron.com/file_download.php?file_id=77&type=bug
Notes
(0003288)
christos   
2019-09-11 14:42   
These are the first few lines of the file:

HTTP/1.1 200 OK
Date: Tue, 10 Sep 2019 08:38:20 GMT
Server: Apache/2.4.38 (Debian)
Content-Disposition: attachment; filename="21808995-2019-certificat-scolarite.pdf"
Cache-Control: no-cache, private
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 58
Content-Length: 1184531
Content-Type: application/pdf

Here's where the pdf file starts:

%PDF-1.3

The tool you used to download it or the original file has junk in front. Of course some browsers ignore the junk and process it as a pdf file (because users want things to just work), but this is just crappy behavior. Most application will not open it properly, and it is also a security issue since you can masquerade files this way. It is also fragile. How many lines does it try to parse? 10? 1K of data? Who knows. Depends on the implementation. Of course file can also be modified to mimick this behavior at the loss of efficiency and encouraging people to produce junk...
(0003295)
Ilrandar   
2019-09-11 17:07   
Oh, I didn’t know I could open pdf files with a text editor.
I don’t think you should ignore junk in front of file. I just needed some way to get this file (and a few other) to be recognized as pdf files, but if I can just open them and get rid of the leading incorrect lines, I will just do it.
Thank you for your answer.
As far as I’m concerned, you can consider this issue closed.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
98 [file] General minor always 2019-08-11 08:47 2019-09-11 16:59
Reporter: johannes Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: LLVM Assembly Language files (*.ll) are reported as C source
Description: Files containing the human-readable assembly language of the LLVM intermediate representation are mistakenly reported to be C source.
Perhaps we can add some simple patterns to distuingish them. The mime type could be "text/x-llvm" or "text/x-llvm-ir".
LLVM Language: https://llvm.org/docs/LangRef.html
Tags:
Steps To Reproduce: $ cat > main.ll << EOF
define i8 @main() {
    ret i8 123
}
EOF

$ file main.ll
main.ll: C source, ASCII text
Additional Information: Here are some magic patterns I've been using which seem to work

cat >> magic/Magdir/llvm <<EOF
0 search/8192 define LLVM Assembly Language text
!:mime text/x-llvm
>0 regex \^define

0 search/8192 declare LLVM Assembly Language text
!:mime text/x-llvm
>0 regex \^declare
EOF
Attached Files:
Notes
(0003294)
christos   
2019-09-11 16:59   
We need something stronger than that, otherwise many text files will match.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
102 [file] General major always 2019-08-30 02:59 2019-09-11 15:46
Reporter: Sergei Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: Incorrect fix in "PR/518: Fall back to use setlocale() for the OS's that don't support"
Description: Fix implemented by
https://github.com/file/file/commit/b74175e236c34beeb930c95bb25300c92a205cd3 is incorrect:

"setlocale" doesn't return previous locale like "uselocale" does. "setlocale" returns (man 3 setlocale):

> RETURN VALUE
> A successful call to setlocale() returns an opaque string that corresponds to the locale set. This string may be allocated in static storage. The
> string returned is such that a subsequent call with that string and its associated category will restore that part of the process's locale. The
> return value is NULL if the request cannot be honored.

So that "rx->old_lc_ctype = setlocale(LC_CTYPE, "C");" and the likes is utterly wrong. I suggest using the original method from the commit "c397fb230f70cfa1dc8f3d387f4df8ebec6c1a63" to save locale. Patch attached.

With best regards,
Sergei.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: 0001-Fix-locale-saving-when-using-setlocale.patch (2,179 bytes) 2019-08-30 02:59
https://bugs.astron.com/file_download.php?file_id=76&type=bug
Notes
(0003292)
christos   
2019-09-11 15:46   
patch applied, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
103 [file] General minor always 2019-09-01 04:41 2019-09-11 15:20
Reporter: stokito Platform:  
Assigned To: christos OS:  
Priority: high OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: ZStandard incorrect MIME type application/x-zstd
Description: In the commit "PR/573: Nick Terrell: Add zstd support" https://github.com/file/file/commit/5b8826616cb699b69f7a1cc7b5c0cbac4b5bed9b was added a support for
for ZStandard compressed files with "application/x-zstd" MIME type.
But latter the official MIME type was assigned without the "x-" i.e. "application/zstd":
https://www.iana.org/assignments/media-types/application/zstd
https://tools.ietf.org/search/rfc8478
https://github.com/facebook/zstd/issues/767
Tags: magic
Steps To Reproduce: $ touch test.txt
$ zstd test.txt
test.txt :1300.00% ( 0 => 13 bytes, test.txt.zst)
$ file -i test.txt.zst
test.txt.zst: application/x-zstd; charset=binary
Additional Information: All GUI archievers (Ark, File Roller, Engrampa) internally using the correct "application/zstd" MIME type
Attached Files:
Notes
(0003287)
stokito   
2019-09-04 19:46   
BTW, only 0xFD2FB528 was standardized so we can remove all previous magic signatures.
0xFD2FB522 Zstandard compressed data (v0.2)
0xFD2FB523 Zstandard compressed data (v0.3)
0xFD2FB524 Zstandard compressed data (v0.4)
0xFD2FB525 Zstandard compressed data (v0.5)
0xFD2FB526 Zstandard compressed data (v0.6)
0xFD2FB527 Zstandard compressed data (v0.7)
(0003291)
christos   
2019-09-11 15:20   
Fixed, thanks

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
97 [file] General minor have not tried 2019-08-06 14:41 2019-08-10 22:33
Reporter: jidanni Platform: Debian  
Assigned To: christos OS: Linux  
Priority: normal OS Version:  
Status: assigned Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: File misses the alpha channel sometimes
Description: File misses the alpha channel in the second file!

$ set slope.png zaokeng_slope.png
$ identify -format '%[channels]\n' $@
srgba
srgba
$ file $@
slope.png: PNG image data, 640 x 220, 8-bit/color RGBA, non-interlaced
zaokeng_slope.png: PNG image data, 700 x 400, 8-bit/color RGB, non-interlaced
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: slope.png (17,410 bytes) 2019-08-06 14:41
https://bugs.astron.com/file_download.php?file_id=71&type=bug
png

zaokeng_slope.png (16,283 bytes) 2019-08-06 14:41
https://bugs.astron.com/file_download.php?file_id=70&type=bug
png
Notes
(0003283)
christos   
2019-08-10 13:27   
(Last edited: 2019-08-10 13:28)
Well, "identify" is right and wrong. The second file is not rgba, it is rgb with extra transparency information in a "tRNS" chunk. Effectively this means that both files contain alpha info, but they are encoded differently. file(1) only looks at the IHDR section and does not do further processing to see if there are any other chunks. While we can make file(1) smarter about png files by parsing more of the png-file and all the additional chunks, and print additional information about it, it hardly seems worth-while. For reference: https://en.wikipedia.org/wiki/Portable_Network_Graphics

(0003284)
jidanni   
2019-08-10 22:33   
(I was trying to scan for all files that would trigger https://bugs.chromium.org/p/chromium/issues/detail?id=991197 .)
(OK, as you understand the issue perhaps you should file an Imagemagick bug.)

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
96 [file] General feature always 2019-08-02 20:34 2019-08-05 13:10
Reporter: koala_man Platform:  
Assigned To: christos OS:  
Priority: low OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: Add support for Hermes compiled JavaScript bytecode
Description: Hi! I am one of the developers of Hermes, a new JavaScript engine for mobile that pre-compiles JavaScript into bytecode. For your consideration, here is magic that can recognize our bytecode files (64bit magic + 32bit integer version, little-endian):

    0 lequad 0x1F1903C103BC1FC6 Hermes compiled JavaScript bytecode,
    >8 lelong x version %d

I think there is a case for upstreaming this because: 1. the use of a 64bit magic number minimizes the risk of false positives, 2. it's convenient for mobile JS to be able to determine a file's bytecode version to check compatibility, and 3. there are already hundreds of millions of mobile devices carrying files in this format.

Please let me know what you think.
Tags: magic
Steps To Reproduce: I have attached `hello.hbc`, a simple `print("Hello World");` compiled into Hermes bytecode using `hermes -O -emit-binary -out hello.hbc hello.js`

Without the suggested magic, file's guess is `data`. With the magic, it says:

    hello.hbc: Hermes compiled JavaScript bytecode, version 60
Additional Information: Hermes is developed by Facebook and was open sourced in July 2019: https://hermesengine.dev/

The bytecode header and magic numbers can be found in: https://github.com/facebook/hermes/blob/a09052e901f4b8dc925e6d4bd0cc47171b90db5e/include/hermes/BCGen/HBC/BytecodeFileFormat.h#L24
Attached Files: hello.hbc (284 bytes) 2019-08-02 20:34
https://bugs.astron.com/file_download.php?file_id=69&type=bug
Notes
(0003282)
christos   
2019-08-05 13:10   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
80 [tcsh] General major always 2019-05-13 18:15 2019-08-02 17:22
Reporter: mnowak Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 6.21.00  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: gethost: ".../tcsh-6.21.00/host.defs", 36: Discarded
Description: Build of tcsh 6.21.00 on OpenIndiana 2019.04 (an illumos distribution) fails with:

./gethost /export/home/newman/ws/oi-userland/components/shell/tcsh/tcsh-6.21.00/host.defs >> tc.defs.c.tmp
gethost: "/export/home/newman/ws/oi-userland/components/shell/tcsh/tcsh-6.21.00/host.defs", 36: Discarded
gethost: "/export/home/newman/ws/oi-userland/components/shell/tcsh/tcsh-6.21.00/host.defs", 47: Discarded
...
gethost: "/export/home/newman/ws/oi-userland/components/shell/tcsh/tcsh-6.21.00/host.defs", 349: Discarded
gethost: "/export/home/newman/ws/oi-userland/components/shell/tcsh/tcsh-6.21.00/host.defs", 350: Discarded
gethost: Too many errors
make[1]: *** [Makefile:455: tc.defs.c] Error 1

Full build output is in the attached file.

tcsh-6.20.00 builds fine.

Let me know, should you need more information.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: tcsh.txt (22,330 bytes) 2019-05-13 18:15
https://bugs.astron.com/file_download.php?file_id=54&type=bug
Notes
(0003253)
mnowak   
2019-06-15 14:09   
Reported also at https://github.com/tcsh-org/tcsh/issues/14.
(0003271)
christos   
2019-08-01 14:03   
I built it with both cc and gcc and no issues:

christos@openindiana:~/src/tcsh$ cc -V
cc: Sun C 5.10 SunOS_i386 2009/06/03
usage: cc [ options] files. Use 'cc -flags' for details
christos@openindiana:~/src/tcsh$ gcc -v
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/usr/gcc/8/lib/gcc/i386-pc-solaris2.11/8.3.0/lto-wrapper
Target: i386-pc-solaris2.11
Configured with: /jenkins/jobs/oi-userland/workspace/components/developer/gcc-8/gcc-8.3.0/configure CC=/usr/gcc/6/bin/gcc CXX=/usr/gcc/6/bin/g++ F77=/usr/gcc/6/bin/gfortran FC=/usr/gcc/6/bin/gfortran CFLAGS= CXXFLAGS= FFLAGS=' -m32 -O3 ' FCFLAGS='-m32 -O3 ' LDFLAGS=-m32 PKG_CONFIG_PATH=/usr/lib/pkgconfig --prefix=/usr/gcc/8 --mandir=/usr/gcc/8/share/man --bindir=/usr/gcc/8/bin --libdir=/usr/gcc/8/lib --sbindir=/usr/gcc/8/sbin --sbindir=/usr/gcc/8/bin --libdir=/usr/gcc/8/lib --libexecdir=/usr/gcc/8/lib --host i386-pc-solaris2.11 --build i386-pc-solaris2.11 --target i386-pc-solaris2.11 --with-pkgversion='OpenIndiana 8.3.0-OI-0' --with-bugurl=https://bugs.openindiana.org --enable-plugins --enable-objc-gc --enable-initfini-array --enable-languages=c,c++,fortran,lto,objc --without-gnu-ld --with-ld=/usr/bin/ld --with-build-time-tools=/usr/gnu/i386-pc-solaris2.11/bin --disable-libitm enable_frame_pointer=yes --with-gnu-as --with-as=/usr/bin/gas 'BOOT_CFLAGS=-g -O2' LDFLAGS=-R/usr/gcc/8/lib
Thread model: posix
gcc version 8.3.0 (OpenIndiana 8.3.0-OI-0)
christos@openindiana:~/src/tcsh$
(0003272)
christos   
2019-08-01 14:07   
Cannot reproduce.
(0003274)
mnowak   
2019-08-01 14:47   
Right, thanks for looking into this. GCC 8.3.0 works for me as well. Is GCC 8 now required? By default we use GCC 6.5.0. GCC 7.4.0 fails for me the same way GCC 6 does.
(0003275)
christos   
2019-08-01 15:36   
No, I've built it before with gcc-5, gcc-6, gcc-7... I think something might be wrong with the opensolaris gcc packages of gcc-6/7...
(0003277)
christos   
2019-08-01 16:06   
I will resolve it since it seems like a compiler/environment-specific bug. Don't you agree?
(0003280)
mnowak   
2019-08-02 17:10   
It's actually the -O3 optimization we use by default, with -O2 we are good.

I think you can close this. Thanks!
(0003281)
christos   
2019-08-02 17:22   
gcc optimizer bug.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
94 [tcsh] General crash always 2019-07-26 21:38 2019-08-01 14:18
Reporter: swagstafff Platform: Mac  
Assigned To: christos OS: macOS  
Priority: normal OS Version: 10.14  
Status: resolved Product Version: 6.21.00  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 6.22.00  
    Target Version:  
Summary: Apple patches not applied
Description: Apple has patched its Mac OS X/macOS tcsh installations [1] since c. 2007 [2]. These patches have never propagated upstream and lead to bugs when not applied on a Mac. Bugs include incorrect HOSTTYPE, OSTYPE, MACHTYPE; and crash with segmentation fault.

[1] https://opensource.apple.com/source/tcsh/
[2] https://opensource.apple.com/source/tcsh/tcsh-60/patches/

Tags:
Steps To Reproduce: host.defs.patch
Unpatched:
> echo $HOSTTYPE $OSTYPE $MACHTYPE
unknown bsd44 unknown

After patch (and expected):
> echo $HOSTTYPE $OSTYPE $MACHTYPE
intel-mac darwin x86_64

Before config_f.h.patch:
> nonexistent > /dev/null
nonexistent: Command not found.
Segmentation fault
Additional Information: The uploaded files incorporate Apple's latest patches ("tcsh-67") [3], with some adaptation for application to tcsh 6.21.00 and corrections for correct hosttype on Intel Macs. The patches have been tested on macOS 10.12.6 and 10.14.5.

[3] https://opensource.apple.com/source/tcsh/tcsh-67/patches/
Attached Files: tc.sig.h.patch (456 bytes) 2019-07-26 21:38
https://bugs.astron.com/file_download.php?file_id=67&type=bug
host.defs.patch (678 bytes) 2019-07-26 21:38
https://bugs.astron.com/file_download.php?file_id=66&type=bug
config_f.h.patch (279 bytes) 2019-07-26 21:38
https://bugs.astron.com/file_download.php?file_id=65&type=bug
Notes
(0003273)
christos   
2019-08-01 14:18   
Applied (except the KAI one, which is not appropriate).

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
58 [tcsh] General minor N/A 2019-01-30 01:12 2019-08-01 07:29
Reporter: PesoMemo Platform: PC  
Assigned To: christos OS: Windows  
Priority: normal OS Version: 10  
Status: feedback Product Version:  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Unable to find pre-compiled tcsh64.exe or tcsh86.exe for tcsh version 6.20.00
Description: I've searched for hours to no avail - does anyone know where I can D/L a Windows 10 binary x64/x86 of tcsh 6.20.00 ?
If anyone has a copy can they post it to a URL/share site where I can D/L it?

TIA, Bill

PS: You can email me at PesoMemo <atsign> gmail.com
Tags: tcsh64.exe tcsh86.exe tcsh 6.20.00 windows
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003270)
christos   
2019-08-01 07:29   
Sorry, I don't have a setup to build. Amol, used to provide the binaries. Please ask in the mailing lists.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
81 [tcsh] General major always 2019-05-17 13:58 2019-07-29 13:05
Reporter: oldpink Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 6.21.00  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 6.22.00  
    Target Version:  
Summary: Filename expansion inside square brackets is apparently broken
Description: I have been running TCSH version 6.21.00 on my Slackware system since Patrick Volkderding made the new build of TCSH part of Slackware-current on May 10.
However, I ran into a really nasty issue with this new version of TCSH that breaks filename pattern matching within square brackets, specifically, I tried upgrading (via upgradepkg) several of my Slackware packages selectively by excluding some of the packages that I had downloaded so that I could install the excluded packages as additions instead of upgrading them.
I excluded the kernel packages, using the following command: upgradepkg [b-c,l-z]*.t?z
However, much to my dismay, it went ahead and upgraded the kernel-* packages anyway, deleting my three already installed kernel packages that I wanted to keep in place as secondary bootup and backups.
Sure enough, when I type "ls [b-c,l-z]*.t?z, it includes the kernel-* files in the list of files, too.
Obviously, this is not the way it should work, so I downloaded version 6.21.00 from source, then compiled it using the Slackware build script (called a SlackBuild) to see if reverting the previous kernel would correct the error, and Shazam! yes it works as it should, properly excluding the kernel-* files in my filespec.
I'm certain that this is a bug, and a very bad one at that, so I'll be using the previous version of TCSH for now, but I wanted to let you know about my problem with the current version so that maybe something could be done before someone unintentionally wipes out an entire file system or something else because of this bug.
Tags:
Steps To Reproduce: Here is the list of files I'm trying to exclude, with no other files in the directory where they are:
kernel-huge-4.19.44-x86_64-1.txz
kernel-source-4.19.44-noarch-1.txz
kernel-modules-4.19.44-x86_64-1.txz

Using Bash, I get the proper response with this command: ls [a-d,l-z]*
ls: cannot access '[a-d,l-z]*': No such file or directory

Using version 6.20.00 of TCSH: ls [a-d,l-z]*
/bin/ls: No match.

Using the buggy version 6.21.00 version of TCSH: ls [a-d,l-z]*
kernel-huge-4.19.44-x86_64-1.txz kernel-source-4.19.44-noarch-1.txz
kernel-modules-4.19.44-x86_64-1.txz

Clearly something is not right.
Additional Information:
Attached Files:
Notes
(0003246)
oldpink   
2019-05-17 14:04   
I made a typo, and I can't find a way to edit my original bug report, so I'm writing my correction down here in the note box to explain that I downloaded the source and built version 6.20.00, NOT 6.21.00 to see if the bug went away by using the previous TCSH.
Sorry about my error.
(0003269)
christos   
2019-07-29 13:05   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
93 [file] General minor always 2019-07-17 17:52 2019-07-23 08:51
Reporter: iaeiaeiaeiae@byom.de Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: assigned Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: file incorrectly recognizes -static-pie binaries
Description: file recognizes binaries build with gcc using -static-pie as dynamically linked binaries.
Tags:
Steps To Reproduce: 1. Create a simple hello word C program
2. Compile it using gcc -fPIE -static-pie -o test test.c
3. Run file on the resulting binary

Output:

test: ELF 64-bit LSB pie executable, x86-64, version 1 (GNU/Linux), dynamically linked, BuildID[sha1]=4594afb38f3f60aaad10d08ab519fcaeae55ee70, for GNU/Linux 3.2.0, not stripped

It should actually be reported as statically linked, check with ldd:

$ ldd test
    statically linked

Additional Information:
Attached Files: testbin (806,560 bytes) 2019-07-22 18:29
https://bugs.astron.com/file_download.php?file_id=64&type=bug
Notes
(0003260)
christos   
2019-07-21 09:05   
I can't reproduce this

[5:04am] 10020>cc -static -fPIE -pie hello.c -o hello
[5:04am] 10021>./file -m ../magic/magic.mgc ./hello
./hello: ELF 64-bit LSB executable, x86-64, version 1 (GNU/Linux), statically linked, for GNU/Linux 2.6.32, BuildID[sha1]=f864bee36ab81bd40145389b987e8fe6b6d92696, not stripped
[5:04am] 10022>./file --version
file-5.37
magic file from /usr/local/share/misc/magic
(0003266)
iaeiaeiaeiae@byom.de   
2019-07-22 18:29   
"-static -pie" and "-static-pie" are not the same thing. You need a relatively recent gcc for the latter https://gcc.gnu.org/viewcvs/gcc?view=revision&revision=252034

I used gcc (GCC) 9.1.0.
(0003267)
christos   
2019-07-22 20:43   
I don't have an environment like that available. Can you just attach a binary?
(0003268)
iaeiaeiaeiae@byom.de   
2019-07-23 08:51   
The previous comment contained a binary.

https://bugs.astron.com/file_download.php?file_id=64&type=bug

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
68 [file] General feature have not tried 2019-02-24 16:23 2019-07-21 18:31
Reporter: valoq Platform:  
Assigned To: OS:  
Priority: normal OS Version:  
Status: new Product Version:  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Native decompression formats
Description: Note: This is a copy of the original issue (https://bugs.astron.com/view.php?id=3) without the spam.


Currently file uses external applications to decompress certain file formats before analysing them.
This prevents effective sandboxing via seccomp.

This bug is to collect information and keep track of the progress of implementing all compression formats using libraries

Currently we have the folloging native decompression functions:
uncompressgzipped
uncompresszlib


The following external decompression tools are currently used and need to be implemented using their respective libraries:

gzip
uncompress
bzip2
lzip
xz
lrzip
lz4
zstd


Additional information:

most of the necessary source code can be found here:
https://nxr.netbsd.org/search?q=&project=src&defs=&refs=&path=usr.bin%2Fgzip&hist=
(thanks christos)
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003223)
valoq   
2019-02-24 16:27   
@christos:
Do you want all compression to be handled within compress.c (using only this one file) or can we use additional files for each compression algorithm?

Also, it seems I cannot close my own issues, so if possible please close the old one: https://bugs.astron.com/view.php?id=3
(0003224)
christos   
2019-02-24 18:09   
I think each compression scheme can come in its own file and this way we can probably use an adapter so we don't have to modify all sources.
(0003226)
valoq   
2019-02-24 22:18   
After taking a look at the bsd implementations, I think we can at least use the xz (unxz.c) decompression and the bzip (unbzip2.c) decompression code.
                                                                                                                                                                                                                
One issue remaining is that they use file descriptors for in and output and not strings.
I am not quite sure how we should adapt the code to be used by file.
Also I still don't completely understand some of the decompression handling of file.
Since I am not an expert on C I am rather reluctant to mess with stuff like that, especially since it involves a widely used program like file.

Nonetheless I am looking to push this to get a working implementation of seccomp into file (Debian buster just disabled seccomp as well :( )
(0003228)
valoq   
2019-03-03 14:56   
@christos:
Can you please provide the adapter to allow for easier adoption of third party compression code. That would be a great help.
(0003265)
christos   
2019-07-21 18:31   
bzip, lzma, xz added by Christoph Biedl

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
92 [file] General minor always 2019-07-17 14:46 2019-07-21 09:59
Reporter: ulm Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: file-5.37 falsely identifies text file (PSF license) as audio/x-psf
Description: $ file -i PSF-2.2
PSF-2.2: audio/x-psf; charset=us-ascii
$ head -n1 PSF-2.2
PSF LICENSE AGREEMENT FOR PYTHON 2.2

file-5.36 had correctly identified the same file as "text/plain; charset=us-ascii".

Full file is here: https://gitweb.gentoo.org/repo/gentoo.git/plain/licenses/PSF-2.2
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003264)
christos   
2019-07-21 09:59   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
91 [file] General minor always 2019-07-09 02:20 2019-07-21 09:40
Reporter: avellable Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.33  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: Ruby files are detected properly when require contains '.'
Description: Magic test fails to detect ruby file if there's a '.' in "require" statement. That is a valid statement.
Tags:
Steps To Reproduce: Sample File

1. Create a file application.rb
# application.rb
require './something.rb'

2. Run file on it
$ file application.rb
application.rb: ASCII text

Expected Result:
application.rb: Ruby script text, ASCII text

Actual Result:
application.rb: ASCII text

Additional Information: Solution:

The regex needs to include periods('.') too,

See attached fixed file for reference. When used,

$ file -m new_ruby application.rb
application.rb: Ruby script text, ASCII text

$ diff new_ruby /usr/share/file/magic/ruby
25c25
< 0 regex \^[[:space:]]*require[[:space:]]'[A-Za-z_/\.]+'
---
> 0 regex \^[[:space:]]*require[[:space:]]'[A-Za-z_/]+'
48c48
< 0 regex \^[[:space:]]*require[[:space:]]'[A-Za-z_/\.]+' Ruby script text
---
> 0 regex \^[[:space:]]*require[[:space:]]'[A-Za-z_/]+' Ruby script text
Attached Files: new_ruby (1,812 bytes) 2019-07-09 02:20
https://bugs.astron.com/file_download.php?file_id=63&type=bug
Notes
(0003259)
avellable   
2019-07-09 02:21   
I would be more than happy to create a patch. Is there a document about how to contribute?
(0003263)
christos   
2019-07-21 09:40   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
89 [file] General minor have not tried 2019-06-28 15:58 2019-07-21 09:22
Reporter: vitalyisaev2 Platform: amd64  
Assigned To: christos OS: Linux  
Priority: normal OS Version: Fedora 29  
Status: feedback Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: MIME Types for PKI files
Description: I believe that libmagic should support MIME type detection for PKI files, like ".key", ".crt" and so on:

application/pkcs8 .p8 .key
application/pkcs10 .p10 .csr
application/pkix-cert .cer
application/pkix-crl .crl
application/pkcs7-mime .p7c
application/x-x509-ca-cert .crt .der
application/x-x509-user-cert .crt
application/x-pkcs7-crl .crl
application/x-pem-file .pem
application/x-pkcs12 .p12 .pfx
application/x-pkcs7-certificates .p7b .spc
application/x-pkcs7-certreqresp .p7r

Please see full list here: https://pki-tutorial.readthedocs.io/en/latest/mime.html
Tags:
Steps To Reproduce: Currently some of certificates are determined as "plain/text":

➜ file --mime-type ca.crt
ca.crt: text/plain
➜ file ca.crt
ca.crt: PEM certificate

Additional Information:
Attached Files: ca.crt (1,302 bytes) 2019-06-28 15:58
https://bugs.astron.com/file_download.php?file_id=58&type=bug
Notes
(0003261)
christos   
2019-07-21 09:22   
Can you try writing a patch for this? I am not sure if we can cover most of the cases because we don't know enough about what the files contain (and file does not pay attention to extensions).

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
82 [file] General feature N/A 2019-05-25 23:03 2019-07-04 18:54
Reporter: GerbilSoft Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.37  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: Xbox, Xbox 360, VGM, and SNDH improvements
Description: This is a small patch set with the following improvements:

Audio:
- VGM: Added YMZ284 and YMZ294 variants for AY-3-8910.
- SNDH: Added a check for ICE-compressed files.

Xbox:
- Added MIME types and file extensions for XBE and XEX files.
- XEX: Display the 32-bit media ID.
- XEX: Support XEX1 format. (early devkits)
- Added Xbox 360 packages. (from Xbox Live and/or system updates)
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: file.2019-05-25.19-00.tar.gz (3,282 bytes) 2019-05-25 23:03
https://bugs.astron.com/file_download.php?file_id=55&type=bug
Notes
(0003248)
christos   
2019-05-27 01:35   
Added, thanks.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
84 [file] General minor have not tried 2019-06-03 11:35 2019-06-28 15:48
Reporter: vitalyisaev2 Platform: amd64  
Assigned To: christos OS: Linux  
Priority: normal OS Version: Fedora 29  
Status: assigned Product Version: 5.36  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Wrong mime-type for audio wma file
Description: Hello, could you please check this audio file. It's defined as `video/x-ms-asf`, though it contains only music.

$ file Amy\&Amethyst.wma --mime-type
Amy&Amethyst.wma: video/x-ms-asf
$ file --version
file-5.36
magic file from /etc/magic:/usr/share/misc/magic
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: Amy&Amethyst.wma (140,547 bytes) 2019-06-03 11:35
https://bugs.astron.com/file_download.php?file_id=57&type=bug
Notes
(0003249)
vitalyisaev2   
2019-06-03 12:17   
Expected: audio/x-ms-wma
(0003252)
christos   
2019-06-08 22:41   
ASF is a container format that can contain various media files such as WMA (https://en.wikipedia.org/wiki/Advanced_Systems_Format)
file(1) does not know how to look inside (yet)
(0003257)
vitalyisaev2   
2019-06-28 15:48   
If I find some who is aware of video streaming / codec, I will try to ask, how they detect what's inside ASF.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
86 [file] General minor always 2019-06-09 13:00 2019-06-16 00:16
Reporter: Mababa Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version: 5.36  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: wrong type reported for text files beginning with the characters "BIK"
Description: Any text file where the first three characters are "BIK" are reported as "Bink Video". The more text that follows these initial characters, the more bogus information "file" seems to report.

$ echo BIK hello | file -
/dev/stdin: Bink Video rev.h, 0 audio track
$ echo BIKING to work | file -
/dev/stdin: Bink Video rev.t, 1870078063 frames, 0 audio track
$ echo BIKes have more fun when they sleep | file -
/dev/stdin: Bink Video rev.e, 1852139639x1701344288, 1830839670 frames at rate 175138149/1819484281, 0 audio track
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003255)
christos   
2019-06-16 00:16   
I made it a bit stronger.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
87 [file] General feature N/A 2019-06-12 17:56 2019-06-16 00:08
Reporter: dbrezack Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version:  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Support for Flattened Device Tree files (fdt)
Description: I think it would be helpful if the file command supported Flattened Device Tree files (fdt).

The file magic is "d0 0d fe ed"

These resources may be helpful
https://wiki.freebsd.org/FlattenedDeviceTree
https://github.com/superna9999/pyfdt

Thanks
Data Brezack
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003254)
christos   
2019-06-16 00:08   
You mean dtb and it already does:

sun50i-h5-nanopi-neo-plus2.dtb: Device Tree Blob version 17, size=25978, boot CPU=0, string block size=1870, DT structure block size=23028

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
83 [file] General minor always 2019-05-30 20:35 2019-06-08 22:23
Reporter: j2j Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version: 5.37  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Too many false hits "(Lepton " by Magdir/measure
Description: Hello,

when i run file command version 5.37 and some earlier versions on many
files with -k option i often get also misidentification messages
starting with "(Lepton 3.x)" or "(Lepton 2.x)". See appended output
fileLepton.txt.

When looking inside sources i see that such messages are triggered by
magic lines inside Magdir/measure. These magic lines should identify
DIY-Thermocam raw data files.

Apparently such file have no real magic patterns. So test for values in
some range is done by lines like
     9608 ubyte <19
     >9 ubyte <2

But these test lines are too generic or not precise. These tests are also
matched by ISO 9660 CD-ROM images and many other file types.
So more test lines are needed.

Unfortunately no contributor name or web site is mentioned. So i have no
information about that file format to fix weak magic lines.
Tags: magic
Steps To Reproduce:
Additional Information:
Attached Files: fileLepton.txt (34,203 bytes) 2019-05-30 20:35
https://bugs.astron.com/file_download.php?file_id=56&type=bug
Notes
(0003251)
christos   
2019-06-08 22:23   
Do you have a file I can check against? It does try 5 different byte values in the checker...

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
85 [file] General minor have not tried 2019-06-05 11:09 2019-06-08 22:18
Reporter: vitalyisaev2 Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.36  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: Support CSV detection
Description: It would be nice if we could distinguish csv files from other ASCII text files. It may be tricky, but perhaps we can rely on the number of commas and other widely used delimiters. If the amount of delimiters is same for the first N lines, it's like to be a csv file.

This tread may be also useful: https://www.unix.com/shell-programming-and-scripting/25477-how-validate-csv-file.html

Kind regards,
Vitaly
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003250)
christos   
2019-06-08 22:18   
Added...

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
79 [file] General feature N/A 2019-05-10 03:52 2019-05-27 01:28
Reporter: cisba Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.38  
    Target Version:  
Summary: [PATCH] add OpenTimestamps related magic entries
Description: https://opentimestamps.org/
https://en.wikipedia.org/wiki/OpenTimestamps
Tags: magic
Steps To Reproduce: 1. create a file .ots using the web interface at https://opentimestamps.org/
2. download the attacched file "opentimestamps"
3. execute "file -m opentimestamps <your-ots-file-name>.ots"
Additional Information:
Attached Files: opentimestamps (647 bytes) 2019-05-10 03:52
https://bugs.astron.com/file_download.php?file_id=53&type=bug
Notes
(0003247)
christos   
2019-05-27 01:28   
Added, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
74 [tcsh] General major always 2019-03-25 09:51 2019-05-08 18:06
Reporter: bitstreamout Platform:  
Assigned To: christos OS: Linux  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 6.21.00  
    Target Version:  
Summary: Bug in tcsh postcmd alias handling
Description: The postcmd alias destroys boolean handling withing loops
Tags:
Steps To Reproduce: simple script to test this on tcsh 6.18.0 as well as on 6.20.0

 # !/bin/tcsh
 alias postcmd false

 set counter=5

 while ($counter > 0)
   @ counter--
   echo $counter
   sleep 1
 end
 exit 0

... this should break for counter getting 0 but it does not
Additional Information:
Attached Files: debug (1,613 bytes) 2019-04-05 09:16
https://bugs.astron.com/file_download.php?file_id=47&type=bug
tcsh-postcmd.patch (3,043 bytes) 2019-04-08 11:38
https://bugs.astron.com/file_download.php?file_id=48&type=bug
tcsh-6.20.00-postcmd.patch (1,421 bytes) 2019-04-09 07:25
https://bugs.astron.com/file_download.php?file_id=49&type=bug
Notes
(0003232)
bitstreamout   
2019-04-05 09:16   
Hmmm .. .after some debugging it looks like the function dowhile() of sh.func.c is executed repeated if no postcmd alias is set whereas if one is set the dowhile() is reached only once and does never finish
(0003233)
bitstreamout   
2019-04-05 12:56   
The bug is also in tcsh-6.16.00
(0003238)
bitstreamout   
2019-04-08 11:38   
Looks like aliasrun() does destroy the current parse tree .... at least this patch make the test case work
(0003239)
bitstreamout   
2019-04-09 07:25   
This one avoids breaking the testsuit
(0003245)
christos   
2019-05-08 18:06   
Thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
78 [file] General minor have not tried 2019-05-07 11:32 2019-05-08 18:02
Reporter: jpcima Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.37  
    Target Version:  
Summary: [PATCH] add BambooTracker instrument, and version number detection
Description: Patch: https://github.com/file/file/compare/master...jpcima:bamboo-tracker.diff

Adds support for BTI files (instruments).
Extracts the version number from uint32 BCD field.
-> specification at https://github.com/rerrahkr/BambooTracker/tree/master/specs
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: Echo Piano Bell.bti (106 bytes) 2019-05-07 11:32
https://bugs.astron.com/file_download.php?file_id=52&type=bug
Notes
(0003244)
christos   
2019-05-08 18:02   
thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
77 [file] General minor always 2019-04-29 13:35 2019-05-06 21:24
Reporter: yarikoptic Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version: 5.35  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: -k, --keep-going does not list other hits - the other one might come out empty
Description: Detected while trying to workaround recently added detection of .json as application/json and not as text/plain. I thought that I would obtain both new application/json and text/plain if I use --keep-going . But the 2nd entry comes out to be blank.

As you can see below it is not happening for some other files, and is not unique to json
Tags:
Steps To Reproduce: /tmp > file --version
file-5.35
magic file from /etc/magic:/usr/share/misc/magic

/tmp > echo '{"a": 1}' >| file.json

/tmp > file --mime-type file.json
file.json: application/json

/tmp > file --mime-type -k file.json
file.json: application/json\012- \012-

/tmp > file --mime-type -k /usr/bin/* | head
/usr/bin/[: application/x-pie-executable\012- application/octet-stream
/usr/bin/0alias: application/x-pie-executable\012- application/octet-stream
/usr/bin/0desktop: application/x-pie-executable\012- application/octet-stream
/usr/bin/0install: application/x-pie-executable\012- application/octet-stream
/usr/bin/0launch: application/x-pie-executable\012- application/octet-stream
/usr/bin/0store: application/x-pie-executable\012- application/octet-stream
/usr/bin/0store-secure-add: application/x-pie-executable\012- application/octet-stream
/usr/bin/2to3: text/x-python\012-
/usr/bin/2to3-2.7: text/x-python\012-
/usr/bin/2to3-3.4: text/x-python\012-


/tmp > file --mime-type -k /usr/bin/* > /tmp/usr-bin-mime-types
/tmp > grep '\012- .*\012' /tmp/usr-bin-mime-types | head
/usr/bin/ack: text/x-perl\012- text/x-c\012-
/usr/bin/aclocal-1.16: text/x-perl\012- \012-
/usr/bin/afmtodit: text/x-perl\012- \012-
/usr/bin/apt-file: text/x-perl\012- \012-
/usr/bin/apt-rdepends: text/x-perl\012- \012-
/usr/bin/apxs: text/x-perl\012- \012-
/usr/bin/aspell-import: text/x-perl\012- \012-
/usr/bin/autoheader: text/x-perl\012- \012-
/usr/bin/autom4te: text/x-perl\012- \012-
/usr/bin/automake-1.16: text/x-perl\012- \012-
Additional Information:
Attached Files:
Notes
(0003243)
christos   
2019-05-06 21:24   
Fixed on HEAD.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
73 [file] General minor always 2019-03-20 09:21 2019-04-09 18:34
Reporter: enkeli Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.36  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.37  
    Target Version:  
Summary: Reports Zip archive data for data with only one PK central dir signature
Description: File reports for the attached file "Zip archive data".

$ file data-not-zip
data-not-zip: Zip archive data

The only ZIP-like thing it contains is 0x06054b50 and it does not seem sufficient to me to mark it as ZIP.

File hexdump:
00000000: 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000010: 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000020: 0000 0000 0000 0000 0000 0000 0000 0000 ................

file v. 5.30 reports "data" which seems more precise to me
00000030: 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000040: 0000 0000 0000 0000 0050 4b05 0600 0000 .........PK.....
00000050: 0000 0000 0000 0000 0000 0000 0000 000a ................
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: data-not-zip (408 bytes) 2019-03-20 09:21
https://bugs.astron.com/file_download.php?file_id=46&type=bug
data-not-zip-2 (102 bytes) 2019-04-09 09:32
https://bugs.astron.com/file_download.php?file_id=51&type=bug
Notes
(0003235)
christos   
2019-04-07 18:23   
Can't reproduce it:

[2:20pm] 2551>xxd -r ../data-not-zip >! ../data
[2:20pm] 2552>src/file -m magic/magic.mgc data
data: data
[2:20pm] 2553>hexdump -C data
00000000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000040 00 00 00 00 00 00 00 00 00 50 4b 05 06 00 00 00 |.........PK.....|
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a |................|
00000060
[2:20pm] 2554>src/file -v
file-5.36
magic file from /usr/local/share/misc/magic
(0003240)
enkeli   
2019-04-09 09:32   
Sorry, I've probably uploaded wrong file.

This one is definitely reported as ZIP (close this issue if I'm wrong). I'd expect "data" or something other than ZIP.

$ sha256sum data-not-zip
a95a3e433275508dfbcfbea7ba83ff6b69d582be25dd0f3a87e2e9739b735d34 data-not-zip
$ file --version
file-5.36
magic file from /usr/share/file/misc/magic
$ file data-not-zip
data-not-zip: Zip archive data
(0003242)
christos   
2019-04-09 18:34   
Fixed, thanks

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
76 [file] General minor always 2019-04-09 09:18 2019-04-09 18:29
Reporter: mohd-akram Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.36  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.37  
    Target Version:  
Summary: [PATCH] Fix Python 3.7 byte-compiled detection
Description: Should be checking 0x420d0d0a not 0x3e0d0d0a. See https://github.com/python/cpython/blob/3.7/Lib/importlib/_bootstrap_external.py#L259.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: patch-python37.diff (466 bytes) 2019-04-09 09:18
https://bugs.astron.com/file_download.php?file_id=50&type=bug
Notes
(0003241)
christos   
2019-04-09 18:29   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
71 [file] General major always 2019-03-12 13:10 2019-04-07 18:28
Reporter: edurdo100 Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version: 5.33  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Problem with encoding of file larger than 262145 characterers
Description: Whe run command file with the next options:

file -bi $fichero
In case than file larger than 262145 encoding always appear us-ascii, when the file has the encoding iso-8859-1
Tags:
Steps To Reproduce: Create a file encoding like iso-8859-1 and more than 262145 characterers
Run command:
file -bi $fichero
Additional Information:
Attached Files:
Notes
(0003237)
christos   
2019-04-07 18:28   
Can you attach an example? Does the behavior change when you use -P bytes to a large number?

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
72 [file] General minor always 2019-03-20 01:54 2019-04-07 18:26
Reporter: tduffy Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.36  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.37  
    Target Version:  
Summary: magic/Magdir/apple reports as data (instead of ASCII)
Description: $ file magic/Magdir/apple
magic/Magdir/apple: data

Looks like there are some bogus bytes on line 91:

#:apple pdosp^Zøÿ
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003236)
christos   
2019-04-07 18:26   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
75 [file] General minor always 2019-03-31 19:16 2019-04-07 18:05
Reporter: wylda Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.36  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.37  
    Target Version:  
Summary: file-5.36: configure --enable-zlib actually disables Zlib
Description: If "--enable-zlib" is explicitly given for configure, then "ZLIBSUPPORT" won't be set to 1, even if in my case I have:
enable_zlib=yes
ac_cv_header_zlib_h=yes
ac_cv_lib_z_gzopen=yes
I'm not a programmer, but i guess it is because of "elif" instead of "if"???

---snip---
if test "$enable_zlib" = "yes"; then
  if test "$ac_cv_header_zlib_h$ac_cv_lib_z_gzopen" != "yesyes"; then
    as_fn_error $? "zlib support requested but not found" "$LINENO" 5
  fi
elif test "$ac_cv_header_zlib_h$ac_cv_lib_z_gzopen" = "yesyes"; then
  $as_echo "#define ZLIBSUPPORT 1" >>confdefs.h
fi
---snip---
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003234)
christos   
2019-04-07 18:05   
Fixed, thanks.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
70 [file] General feature always 2019-03-05 17:33 2019-03-07 17:22
Reporter: v3l0c1r4pt0r Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.37  
    Target Version:  
Summary: [PATCH] Add AIX backup and package format detection
Description: I have noticed that AIX default package format is not identified by file ("data" returned). I am enclosing the patch.

I've managed to find example package with first signature variant (could be downloaded from IBM after signing up). Unfortunately I didn't find any example for the second form (confirmed only with Wikipedia and original AIX /etc/magic).
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: 0001-Add-AIX-package-and-backup-file-magic.patch (766 bytes) 2019-03-05 17:33
https://bugs.astron.com/file_download.php?file_id=45&type=bug
Notes
(0003229)
christos   
2019-03-07 13:22   
both magic entries have the same description, is that correct?
(0003230)
v3l0c1r4pt0r   
2019-03-07 14:41   
Yes, that's correct. I haven't seen any explanation of what is the difference.
(0003231)
christos   
2019-03-07 17:22   
Committed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
69 [file] General major always 2019-02-27 16:04 2019-03-02 01:08
Reporter: vinc17 Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.37  
    Target Version:  
Summary: mistakes Xorg.0.log file as JSON data
Description: file mistakes Xorg.0.log file as JSON data (which breaks viewing with "less" + LESSOPEN).
Tags:
Steps To Reproduce: Example on the first 5 lines:

[105215.998]
X.Org X Server 1.20.3
X Protocol Version 11, Revision 0
[105215.998] Build Operating System: Linux 4.9.0-8-amd64 x86_64 Debian
[105215.998] Current Operating System: Linux cventin 4.19.0-3-amd64 0000001 SMP Debian 4.19.20-1 (2019-02-11) x86_64

$ file Xorg.0.log
Xorg.0.log: JSON data
Additional Information: Also reported on the Debian BTS: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922874
Attached Files:
Notes
(0003227)
christos   
2019-03-02 01:08   
Changed to be stricter.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
67 [file] General minor have not tried 2019-02-22 14:15 2019-02-23 03:10
Reporter: valoq Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Fix bugtracker links on website
Description: The official file website https://www.darwinsys.com/file/ have several broken links that point to gw.com which is not available.

The bugtracker link points to http://bugs.gw.com/ which is also dead

Please fix the linksto point to this bugtracker instead.
This bugtracker is pretty hard to find otherwise.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003222)
christos   
2019-02-23 03:10   
Ian Darwin fixed it.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
66 [file] General feature N/A 2019-02-20 23:47 2019-02-23 01:17
Reporter: GerbilSoft Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.37  
    Target Version:  
Summary: Another batch of patches for various game console formats
Description: This patchset adds the following formats:
- Scaleform video (basic identification only)
- PowerVR 3.0 textures
- Portable Sound Format (PSF)
- SAP (Atari 8-bit audio)
- Nintendo audio formats: BRSTM, BCSTM, BFSTM, BCWAV
- Xbox XPR0 textures
- Xbox 360 executables (XEX)

Other changes:
- ADX: Added a MIME type; prevent conflicts with Targa images; fix AHX and add AHX (Dreamcast).
- GameCube, Wii: Added unofficial MIME types.
- Xbox executables (XBE): Show the game title and title ID.
- Khronos KTX: Correctly escape the '^' for khronos-ktx-endian-header.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: file.2019-02-20.18-40.tar.gz (9,531 bytes) 2019-02-20 23:47
https://bugs.astron.com/file_download.php?file_id=44&type=bug
Notes
(0003221)
christos   
2019-02-23 01:17   
Committed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
61 [file] General minor always 2019-02-15 04:34 2019-02-19 20:35
Reporter: tmc Platform:  
Assigned To: christos OS: GNU/Linux  
Priority: normal OS Version:  
Status: feedback Product Version: 5.35  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Line endings misdetected for UTF16 files
Description: file misidentifies the line endings of little-endian UTF16 files (running on x86_64), while big-endian seems to work fine.
Also it doesn't seem to even try to to identify the line ending of an UTF32 file.

Also, I notice that file can't recognise UTF16/32 files without a BOM, which is a pity.
Tags:
Steps To Reproduce: file misdetects utf16le with CRLF line endings sometimes as CR line endings:

> printf "\xff\xfe\r\0\n\0" |file -
/dev/stdin: Little-endian UTF-16 Unicode text, with CR line terminators

...and sometimes as mixed CR, CRLF line endings:

> printf "\xff\xfe\r\0\n\0\r\0\n\0" |file -
/dev/stdin: Little-endian UTF-16 Unicode text, with CRLF, CR line terminators

Maybe it's skipping over the final \n? This example reinforces that idea:

> printf "\xff\xfe\n\0\r\0" | file -
/dev/stdin: Little-endian UTF-16 Unicode text

utf16be doesn't seem to show this problem:

> printf "\xfe\xff\0\r\0\n" | file -
/dev/stdin: Big-endian UTF-16 Unicode text, with CRLF line terminators

UTF32 line endings not identified:

> printf "\xff\xfe\0\0\r\0\0\0B\0\0\0" | file -
/dev/stdin: Unicode text, UTF-32, little-endian

Additional Information:
Attached Files:
Notes
(0003210)
christos   
2019-02-18 17:04   
Yes, the utf-16 detection had length issues, which have been fixed on HEAD. Now the utf-32 detection is not built-in and it is done in regular magic, this is why it does not get the CR/LF info right. I guess we should move the utf-32 detection to be built-in for consistency.
Here's the latest output:

[11:59am] 2601>cat uni
#!/bin/sh
doit() {
        printf "$1" | ./file -m ../magic//magic.mgc -
}

doit "\xff\xfe\r\0\n\0"
doit "\xff\xfe\r\0\n\0\r\0\n\0"
doit "\xff\xfe\n\0\r\0"
doit "\xfe\xff\0\r\0\n"
doit "\xff\xfe\0\0\r\0\0\0B\0\0\0"
[11:59am] 2602>./uni
/dev/stdin: Little-endian UTF-16 Unicode text, with CRLF line terminators
/dev/stdin: Little-endian UTF-16 Unicode text, with CRLF line terminators
/dev/stdin: Little-endian UTF-16 Unicode text, with CR, LF line terminators
/dev/stdin: Big-endian UTF-16 Unicode text, with CRLF line terminators
/dev/stdin: Unicode text, UTF-32, little-endian
(0003220)
christos   
2019-02-19 20:35   
Should be fixed now:
#!/bin/sh
doit() {
        printf "$1" | ./file -m /dev/null -
}

doit "\xff\xfe\r\0\n\0"
doit "\xff\xfe\r\0\n\0\r\0\n\0"
doit "\xff\xfe\n\0\r\0"
doit "\xfe\xff\0\r\0\n"
doit "\xff\xfe\0\0\r\0\0\0B\0\0\0"
doit "\xff\xfe\0\0\r\0\0\0\n\0\0\0"
doit "\0\0\xfe\xff\0\0\0\r\0\0\0\n"

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
64 [file] General major always 2019-02-18 08:50 2019-02-19 13:21
Reporter: spinpx Platform: x86_64  
Assigned To: christos OS: Debian  
Priority: urgent OS Version: 10  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: ASAN: memcpy-param-overlap
Description: 描述 We build file with `--disable-libseccomp` by clang 4.0.0 and ASAN.
We ran the program with the input we provide without any other arguments.

The bugs exists in file 5.35.

ASAN report:
==1129930==ERROR: AddressSanitizer: memcpy-param-overlap: memory ranges [0x7ffcc4a0f360,0x7ffcc4a10861) and [0x7ffcc4a104f8, 0x7ffcc4a119f9) overlap
    #0 0x4add33 in __asan_memcpy /scratch/llvm/clang-4/xenial/final/llvm.src/projects/compiler-rt/lib/asan/asan_interceptors.cc:453:3
    0000001 0x54f86c in do_core_note /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/readelf.c:755:4
    0000002 0x54d323 in donote /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/readelf.c:1194:7
    0000003 0x54792a in dophn_core /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/readelf.c:398:13
    0000004 0x5451b4 in file_tryelf /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/elfclass.h:43:7
    0000005 0x51f29b in file_buffer /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/funcs.c:305:8
    0000006 0x4f5b5d in file_or_fd /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/magic.c:508:6
    0000007 0x4f5cd6 in magic_file /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/magic.c:397:9
    0000008 0x4f3fd5 in process /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/file.c:546:9
    #9 0x4f1c4b in main /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/file.c:416:9
    0000010 0x7fbb0e64b09a in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2409a)
    0000011 0x41d689 in _start (/mnt/raid/user/chenpeng/FuzzingBench/build/asan/install/bin/file+0x41d689)

Address 0x7ffcc4a0f360 is located in stack of thread T0 at offset 608 in frame
    #0 0x54f33f in do_core_note /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/readelf.c:710

  This frame has 2 object(s):
    [32, 544) 'sbuf'
    [608, 768) 'pi' <== Memory access at offset 608 partially overflows this variable
HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext
      (longjmp and C++ exceptions *are* supported)
Address 0x7ffcc4a104f8 is located in stack of thread T0 at offset 1592 in frame
    #0 0x546f7f in dophn_core /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/readelf.c:346

  This frame has 3 object(s):
    [32, 64) 'ph32'
    [96, 152) 'ph64'
    [192, 8384) 'nbuf' <== Memory access at offset 1592 is inside this variable
HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext
      (longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: memcpy-param-overlap /scratch/llvm/clang-4/xenial/final/llvm.src/projects/compiler-rt/lib/asan/asan_interceptors.cc:453:3 in __asan_memcpy
Tags:
Steps To Reproduce: run:
# file sbo3
Additional Information:
Attached Files: sbo3 (9,351 bytes) 2019-02-18 08:50
https://bugs.astron.com/file_download.php?file_id=42&type=bug
Notes
(0003213)
christos   
2019-02-18 18:00   
I think this is the same as PR/63
(0003217)
spinpx   
2019-02-19 08:12   
CVE-2019-8906
(0003219)
christos   
2019-02-19 13:20   
The comment in the CVE is not correct though, it is not memcpy() that causes the overflow; it is the file_printable() that does not work with a non-NUL-terminated string.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
65 [file] General major always 2019-02-18 08:53 2019-02-19 13:18
Reporter: spinpx Platform: x86_64  
Assigned To: christos OS: Debian  
Priority: urgent OS Version: 10  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: Possible stack corruption
Description: We build file with `--disable-libseccomp` by clang 4.0.0.
We ran the program with the input we provide without any other arguments.

The bugs exists in file 5.35.

Stack:
Program received signal SIGSEGV, Segmentation fault.
"#0 0x000000000043e271 in do_core_note (ms=<optimized out>, nbuf=<optimized out>, type=<optimized out>, swap=<optimized out>, namesz=<optimized out>, descsz=<optimized out>, noff=<optimized out>, doff=<optimized out>, flags=<optimized out>, size=<optimized out>, clazz=<optimized out>) at /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/readelf.c:770",
0000001 donote (ms=<optimized out>, vbuf=<optimized out>, offset=3452, size=<optimized out>, clazz=<optimized out>, swap=<optimized out>, align=<optimized out>, flags=<optimized out>, notecount=<optimized out>, fd=<optimized out>, ph_off=<optimized out>, ph_num=<optimized out>, fsize=<optimized out>) at /mnt/raid/user/chenpeng/FuzzingBench/file/file/src/readelf.c:1194
0000002 0x0000000400001000 in ?? ()
0000003 0x080490a4000000a4 in ?? ()
0000004 0x00bbeaebd9000000 in ?? ()
0000005 0x00200001b8000000 in ?? ()
0000006 0x0d1263aa87c56e01 in ?? ()
0000007 0x2e8ca4eef0bf9884 in ?? ()
0000008 0xf8be17bd0299a906 in ?? ()
#9 0x4fcacce3342026ed in ?? ()
0000010 0x0000000100000012 in ?? ()
0000011 0x4274654e00000001 in ?? ()
0000012 0xcc45524f432d4453 in ?? ()
0000013 0x00008990ba88a2ca in ?? ()
0000014 0x80e700000004b800 in ?? ()
0000015 0x00000000002058eb in ?? ()
0000016 0x0000000000000000 in ?? ()

We run exploitable:
Description: Possible stack corruption
Short description: PossibleStackCorruption (7/22)
Hash: 457b692b06cd893f7646681b5874c47e.57ada0a7199ae15ca6cc5f54cdbeaa99
Exploitability Classification: EXPLOITABLE
Explanation: GDB generated an error while unwinding the stack and/or the stack contained return addresses that were not mapped in the inferior's process address space and/or the stack pointer is pointing to a location outside the default stack region. These conditions likely indicate stack corruption, which is generally considered exploitable.
Other tags: AccessViolation (21/22)
Tags:
Steps To Reproduce: run:
# file stack_corruption1
Additional Information:
Attached Files: stack_corruption1 (10,498 bytes) 2019-02-18 08:53
https://bugs.astron.com/file_download.php?file_id=43&type=bug
Notes
(0003214)
christos   
2019-02-18 18:07   
I think this is the same as the other note ones. Can you please try to see if the fix for PR/63 fixed it?
(0003218)
spinpx   
2019-02-19 08:16   
CVE-2019-8907
I verified it with newest git version. It fixed now!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
63 [file] General major always 2019-02-18 08:46 2019-02-19 13:17
Reporter: spinpx Platform: x86_64  
Assigned To: christos OS: Debian  
Priority: urgent OS Version: 10  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: Stack buffer overflow 2
Description: We build file with `--disable-libseccomp` by clang 4.0.0 and ASAN.
We ran the program with the input we provide without any other arguments.

The bugs exists in file 5.35 and the newest git version commit 5b9408cbbd401c13873bf944d3085785547e9915 .

==1104585==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffd001ebb00 at pc 0x00000052240b bp 0x7ffd001eb6c0 sp 0x7ffd001eb6b8
READ of size 1 at 0x7ffd001ebb00 thread T0
    #0 0x52240a in file_printable /home/chenpeng/data/FuzzingBench/file/file-git/src/funcs.c:631:57
    0000001 0x550158 in do_core_note /home/chenpeng/data/FuzzingBench/file/file-git/src/readelf.c:762:8
    0000002 0x54db93 in donote /home/chenpeng/data/FuzzingBench/file/file-git/src/readelf.c:1197:7
    0000003 0x549826 in dophn_exec /home/chenpeng/data/FuzzingBench/file/file-git/src/readelf.c:1689:14
    0000004 0x545e2d in file_tryelf /home/chenpeng/data/FuzzingBench/file/file-git/src/elfclass.h:58:7
    0000005 0x51f29b in file_buffer /home/chenpeng/data/FuzzingBench/file/file-git/src/funcs.c:305:8
    0000006 0x4f5b5d in file_or_fd /home/chenpeng/data/FuzzingBench/file/file-git/src/magic.c:508:6
    0000007 0x4f5cd6 in magic_file /home/chenpeng/data/FuzzingBench/file/file-git/src/magic.c:397:9
    0000008 0x4f3fd5 in process /home/chenpeng/data/FuzzingBench/file/file-git/src/file.c:546:9
    #9 0x4f1c4b in main /home/chenpeng/data/FuzzingBench/file/file-git/src/file.c:416:9
    0000010 0x7fe9e3d9f09a in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2409a)
    0000011 0x41d689 in _start (/mnt/raid/user/chenpeng/FuzzingBench/build/asan/install/bin/file+0x41d689)

Address 0x7ffd001ebb00 is located in stack of thread T0 at offset 768 in frame
    #0 0x54fbaf in do_core_note /home/chenpeng/data/FuzzingBench/file/file-git/src/readelf.c:713

  This frame has 2 object(s):
    [32, 544) 'sbuf'
    [608, 768) 'pi' <== Memory access at offset 768 overflows this variable
HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext
      (longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-buffer-overflow /home/chenpeng/data/FuzzingBench/file/file-git/src/funcs.c:631:57 in file_printable
Shadow bytes around the buggy address:
  0x100020035710: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x100020035720: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x100020035730: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x100020035740: 00 00 00 00 f2 f2 f2 f2 f2 f2 f2 f2 00 00 00 00
  0x100020035750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x100020035760:[f3]f3 f3 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00
  0x100020035770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x100020035780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x100020035790: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x1000200357a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x1000200357b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable: 00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone: fa
  Freed heap region: fd
  Stack left redzone: f1
  Stack mid redzone: f2
  Stack right redzone: f3
  Stack after return: f5
  Stack use after scope: f8
  Global redzone: f9
  Global init order: f6
  Poisoned by user: f7
  Container overflow: fc
  Array cookie: ac
  Intra object redzone: bb
  ASan internal: fe
  Left alloca redzone: ca
  Right alloca redzone: cb
==1104585==ABORTING
Tags:
Steps To Reproduce: run:
# file sbo2
Additional Information:
Attached Files: sbo2 (1,192 bytes) 2019-02-18 08:46
https://bugs.astron.com/file_download.php?file_id=41&type=bug
Notes
(0003212)
christos   
2019-02-18 17:47   
Thanks, should be fixed with:

/p/file/cvsroot/file/src/file.h,v <-- file.h
new revision: 1.202; previous revision: 1.201
/p/file/cvsroot/file/src/funcs.c,v <-- funcs.c
new revision: 1.101; previous revision: 1.100
/p/file/cvsroot/file/src/readelf.c,v <-- readelf.c
new revision: 1.161; previous revision: 1.160
/p/file/cvsroot/file/src/softmagic.c,v <-- softmagic.c
new revision: 1.277; previous revision: 1.276
(0003216)
spinpx   
2019-02-19 08:12   
CVE-2019-8905

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
62 [file] General major always 2019-02-18 08:42 2019-02-19 13:16
Reporter: spinpx Platform: Intel  
Assigned To: christos OS: Debian  
Priority: urgent OS Version: 10  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: Stack buffer overflow
Description: We build file with `--disable-libseccomp` by clang 4.0.0 and ASAN.
We ran the program with the input we provide without any other arguments.

The bugs exists in file 5.35 and the newest git version commit 5b9408cbbd401c13873bf944d3085785547e9915 .

ASAN report:
==990598==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffea9a966a0 at pc 0x000000441461 bp 0x7ffea9a931d0 sp 0x7ffea9a92940
READ of size 8167 at 0x7ffea9a966a0 thread T0
    #0 0x441460 in printf_common(void*, char const*, __va_list_tag*) /scratch/llvm/clang-4/xenial/final/llvm.src/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_common_interceptors_format.inc:544:9
    0000001 0x442140 in vasprintf /scratch/llvm/clang-4/xenial/final/llvm.src/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_common_interceptors.inc:1412:1
    0000002 0x51d538 in file_vprintf /home/chenpeng/data/FuzzingBench/file/file-git/src/funcs.c:62:8
    0000003 0x51da90 in file_printf /home/chenpeng/data/FuzzingBench/file/file-git/src/funcs.c:88:7
    0000004 0x54f602 in do_bid_note /home/chenpeng/data/FuzzingBench/file/file-git/src/readelf.c:569:7
    0000005 0x54d6f9 in donote /home/chenpeng/data/FuzzingBench/file/file-git/src/readelf.c:1185:7
    0000006 0x54814a in dophn_core /home/chenpeng/data/FuzzingBench/file/file-git/src/readelf.c:401:13
    0000007 0x5459d4 in file_tryelf /home/chenpeng/data/FuzzingBench/file/file-git/src/elfclass.h:43:7
    0000008 0x51f29b in file_buffer /home/chenpeng/data/FuzzingBench/file/file-git/src/funcs.c:305:8
    #9 0x4f5b5d in file_or_fd /home/chenpeng/data/FuzzingBench/file/file-git/src/magic.c:508:6
    0000010 0x4f5cd6 in magic_file /home/chenpeng/data/FuzzingBench/file/file-git/src/magic.c:397:9
    0000011 0x4f3fd5 in process /home/chenpeng/data/FuzzingBench/file/file-git/src/file.c:546:9
    0000012 0x4f1c4b in main /home/chenpeng/data/FuzzingBench/file/file-git/src/file.c:416:9
    0000013 0x7fc89d20c09a in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2409a)
    0000014 0x41d689 in _start (/mnt/raid/user/chenpeng/FuzzingBench/build/asan/install/bin/file+0x41d689)

Address 0x7ffea9a966a0 is located in stack of thread T0 at offset 8384 in frame
    #0 0x54779f in dophn_core /home/chenpeng/data/FuzzingBench/file/file-git/src/readelf.c:349

  This frame has 3 object(s):
    [32, 64) 'ph32'
    [96, 152) 'ph64'
    [192, 8384) 'nbuf' <== Memory access at offset 8384 overflows this variable
HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext
      (longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-buffer-overflow /scratch/llvm/clang-4/xenial/final/llvm.src/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_common_interceptors_format.inc:544:9 in printf_common(void*, char const*, __va_li
st_tag*)
Shadow bytes around the buggy address:
  0x10005534ac80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x10005534ac90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x10005534aca0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x10005534acb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x10005534acc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x10005534acd0: 00 00 00 00[f3]f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3
  0x10005534ace0: f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3
  0x10005534acf0: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
  0x10005534ad00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x10005534ad10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x10005534ad20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable: 00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone: fa
  Freed heap region: fd
  Stack left redzone: f1
  Stack mid redzone: f2
  Stack right redzone: f3
  Stack after return: f5
  Stack use after scope: f8
  Global redzone: f9
  Global init order: f6
  Poisoned by user: f7
  Container overflow: fc
  Array cookie: ac
  Intra object redzone: bb
  ASan internal: fe
  Left alloca redzone: ca
  Right alloca redzone: cb
==990598==ABORTING

Tags:
Steps To Reproduce: run:
# file sbo1
Additional Information:
Attached Files: sbo1 (8,714 bytes) 2019-02-18 08:42
https://bugs.astron.com/file_download.php?file_id=40&type=bug
Notes
(0003211)
christos   
2019-02-18 17:32   
Should be fixed in
/p/file/cvsroot/file/src/readelf.c,v <-- readelf.c
new revision: 1.160; previous revision: 1.159

Thanks!
(0003215)
spinpx   
2019-02-19 08:11   
CVE-2019-8904

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
60 [file] General minor have not tried 2019-02-07 06:20 2019-02-18 16:45
Reporter: silvioprog Platform: Linux  
Assigned To: christos OS: Ubuntu  
Priority: normal OS Version: 18.04  
Status: feedback Product Version: 5.35  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Build fails on mingw-w64 (even installing third party required packages)
Description: Hello,

I've tried to compile the "libmagic" (static only) for Win32 via cross-compile using the MinGW-w64 available on Ubuntu 18.04, but the build fails at configure time, even installing the library "libgnurx" from a unofficial PPA.
Tags: magic
Steps To Reproduce: Below the first steps I've tried:

$ wget -c ftp://ftp.astron.com/pub/file/file-5.35.tar.gz
$ tar -zxvf file-5.35.tar.gz
$ cd file-5.35/
$ ./configure --host=i686-w64-mingw32 --enable-static=yes --enable-shared=no
[snip]
...
checking for ctime_r... no
checking for asctime_r... no
checking for localtime_r... no
checking for gmtime_r... no
checking for pread... no
checking for strcasestr... no
checking for fmtcheck... no
checking for dprintf... no
checking for gzopen in -lz... no
checking for seccomp_init in -lseccomp... no
checking for regexec in -lgnurx... no
configure: error: libgnurx is required to build file(1) with MinGW
Additional Information: I've tried to solve the error "libgnurx is required to build file(1) with MinGW" installing the "gnurx" from a third party PPA (since it is not an official distribution, I really would like to not use it), but, just for testing, let's go to install it anyway:

sudo add-apt-repository ppa:tobydox/mingw-w64
sudo apt update
sudo apt install libgnurx-mingw-w64


Now the "configure" step get finished, but when I try to build the library:

make
[snip]
...
  CC       file.o
  CC       seccomp.o
  CCLD     file.exe
make[3]: Leaving directory '~/file-5.35/src'
make[2]: Leaving directory '~/file-5.35/src'
Making all in magic
make[2]: Entering directory '~/file-5.35/magic'
/bin/bash: line 3: file.exe: command not found
Cannot use the installed version of file () to
cross-compile file 5.35
Please install file 5.35 locally first
Makefile:808: recipe for target 'magic.mgc' failed
make[2]: *** [magic.mgc] Error 1
make[2]: Leaving directory '~/file-5.35/magic'
Makefile:399: recipe for target 'all-recursive' failed
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory '~/file-5.35'
Makefile:331: recipe for target 'all' failed
make: *** [all] Error 2
Attached Files: config.log.tar.gz (15,579 bytes) 2019-02-07 06:23
https://bugs.astron.com/file_download.php?file_id=39&type=bug
Notes
(0003207)
silvioprog   
2019-02-07 06:23   
Full build log in attachment.
(0003208)
christos   
2019-02-18 16:44   
Looks like the file program "file.exe" built correctly and now it is trying to compile the magic file but it cannot execute it. It then tries to execute the installed copy and complains (correctly) because that will not work. Perhaps edit the Makefile and make the command point directly to the locally built file.exe and try again?

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
57 [file] General minor always 2018-12-27 10:11 2019-01-18 15:39
Reporter: alfredwu Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: docx files determined as zip file type.
Description: /usr/local/file-5.35/bin/file 62b587d18bae01c362c227bf45d7a08d.docx
62b587d18bae01c362c227bf45d7a08d.docx: Zip archive data, at least v1.0 to extract
Tags:
Steps To Reproduce: /usr/local/file-5.35/bin/file 62b587d18bae01c362c227bf45d7a08d.docx
62b587d18bae01c362c227bf45d7a08d.docx: Zip archive data, at least v1.0 to extract
Additional Information:
Attached Files: 62b587d18bae01c362c227bf45d7a08d.docx (18,871 bytes) 2018-12-27 10:11
https://bugs.astron.com/file_download.php?file_id=37&type=bug
Notes
(0003206)
christos   
2019-01-18 15:39   
Fixed, thanks!
/p/file/cvsroot/file/magic/Magdir/msooxml,v <-- msooxml
new revision: 1.11; previous revision: 1.10

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
55 [file] General minor have not tried 2018-12-17 11:37 2019-01-18 15:26
Reporter: pombredanne Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version: 5.35  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Text file reported as data and application/octet-stream instead of text
Description: This was originally reported on https://web.archive.org/web/20150815064234/http://bugs.gw.com:80/my_view_page.php as #473 but was lost.

The attached file is reported as data and application/octet-stream instead of text



 
Tags:
Steps To Reproduce: run file and file -i on this file
Additional Information:
Attached Files: wildtest.txt (4,233 bytes) 2018-12-17 11:37
https://bugs.astron.com/file_download.php?file_id=36&type=bug
Notes
(0003205)
christos   
2019-01-18 15:26   
There are two non-ascii characters in the file:
$ diff text55.src.orig text55.src | cat -v
98,99c98,99
< 0000001 1 M-^E [^[:alnum:][:alpha:][:blank:][:cntrl:][:digit:][:graph:][:lower:][:print:][:punct:][:space:][:upper:][:xdigit:]]
< 1 1 ^? [^[:alnum:][:alpha:][:blank:][:digit:][:graph:][:lower:][:print:][:punct:][:space:][:upper:][:xdigit:]]
---
> 0000001 1 [^[:alnum:][:alpha:][:blank:][:cntrl:][:digit:][:graph:][:lower:][:print:][:punct:][:space:][:upper:][:xdigit:]]
> 1 1 [^[:alnum:][:alpha:][:blank:][:digit:][:graph:][:lower:][:print:][:punct:][:space:][:upper:][:xdigit:]]

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
56 [file] General minor have not tried 2018-12-17 11:39 2019-01-08 18:24
Reporter: pombredanne Platform:  
Assigned To: administrator OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Disallow anonymous user to post on tickets
Description: This is allowing for a lot of comment spam otherwise. See https://bugs.astron.com/view.php?id=3
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0003204)
administrator   
2019-01-08 18:24   
changed to Viewer.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
37 [tcsh] General crash always 2018-09-05 21:02 2018-12-16 18:46
Reporter: anonymous Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 6.21.00  
    Target Version:  
Summary: Pasting a unicode long-hyphen at the prompt crashes TCSH 6.19.01 + with LC_ALL=C
Description: If I do not set $LC_ALL, I can paste a long-hyphen character '–' into the prompt and it displays properly. If I instead set:

setenv LC_ALL C

Then try to paste the code, I get a segfault at ed.inputl.c GetNextCommand() at:
cmd = CurrentKeyMap[*ch];

I tracked the issue down to PR/437 commit 4b12ecbf108. Reverting this patch allows the paste to go through (it now displays escape characters instead of the hyphen, but doesn't crash).

Building on linux x86-64

tcsh --version: (x86_64-unknown-linux) options wide,nls,dl,al,kan,sm,rh,color,filec
Tags:
Steps To Reproduce: ./configure
make
./tcsh -f
setenv LC_ALL C
<paste –>
Additional Information:
Attached Files:
Notes
(0000135)
christos   
2018-12-16 18:46   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
50 [file] General minor always 2018-10-24 14:33 2018-12-16 03:40
Reporter: red Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: xlsx file is determined as zip
Description: Hello! xlsx file detected as application/zip.
Tags: zip
Steps To Reproduce: file --mime-type ./airports2.xlsx
./airports2.xlsx: application/zip
Additional Information:
Attached Files: airports2.xlsx (6,452 bytes) 2018-10-24 14:33
https://bugs.astron.com/file_download.php?file_id=33&type=bug
Notes
(0000100)
christos   
2018-11-05 18:39   
This has been fixed on HEAD.
(0000111)
christos   
2018-12-10 21:15   
Feedback timeout.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
29 [file] General major always 2018-08-15 19:18 2018-12-10 21:16
Reporter: Dave_Anderson Platform: Mac  
Assigned To: christos OS: MacOS  
Priority: high OS Version: 10.13.6  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: file command does not default to "don't follow symlinks" as claimed in --help
Description: Normally when I point the file command to a symlink I expect file output to indicate that I did so. Instead file tells me what it knows about the file that the the symlink is pointing to. Note that if I provide -h the behavior is as expected. Unfortunately the default acts as though I passed -L:

DAs-MacBook-Pro:~ DA$ file --version
file-5.31
DAs-MacBook-Pro:~ DA$ file --help
Usage: file [OPTION...] [FILE...]
Determine type of FILEs.

      --help display this help and exit
.
.
.
  -L, --dereference follow symlinks
  -h, --no-dereference don't follow symlinks (default)
 .
 .
 .
 DAs-MacBook-Pro:~ DA$ file `which python3`
/usr/local/bin/python3: Mach-O 64-bit executable x86_64
DAs-MacBook-Pro:~ DA$ file -L `which python3`
/usr/local/bin/python3: Mach-O 64-bit executable x86_64
DAs-MacBook-Pro:~ DA$ file -h `which python3`
/usr/local/bin/python3: symbolic link to ../Cellar/python/3.7.0/bin/python3
DAs-MacBook-Pro:~ DA$ which python3
/usr/local/bin/python3
DAs-MacBook-Pro:~ DA$ ls -l /usr/local/bin/python3
lrwxr-xr-x 1 DA admin 34 Aug 15 11:38 /usr/local/bin/python3 -> ../Cellar/python/3.7.0/bin/python3
DAs-MacBook-Pro:~ DA$ file /usr/local/bin/python3
/usr/local/bin/python3: Mach-O 64-bit executable x86_64
DAs-MacBook-Pro:~ DA$
Tags:
Steps To Reproduce: See above. Simply run the following:

file <full pathname of symlink>

or

file <relative pathname of symlink>
Additional Information:
Attached Files:
Notes
(0000059)
Dave_Anderson   
2018-08-15 19:20   
Unsure of this project's pri/sev definitions; please correct as needed.
(0000067)
christos   
2018-08-20 16:07   
Unfortunately I fix vendor-provided versions...

MacOS/X:
[11:58am] 3248>file -v
file-5.31
magic file from /usr/share/file/magic
[11:58am] 3249>ln -s /dev/null fol
[11:58am] 3250>file fol
fol: character special (3/2)
[11:58am] 3251>uname -a
Darwin vpn1-1.astron.com 17.7.0 Darwin Kernel Version 17.7.0: Thu Jun 21 22:53:14 PDT 2018; root:xnu-4570.71.2~1/RELEASE_X86_64 x86_64
[11:58am] 3252>

NetBSD
[11:59am] 222>file -v
file-5.30
magic file from /usr/share/misc/magic
[11:59am] 223>ln -s /dev/null fol
[12:01pm] 224>file fol
fol: symbolic link to /dev/null
[12:02pm] 236>./file -v
file-5.34
magic file from /usr/local/share/misc/magic
[12:02pm] 237>./file ~/fol
/u/christos/fol: symbolic link to /dev/null
[12:02pm] 225>uname -a
NetBSD rebar.astron.com 7.99.59 NetBSD 7.99.59 (GENERIC) amd64


(0000068)
Dave_Anderson   
2018-08-20 18:26   
Not sure what that means.

What does vendor-provided mean? if file was provided by Apple(a vendor?) why would it be unfortunate that you will fix it?
(0000069)
christos   
2018-08-23 09:45   
The version I supply works as advertised. The version Apple supplies works differently as we've found out. I don't know why Apple changed it. I don't control what Apple distributes (the note about should read I *cannot* fix vendor supplied versions).
(0000070)
Dave_Anderson   
2018-08-23 18:25   
Thanks. Workaround implemented as follows:

DAs-MacBook-Pro:~ DA$ cat ~/.bash_profile
...
alias file='file -h'
...

-L can override as intended:

DAs-MacBook-Pro:~ DA$ file `which python3`
/usr/local/bin/python3: symbolic link to ../Cellar/python/3.7.0/bin/python3
DAs-MacBook-Pro:~ DA$ file -L `which python3`
/usr/local/bin/python3: Mach-O 64-bit executable x86_64
(0000112)
christos   
2018-12-10 21:16   
Requester has work-around.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
24 [file] General minor always 2018-08-02 11:17 2018-12-10 21:15
Reporter: anonymous Platform: Linux  
Assigned To: christos OS: Debian  
Priority: normal OS Version: 4.9.82  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: Invalid ZIP archive version
Description: file reports for a ZIP file (SHA-256 hash: d6125587ffe1ca30833eb3c2b2187b4c8c22584a0899e699fde94f44b3c978c8)

$ file d6125587ffe1ca30833eb3c2b2187b4c8c22584a0899e699fde94f44b3c978c8
d6125587ffe1ca30833eb3c2b2187b4c8c22584a0899e699fde94f44b3c978c8: Zip archive data, at least v?[0] to extract

file version 5.33 has same output, v 5.32 reported: "Zip archive data"
Tags: zip
Steps To Reproduce:
Additional Information:
Attached Files: a (153 bytes) 2018-08-03 11:42
https://bugs.astron.com/file_download.php?file_id=13&type=bug
Notes
(0000038)
christos   
2018-08-03 08:55   
Can you provide a sample file with the problem?
(0000041)
anonymous   
2018-08-03 11:42   
This is not the file that I've mentioned above, but output is same. (note that extract-version is set to 0)
(0000045)
christos   
2018-08-11 11:11   
Fixed on HEAD
(0000099)
anonymous   
2018-10-23 12:29   
I've checked the new version 5.35 and the output for this sample is still "Zip archive data, at least v?[0] to extract". Maybe I got it wrong, so I have more specific question: is "v?[0]" desired output?
Now, when I think of it version, version 0 is invalid value, so this is how You want to say "version is unknown, hence `v?`, because version in the file header is 0x00. hence `[0]`.
(0000110)
christos   
2018-12-10 21:15   
Yes, I think that's ok (to print v?[%d], version for the unhandled versions.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
35 [file] General major always 2018-08-29 13:35 2018-12-10 21:14
Reporter: anonymous Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: Video files detected as image/x-tga
Description: Some MPEG-1/2 Video (mpgv) files are detected as image/x-tga instead of video/mpeg.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: arthurDVDNTSCHiQ.vob (1,429,504 bytes) 2018-08-29 13:35
https://bugs.astron.com/file_download.php?file_id=20&type=bug
Notes
(0000083)
christos   
2018-10-01 19:18   
Can't reproduce with HEAD version.
(0000109)
christos   
2018-12-10 21:14   
Feedback timeout.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
28 [file] General minor always 2018-08-13 15:52 2018-12-10 21:12
Reporter: anonymous Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: file reports a dynamically linked library as ELF 32-bit LSB pie executable instead of ELF 32-bit LSB shared object
Description: file on the submitted file libtest_lib.so.0.8 created by cmake build on GNU/Hurd reports:

5.33-3 and 5.34-{1,2}:
ELF 32-bit LSB pie executable, Intel 80386, version 1 (SYSV),
dynamically linked,
BuildID[sha1]=f7eb0213a2606a5e3b1bc46d369d2fc47db1d8c5, with
debug_info, not stripped

5.29-3:
ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV),
dynamically linked,
BuildID[sha1]=f7eb0213a2606a5e3b1bc46d369d2fc47db1d8c5, not stripped

Due to that one test fails.
Tags:
Steps To Reproduce: Run the cmake tests. Debian version 3.12.1-1
Additional Information:
Attached Files: libtest_lib.so.0.8 (5,100 bytes) 2018-08-13 15:52
https://bugs.astron.com/file_download.php?file_id=19&type=bug
Notes
(0000052)
christos   
2018-08-14 11:28   
Please download and run and unmodified version of file to reproduce. I am not sure where the 5.34.x comes from...

./file -m ../magic/magic.mgc libtest_lib.so.0.8
libtest_lib.so.0.8: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7eb0213a2606a5e3b1bc46d369d2fc47db1d8c5, with debug_info, not stripped
(0000053)
anonymous   
2018-08-14 14:43   
file 5.34-2 is from Debian (as all versions mentioned here: https://tracker.debian.org/pkg/file. Upstream releases downloaded from: ftp://ftp.astron.com/pub/file/
There are a number of patches applied though. Dunno yet if they change the output.
(0000054)
anonymous   
2018-08-14 14:56   
After downloading file-5.34.tar.gz and building:
LD_LIBRARY_PATH=./src/.libs/libmagic.so.1 src/.libs/file ../libtest_lib.so.0.8
../libtest_lib.so.0.8: ELF 32-bit LSB pie executable, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=dfa3ab0e1cc5aeb84dd5f655ef53977fb87b0aa1, with debug_info, not stripped
Same result with:
LD_LIBRARY_PATH=./src/.libs/libmagic.so.1 src/.libs/file -m ./magic/magic.mgc ../libtest_lib.so.0.8
(0000055)
christos   
2018-08-14 15:12   
that is really curious now:
[11:11am] 125>./file -m ../magic/magic.mgc libtest_lib.so.0.8
libtest_lib.so.0.8: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7eb0213a2606a5e3b1bc46d369d2fc47db1d8c5, with debug_info, not stripped
[11:11am] 126>uname -a
Linux mb1 4.9.0-6-amd64 0000001 SMP Debian 4.9.88-1+deb9u1 (2018-05-07) x86_64 GNU/Linux
[11:11am] 127>cksum libtest_lib.so.0.8
1407326587 5100 libtest_lib.so.0.8
(0000056)
anonymous   
2018-08-14 17:09   
previous results were reported form a GNU/Hurd box:
uname -a
GNU hurd-sid 0.9 GNU-Mach 1.8+git20180728-486-dbg/Hurd-0.9 i686-AT386 GNU

GNU/Linux-amd64:
uname -a
Linux z97-4790k 4.9.0-2-amd64 0000001 SMP Debian 4.9.10-1 (2017-02-17) x86_64 GNU/Linux
file --version
file-5.34
magic file from /etc/magic:/usr/share/misc/magic
file ./libtest_lib.so.0.8
./libtest_lib.so.0.8: ELF 32-bit LSB pie executable, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7eb0213a2606a5e3b1bc46d369d2fc47db1d8c5, with debug_info, not stripped
wget .../ file-5.34.tar.gz
uncompresss; configure;make
 LD_LIBRARY_PATH=./src/.libs/libmagic.so.1 src/.libs/file ../libtest_lib.so.0.8
../libtest_lib.so.0.8: ELF 32-bit LSB pie executable, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7eb0213a2606a5e3b1bc46d369d2fc47db1d8c5, with debug_info, not stripped
Same result with:
LD_LIBRARY_PATH=./src/.libs/libmagic.so.1 src/.libs/file -m ./magic/magic.mgc ../libtest_lib.so.0.8
(0000057)
anonymous   
2018-08-14 17:14   
cksum ../libtest_lib.so.0.8
1407326587 5100 ../libtest_lib.so.0.8
(0000058)
anonymous   
2018-08-15 14:19   
Hi again. It seems like the difference is that the file generated by cmake for tests is executable on GNU/Hurd but not on GNU/Linux:
ls -l ../libtest_lib.so.0.8
-rwxr-xr-x 1 srs srs 7340 Aug 10 13:57 ../libtest_lib.so.0.8
file ../libtest_lib.so.0.8
../libtest_lib.so.0.8: ELF 32-bit LSB pie executable, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=dfa3ab0e1cc5aeb84dd5f655ef53977fb87b0aa1, with debug_info, not stripped

chmod -x ../libtest_lib.so.0.8
file ../libtest_lib.so.0.8
../libtest_lib.so.0.8: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=dfa3ab0e1cc5aeb84dd5f655ef53977fb87b0aa1, with debug_info, not stripped

from the rule: magic/Magdir/elf
16 leshort 3 ${x?pie executable:shared object},

The file I uploaded was probably stripped of the +x flag.
(0000060)
christos   
2018-08-16 06:11   
Yes, well while I can remove the code that checks for the shared object being executable, the question is why does hurd installed libraries with the execute bit set :-)
(0000061)
anonymous   
2018-08-16 08:01   
Well, Hurd does not normally install shared libraries with the executable flag on. Only a few ones are executable. I don't know why they are really.
However, the library libtest_lib.so.0.8 was created by test code in cmake (Debian version 3.12.1-1)
(0000062)
christos   
2018-08-16 11:14   
Isn't it better to file a bug with Hurd and ask them why some of the libraries are installed executable and others are not, plus fix the CMakefile not to add the execute bit?

For example running:
$ /lib/x86_64-linux-gnu/libc-2.24.so
GNU C Library (Debian GLIBC 2.24-11+deb9u3) stable release version 2.24, by Roland McGrath et al.
Copyright (C) 2016 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
Compiled by GNU CC version 6.3.0 20170516.
Available extensions:
        crypt add-on version 2.1 by Michael Glad and others
        GNU Libidn by Simon Josefsson
        Native POSIX Threads Library by Ulrich Drepper et al
        BIND-8.2.3-T5B
libc ABIs: UNIQUE IFUNC
For bug reporting instructions, please see:
<http://www.debian.org/Bugs/>.

Is that a PIE binary or a shared object?
(0000064)
anonymous   
2018-08-16 18:27   
Well, some Linux libraries also have the executable flag set:
ls -l /lib/x86_64-linux-gnu/libc-2.27.so
-rwxr-xr-x 1 root root 1800248 Mar 3 11:47 /lib/x86_64-linux-gnu/libc-2.27.so
/lib/x86_64-linux-gnu/libc-2.27.so GNU C Library (Debian GLIBC 2.27-1) stable release version 2.27.
Copyright (C) 2018 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
Compiled by GNU CC version 7.3.0.
libc ABIs: UNIQUE IFUNC
For bug reporting instructions, please see:
<http://www.debian.org/Bugs/>.
(0000065)
christos   
2018-08-18 14:33   
Yes, the real question is should it? What's the reason or benefit? Should the installation be sloppy about it?
(0000108)
christos   
2018-12-10 21:12   
This is not relevant anymore; the execute bit is not used anymore.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
26 [file] General minor always 2018-08-06 16:32 2018-12-10 21:12
Reporter: anonymous Platform: GNU/Linux  
Assigned To: christos OS: Kubuntu  
Priority: normal OS Version: 17.10  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: Regex match does not capture all characters to end of line
Description: I've got an Ansible Vault data file that I'm making magic for; the second and subsequent lines of the example file should be irrelevant (for magic purposes), but I added placeholder lines (to match my actual file) for grins.

On the fourth line of my magic config file (the one that starts with ">>&1 regex/1l") my understanding is that "regex/1l" means that I'm specifying a regular expression, and that regex will be searched for in the block starting at the character following the previous match and ending at the end of the line. (It's this last bit, "...and ending at the end of the line", that I suspect is where my understanding is incomplete.)

HOWEVER, for some reason the last character of the line is getting chopped off; as you can see in the reproduction, file is only printing "AES25" in the output, rather than "AES256". This agrees with my testing, where if I try to match the regex "AES256" it fails, but matching "AES25" works.
Tags:
Steps To Reproduce: %) file --version
file-5.32
magic file from /home/alumin/.magic:/etc/magic:/usr/share/misc/magic

%) cat file-testfile
$ANSIBLE_VAULT;1.1;AES256
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000

%) cat dot-magic-notworking
## Ansible Vault files
0 string $ANSIBLE_VAULT Ansible Vault data
>&1 regex/1l ([0-9]+(\.[0-9]+)+) \b, version %s
>>&1 regex/1l .* \b, using %s encryption
!:mime application/ansible-vault
!:strength +60

%) cat dot-magic-working ## The only difference is changing "1l" to "2l" on line 4
## Ansible Vault files
0 string $ANSIBLE_VAULT Ansible Vault data
>&1 regex/1l ([0-9]+(\.[0-9]+)+) \b, version %s
>>&1 regex/2l .* \b, using %s encryption
!:mime application/ansible-vault
!:strength +60

%) file --magic-file dot-magic-notworking testfile
testfile: Ansible Vault data, version 1.1, using AES25 encryption

%) file --magic-file dot-magic-working testfile
testfile: Ansible Vault data, version 1.1, using AES256 encryption
Additional Information: This testing is against version 5.32; apologies for not using the latest version, but it's what I have on my system and I'm kind of expecting this to be a problem with my magic file rather than a bug anyway, so I thought I might skip getting the latest version built and running unless it's necessary.

I've attached the three files in question; there's nothing special about them as far as I know, but I suppose you can't be too careful. :)
Attached Files: file-testfile (1,845 bytes) 2018-08-06 16:32
https://bugs.astron.com/file_download.php?file_id=17&type=bug
dot-magic-working (234 bytes) 2018-08-06 16:32
https://bugs.astron.com/file_download.php?file_id=16&type=bug
dot-magic-notworking (234 bytes) 2018-08-06 16:32
https://bugs.astron.com/file_download.php?file_id=15&type=bug
Notes
(0000048)
christos   
2018-08-11 12:13   
Fixed on HEAD.
(0000051)
anonymous   
2018-08-13 21:45   
Cool, I assume you mean https://github.com/file/file/commit/b186b4a4ad8b4e6927bb7fd578db572d44bd0712 ? Thanks for looking into it!
(0000107)
christos   
2018-12-10 21:12   
Verified fixed.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
54 [file] General minor always 2018-11-25 11:46 2018-12-10 21:09
Reporter: anonymous Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.33  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: Berkeley DB file detection error
Description: While trying file on a Berkeley DB file (detected as 'Berkeley DB (Btree, version 9, native byte-order)' with file 5.32), I get this result with file 5.33: ', created: Thu Jan 1 00:38:24 1970'. This issue seems to be solved in file-5.34, but my distro uses 5.33.
Tags:
Steps To Reproduce: run `file` on the attached file.
Additional Information: I found this issue while compiling diffoscope with python-file instead of python-magic. One of the tests (where I found the attached file) fails because the file is not recognised correctly. For now, I've simply disabled the test to be able to build that tool, but it's not ideal.

GuixSD (my distro) cannot update file to a newer version before at least a few months because it requires rebuilding the whole set of packages. However, we can apply patches to the 5.33 version to fix this issue. If there is any patch you can point us to, we can still apply it without having to rebuild everything. Thank you!
Attached Files: test1.db (32,768 bytes) 2018-11-25 11:46
https://bugs.astron.com/file_download.php?file_id=35&type=bug
Notes
(0000102)
anonymous   
2018-12-10 00:26   
https://cbdoilamericano.com/# where to buy cbd cream for pain
https://cbdoilamericano.com/#
https://cbdoilamericano.com/#
(0000106)
christos   
2018-12-10 21:09   
You can always compile a newer version of file; even if I fix 5.33, it is uncertain if your upstream will pick up the changes. Thanks for the report anyway.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
53 [file] General minor sometimes 2018-11-24 07:39 2018-12-10 21:07
Reporter: anonymous Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: Output is not always consistent with cso files
Description: When using the compression tool maxcso to compress PS2 iso files to cso files file(1) does not always recognize them as "Compressed ISO CD image" files and will sometimes recognize them as "data" instead. The files work fine in the PS2 emulator PCSX2 and when decompressed with maxcso they will match the original md5sum of the source iso.

$ file Atelier\ Iris\ *.cso
Atelier Iris - Eternal Mana [NTSC-U].cso: Compressed ISO CD image
Atelier Iris 2: Azoth of Destiny [NTSC-U].cso: data
Atelier Iris 3: Grand Phantasm [NTSC-U].cso: Compressed ISO CD image

$ file Atelier\ Iris\ *.iso
Atelier Iris - Eternal Mana [NTSC-U].iso: UDF filesystem data (version 1.5) ''
Atelier Iris 2: Azoth of Destiny [NTSC-U].iso: UDF filesystem data (version 1.5) ''
Atelier Iris 3: Grand Phantasm [NTSC-U].iso: UDF filesystem data (version 1.5) 'ATELIER_IRIS_GF'

I asked the maxcso developer about this issue his response can be seen in this github issue, in short the assumptions file(1) is making about cso files is not always correct.

https://github.com/unknownbrackets/maxcso/issues/26

Unfortunately due to legal reasons I can not provide example files.
Tags:
Steps To Reproduce: This can be reproduced by compressing various PS2 iso files with maxcso.

https://github.com/unknownbrackets/maxcso/
Additional Information:
Attached Files:
Notes
(0000105)
christos   
2018-12-10 21:07   
Added the popular 0x4000 blocksize.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
52 [file] General minor have not tried 2018-11-15 15:30 2018-12-10 21:02
Reporter: vitalyisaev2 Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: mp3 file is determined as "audio/mpegapplication/x-tar"
Description: Hi, please consider this file:

➜ attachments git:(UCS-5425) file -v
file-5.35
magic file from /etc/magic:/usr/share/misc/magic
➜ attachments git:(UCS-5425) file --mime-type audio.mp3
audio.mp3: audio/mpegapplication/x-tar

I think that the expected result is "audio/mpeg".
Tags:
Steps To Reproduce: Sources: ftp://ftp.astron.com/pub/file/file-5.35.tar.gz
Compiler: gcc 8.2
OS: Fedora 28
Additional Information: Also I would like to notice that at the place were I work now we use libmagic in many services, and we're interested in high quality of mime-type detection. Our QA engineers maintain set of files of various formats. I think that this set can be used as a foundation for modern libmagic's CI pipeline, which hopefully will prevent from such kind of regression bugs. If you're interested, please let me know.

Kind regards,
Vitaly
Attached Files: audio.mp3 (10,493 bytes) 2018-11-15 15:31
https://bugs.astron.com/file_download.php?file_id=34&type=bug
Notes
(0000104)
christos   
2018-12-10 21:02   
Can't reproduce with HEAD.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
51 [file] General minor always 2018-11-12 00:41 2018-12-10 20:59
Reporter: anonymous Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.35  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: Update MIME types for fonts
Description: file returns the deprecated application/vnd.ms-opentype and application/font-sfnt as MIME types for otf and ttf fonts, respectively. They should really be font/otf and font/ttf as seen in this table: https://www.iana.org/assignments/media-types/media-types.xhtml#table-font
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0000103)
christos   
2018-12-10 20:59   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
49 [file] General minor always 2018-10-18 14:33 2018-10-19 01:04
Reporter: giosh94mhz Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.36  
    Target Version:  
Summary: Normal TSV identified as Algol 68
Description: Rules for Algol68 are too broad, and gives some false results, especially with Tab separated text file.

Since Algol is pretty rare and TSV very common, this can be a boring issue. For now, I've attached a patch to use exact regex match and limited to only 1024 bytes.

A proper/better solution is to do multiple checks for a rare file type like this, but I'm not an Algol developer so I'm a bit clueless here. I think we should use a multiple match, which ensure that 2-3 algol instruction are in place (e.g PROC && MODE && REF, instead of PROC || MODE || REF).

Tags:
Steps To Reproduce: See sample.xls (actually TSV) attached, and a first non optimal solution in file-algol.patch
Additional Information:
Attached Files: sample.xls (62 bytes) 2018-10-18 14:33
https://bugs.astron.com/file_download.php?file_id=32&type=bug
file-algol.patch (1,069 bytes) 2018-10-18 14:33
https://bugs.astron.com/file_download.php?file_id=31&type=bug
Notes
(0000098)
christos   
2018-10-19 01:04   
applied, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
47 [file] General trivial always 2018-10-09 17:50 2018-10-09 21:44
Reporter: roramirez Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: [PATCH] Add mime and extension for AMR
Description: Add ext and mime for Adaptive Multi-Rate Codec
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: 855500e8ca155116bf7fdbe97c73d682b973b87c.patch (765 bytes) 2018-10-09 17:50
https://bugs.astron.com/file_download.php?file_id=29&type=bug
Notes
(0000095)
christos   
2018-10-09 21:44   
committed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
23 [file] General minor have not tried 2018-07-30 15:38 2018-10-08 18:26
Reporter: vitalyisaev2 Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: JSON is determined as "text/plain"
Description: Hello!
I think that JSON files should have "application/json" content-type according to RFC4627 (http://www.ietf.org/rfc/rfc4627.txt)

Kind regards,
Vitaly

Tags:
Steps To Reproduce: [root@9826ba54a40a /]# cat /tmp/ololo.json
{
    "abc": "edf",
    "json": "crab",
    "ololo": [
        1,
        2,
        3
    ],
    "subcrab": {
        "name": "crab",
        "surname": "subcrab"
    }
}

[root@9826ba54a40a /]# file --version
file-5.34
magic file from /etc/magic:/usr/share/misc/magic
[root@9826ba54a40a /]# file --mime-type /tmp/ololo.json
/tmp/ololo.json: text/plain
Additional Information:
Attached Files: ololo.json (144 bytes) 2018-07-30 15:38
https://bugs.astron.com/file_download.php?file_id=12&type=bug
Notes
(0000040)
christos   
2018-08-03 09:15   
Yes, but that would require something in file to be able to parse json (so that it can determine if it is json)... What about a json file that has a syntax error? Should it be recognized as json?
(0000042)
anonymous   
2018-08-08 06:55   
Hi! I suppose that we should recognize it as json in all cases when it's possible. Even it has a syntax error. Of course this behaviour depends on json parser.
(0000043)
vitalyisaev2   
2018-08-08 07:43   
Perhaps libmagic could use some lightweight library that will just validate JSON (without building whole deserialized object in memory)...

I'm not sure if we are able to distinguish JSON with syntax error and arbitrary text file. From my point of view, falling back to "text/plain" with broken JSON would be a better option.
(0000044)
christos   
2018-08-11 11:06   
Fixed on HEAD.
(0000050)
vitalyisaev2   
2018-08-13 10:51   
Thank you, going to check it in a couple of days
(0000092)
vitalyisaev2   
2018-10-08 14:24   
Sorry for the delay with response, I've checked it, works good. I think we can close this issue.
(0000094)
christos   
2018-10-08 18:26   
Submitter verified it is fixed.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
46 [file] General minor have not tried 2018-10-08 14:12 2018-10-08 18:26
Reporter: vitalyisaev2 Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: docx file is determined as zip
Description: Hello, please consider this docx file which is determined as zip. It's valid and can be opened by LIbreOffice, but file (compiled from repository's HEAD) does not agree that it's docx file.

Thank you.
Tags:
Steps To Reproduce: file --mime-type /tmp/office.docx
/tmp/office.docx: application/zip
Additional Information:
Attached Files: office.docx (34,220 bytes) 2018-10-08 14:12
https://bugs.astron.com/file_download.php?file_id=28&type=bug
Notes
(0000093)
christos   
2018-10-08 18:26   
Made the zip search deeper; thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
32 [file] General minor have not tried 2018-08-24 23:09 2018-10-02 01:11
Reporter: Chai T. Rex Platform: x86-64, Kaby Lake  
Assigned To: christos OS: Ubuntu  
Priority: normal OS Version: 16.04.5  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: file declares that Bash process substitution uses a broken symlink
Description: Apologies if this has already been fixed.

In Ubuntu 16.04.5, with file-5.25, Bash process substitution fails, claiming that there's a broken symbolic link to a pipe. The same sort of symbolic link works just fine with other programs, so there's something wrong with file's detection of broken symlinks.
Tags:
Steps To Reproduce: 1. Note that Bash process substitution works in general, so the symlink that's involved must be properly readable:

    $ /bin/cat <( echo '#!/bin/sh' )
    #!/bin/sh

2. Note that file gives an error:

    $ /usr/bin/file <( echo '#!/bin/sh' )
    /dev/fd/63: broken symbolic link to pipe:[10713867]
Additional Information: The version of the Ubuntu APT package called file is 1:5.25-2ubuntu1.1.

    $ /usr/bin/file --version
    file-5.25
    magic file from /etc/magic:/usr/share/misc/magic
Attached Files:
Notes
(0000085)
christos   
2018-10-01 19:24   
$ ls -l <(echo "foo bar")
lr-x------ 1 christos users 64 Oct 1 15:22 /dev/fd/63 -> pipe:[3511315244]

So what happens if you readlink(2) /dev/fd/63 and then try to open the result instead of opening it directly? What's supposed to happen?
(0000087)
christos   
2018-10-01 20:00   
(Last edited: 2018-10-01 20:01)
This is only broken on Linux; other systems with a proper procfs/devfs implementation work just fine :-)

(0000091)
christos   
2018-10-02 01:11   
Should be fixed now.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
45 [file] General minor always 2018-09-17 07:54 2018-10-01 23:34
Reporter: sezero Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: unreadable output for macho fat files
Description: $ file --version
file-5.34
magic file from /home/sezero/opt/file-5.34/share/misc/magic
$ file wildmidi
wildmidi: Mach-O universal binary with 3 architectures: [x86_64:Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ppc:Mach-O ppc executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>]

This is a fat file with x86_64, i386 and ppc architectures. While
trying to output flags (useless IMHO, but it's just me), file loses
one of the arches (i386) and the output is pretty much unreadable.

As far as I can tell, this behavior began with file-5.27 (file-5.26
doesn't compile for me.) With file-5.25, the output was readable,
although it did lose the last arch, i.e. ppc:
wildmidi: Mach-O universal binary with 3 architectures: [x86_64: Mach-O 64-bit x86_64 executable] [i386: Mach-O i386 executable] []
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: wildmidi (73,772 bytes) 2018-10-01 19:22
https://bugs.astron.com/file_download.php?file_id=27&type=bug
Notes
(0000078)
christos   
2018-10-01 19:02   
Do you have a binary that reproduces this?
I get:
./file -m ../magic/magic.mgc /bin/sync
/bin/sync: Mach-O universal binary with 2 architectures: [x86_64:Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|PIE>] [i386:Mach-O i386 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|PIE|NO_HEAP_EXECUTION>]
(0000079)
christos   
2018-10-01 19:03   
waiting for example.
(0000084)
sezero   
2018-10-01 19:22   
The tarball here has the file I referred to in the original report:
https://github.com/Mindwerks/wildmidi/releases/download/wildmidi-0.3.14/wildmidi-0.3.14-macosx.tar.gz

Also attaching one of the files from that tarball here.
(0000088)
christos   
2018-10-01 20:43   
Hmm, something is fishy with that file: Apple's file binary finds 3 architectures, but only in the body, not in the headers:
$ file wildmidi
wildmidi: Mach-O universal binary with 3 architectures: [x86_64:Mach-O 64-bit executable x86_64] [ppc:Mach-O executable ppc]
wildmidi (for architecture x86_64): Mach-O 64-bit executable x86_64
wildmidi (for architecture i386): Mach-O executable i386
wildmidi (for architecture ppc): Mach-O executable ppc

Will look into it some more.
(0000089)
sezero   
2018-10-01 21:11   
lipo (from cctools-port) three arches in header:

$ /opt/cctools-port/bin/i686-apple-darwin9-lipo -detailed_info wildmidi
Fat header in: wildmidi
fat_magic 0xcafebabe
nfat_arch 3
architecture x86_64
    cputype CPU_TYPE_X86_64
    cpusubtype CPU_SUBTYPE_X86_64_ALL
    offset 4096
    size 19832
    align 2^12 (4096)
architecture i386
    cputype CPU_TYPE_I386
    cpusubtype CPU_SUBTYPE_I386_ALL
    offset 24576
    size 23976
    align 2^12 (4096)
architecture ppc
    cputype CPU_TYPE_POWERPC
    cpusubtype CPU_SUBTYPE_POWERPC_ALL
    offset 49152
    size 24620
    align 2^12 (4096)
(0000090)
christos   
2018-10-01 23:34   
Fixed to print the missing arch, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
31 [file] General text always 2018-08-23 17:05 2018-10-01 20:00
Reporter: anonymous Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: pstring documentation error
Description: The documentation states that:
                          B A byte length (default).
                          H A 4 byte big endian length.
                          h A 2 byte big endian length.
                          L A 4 byte little endian length.
                          l A 2 byte little endian length.
Looking at the source that is not correct. It should have been:
                          B A byte length (default).
                          H A 2 byte big endian length.
                          h A 2 byte little endian length.
                          L A 4 byte big endian length.
                          l A 4 byte little endian length.
Tags:
Steps To Reproduce:
Additional Information: Look in the source-code after CHAR_PSTRING_2_BE CHAR_PSTRING_2_LE CHAR_PSTRING_4_BE CHAR_PSTRING_4_LE
Attached Files:
Notes
(0000086)
christos   
2018-10-01 20:00   
thanks

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
38 [file] General trivial always 2018-09-10 11:56 2018-10-01 19:14
Reporter: bbc Platform:  
Assigned To: christos OS:  
Priority: low OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Typo in text for Microsoft Roslyn
Description: Attached is a patch. I didn't know where to send it so here it is.
Tags:
Steps To Reproduce: Run: file foo.pdb
Additional Information:
Attached Files: fix_typo_roslyn.patch (604 bytes) 2018-09-10 11:56
https://bugs.astron.com/file_download.php?file_id=22&type=bug
Notes
(0000082)
christos   
2018-10-01 19:14   
thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
36 [file] General minor have not tried 2018-09-05 19:13 2018-10-01 19:12
Reporter: cbiedl Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Remaining references to gw.com
Description: Seems there are some references left to the defunct gw.com domain.

Please fix `magic/Header` and `src/file.c` while `magic/Magdir/wsdl` probably cannot be cured.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0000081)
christos   
2018-10-01 19:12   
fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
40 [file] General minor always 2018-09-15 15:46 2018-10-01 19:11
Reporter: anonymous Platform: x86_64 GNU/Linux  
Assigned To: christos OS: Arch Linux  
Priority: normal OS Version: 4.16.13-1  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Wrong mime type of Canon CR2 raw image data
Description: The mime type of Canon CR2 raw image data is recognized as image/tiff.
In version 5.33 and older versions the mime type of Canon CR2 raw image data was determined correctly as image/x-canon-cr2.
Tags:
Steps To Reproduce: file --mime-type -b image.cr2
Additional Information: Example files can be downloaded from the pixls.us website.

E.g.:

http://raw.pixls.us/data/Canon/EOS%207D/RAW_CANON_EOS_7D-raw.CR2
Attached Files:
Notes
(0000080)
christos   
2018-10-01 19:11   
bump strength to beat tiff.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
39 [file] General trivial always 2018-09-13 16:08 2018-10-01 18:58
Reporter: jidanni Platform: Debian  
Assigned To: christos OS:  
Priority: low OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Document jpeg "frames 3"
Description: Document on the man page if "frames 3" is talking about some kind of layer.
https://photo.stackexchange.com/questions/9606/do-jpgs-have-layers
Tags:
Steps To Reproduce: $ file ...jpg
... 1836x3264, frames 3
Additional Information: $ identify -verbose ...jpg
doesn't mention any frames.
Attached Files:
Notes
(0000077)
christos   
2018-10-01 18:58   
changed "frames" to "components"

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
34 [file] General feature always 2018-08-29 11:35 2018-10-01 18:53
Reporter: anonymous Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.33  
Product Build: Resolution: no change required  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: allow piping
Description: so i was wondering what kind of files live in my /usr/lib directory, so i naively tried:

find /usr/lib -type f | file

but only got the `file` usage info printed out.
so i assume we cannot pipe filepaths to `file`?

could we have this awesome feature?
Tags:
Steps To Reproduce: find /usr/lib -type f | file
Additional Information:
Attached Files:
Notes
(0000076)
christos   
2018-10-01 18:53   
find . -type f | file -f -

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
33 [file] General minor have not tried 2018-08-24 23:32 2018-10-01 18:51
Reporter: Chai T. Rex Platform: x86-64, Kaby Lake  
Assigned To: christos OS: Ubuntu  
Priority: normal OS Version: 16.04.5  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: file --help bug reporting location is outdated
Description: According to the definition of `help()` in the GitHub repo file/file's `file.c` source code (with relevant lines highlighted at https://github.com/file/file/blob/master/src/file.c#L643-L661), the location to report bugs given by `file --help` is:

    Report bugs to http://bugs.gw.com/

That domain is dead and should be updated to the current man page's URL (with relevant lines highlighted at https://github.com/file/file/blob/master/doc/file.man#L631-L638):

    Please report bugs and send patches to the bug tracker at
    .Pa http://bugs.astron.com/
    or the mailing list at
    .Aq file@astron.com
    (visit
    .Pa http://mailman.astron.com/mailman/listinfo/file
    first to subscribe).
Tags:
Steps To Reproduce: 1. View the source code.
2. Notice that `file --help` will produce the wrong bug-reporting URL.
Additional Information: It may also be good to change the URLs in both the `man` page and `file --help` output to HTTPS instead of HTTP as a simple way to avoid a few security troubles.
Attached Files:
Notes
(0000075)
christos   
2018-10-01 18:51   
thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
43 [file] General minor have not tried 2018-09-16 07:29 2018-10-01 18:49
Reporter: petk Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Obsolete HAVE_STDDEF_H symbol
Description: The <stddef.h> header file is part of the standard C89 headers [1]
and on current systems can be included unconditionally.

Since file requires at least C89 or greater, the HAVE_STDDEF_H symbol
defined by Autoconf in configure.ac [2] can be ommitted and simplifed.

Refs:
[1] https://port70.net/~nsz/c/c89/c89-draft.html#4.1.2
[2] https://git.savannah.gnu.org/cgit/autoconf.git/tree/lib/autoconf/headers.m4

Thank you.
Tags:
Steps To Reproduce:
Additional Information: Pull request has been opened also at https://github.com/file/file/pull/41 for better overview.
Attached Files: 41.patch (2,120 bytes) 2018-09-16 07:29
https://bugs.astron.com/file_download.php?file_id=25&type=bug
There are no notes attached to this issue.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
41 [file] General minor always 2018-09-16 07:00 2018-10-01 18:49
Reporter: petk Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Obsolete HAVE_LIMITS_H symbol
Description: The <limits.h> header file is part of the standard C89 headers [1] and
on current systems there is no need to manually check if header is
present anymore.

Since the code requires at least C89 or greater, the HAVE_LIMITS_H
symbol defined by Autoconf in configure.ac [2] can be removed and
simplifed.

Refs:
[1] https://port70.net/~nsz/c/c89/c89-draft.html#4.1.2
[2] https://git.savannah.gnu.org/cgit/autoconf.git/tree/lib/autoconf/headers.m4
Tags:
Steps To Reproduce:
Additional Information: Pull request for additional info and overview of this is at https://github.com/file/file/pull/39
Attached Files: 39.patch (3,246 bytes) 2018-09-16 07:00
https://bugs.astron.com/file_download.php?file_id=23&type=bug
There are no notes attached to this issue.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
44 [file] General minor have not tried 2018-09-17 00:26 2018-10-01 18:48
Reporter: anonymous Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Obsolete HAVE_SIGNAL_H symbol
Description: The <signal.h> header file is part of the standard C89 headers [1]
and on current systems can be included unconditionally.

Since file requires at least C89 or greater, the HAVE_SIGNAL_H symbol
defined by Autoconf in configure.ac [2] can be ommitted and simplifed.

Refs:
[1] https://port70.net/~nsz/c/c89/c89-draft.html#4.1.2
[2] https://git.savannah.gnu.org/cgit/autoconf.git/tree/lib/autoconf/headers.m4

Thank you.
Tags:
Steps To Reproduce:
Additional Information: Pull request has been also opened on GitHub for better overview of the patch needed. https://github.com/file/file/pull/42
Attached Files: 42.patch (2,813 bytes) 2018-09-17 00:26
https://bugs.astron.com/file_download.php?file_id=26&type=bug
There are no notes attached to this issue.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
42 [file] General minor always 2018-09-16 07:06 2018-10-01 18:48
Reporter: petk Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Obsolete HAVE_LOCALE_H symbol
Description: The <locale.h> header file is part of the standard C89 headers [1]
and on current systems can be included unconditionally.

Since file requires at least C89 or greater, the HAVE_LOCALE_H symbol
defined by Autoconf in configure.ac [2] can be ommitted and simplifed.

Refs:
[1] https://port70.net/~nsz/c/c89/c89-draft.html#4.1.2
[2] https://git.savannah.gnu.org/cgit/autoconf.git/tree/lib/autoconf/headers.m4

Thank you.
Tags:
Steps To Reproduce:
Additional Information: Pull request for additional info is at https://github.com/file/file/pull/40
Attached Files: 40.patch (1,645 bytes) 2018-09-16 07:06
https://bugs.astron.com/file_download.php?file_id=24&type=bug
Notes
(0000073)
christos   
2018-09-17 00:37   
Have you tried building with visual studio (is it c89?)?
(0000074)
petk   
2018-09-17 01:32   
Hello, I haven't build this with Visual Studio but I can check it out via some virtual machine how this works... Visual Studio 2015 and 2017 should both support C89 standard headers, yes. For example:
https://docs.microsoft.com/en-us/cpp/c-runtime-library/reference/setlocale-wsetlocale?view=vs-2015

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
30 [file] General minor always 2018-08-16 18:47 2018-08-20 15:52
Reporter: cbiedl Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Different behaviour for setparam with value zero
Description: Hi there,

the file program ignores any parameter set using --parameter if the value is zero (file.c:430). At the same time, an according magic_setparam call does set the value.

It might be questionable whether the value zero should be supported - in my opinion it should, even if just for tests and weird experiments. However, I'd appreciate if the file program and libmagic would show the same behaviour. The current situation created some confusion when trying to test effects of --parameter before using the function in an application.

Regards,
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0000066)
christos   
2018-08-20 15:52   
fixed

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
25 [file] General minor have not tried 2018-08-06 06:19 2018-08-11 12:18
Reporter: cbiedl Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Magic strength computation underflow
Description: This doesn't look good:

    $ file --list | grep FORTRAN
    Strength = 18446744073709551613@7: FORTRAN program text [text/x-fortran]

The problem is in `apprentice_magic_strength`: The `val` variable is size_t but as result of substraction the computation might underflow.

The obvious approach was to guard `val` before such an operation but it turns out some rule start with `!:strength - 1` and the like, so that change would cause other and surprising damage.

Suggestion: Make `val` a signed long which should be big enough to avoid overflow. If the resulting value is still negative, set it to one. Also move that operation a block down to a place where it seems more appropriate.

This yields (as the only change)

    $ file --list | grep FORTRAN
    Strength = 2@7: FORTRAN program text [text/x-fortran]

which looks much better.

As a side effect, the strength of

    @42: Perl5 module source text

went down by one, so adjust this to maintain the current status which is the result of delicate tuning IIRC.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: strength-underflow.patch (1,546 bytes) 2018-08-06 06:19
https://bugs.astron.com/file_download.php?file_id=14&type=bug
Notes
(0000049)
christos   
2018-08-11 12:18   
Applied, but with long -> ssize_t

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
27 [file] General minor have not tried 2018-08-06 19:37 2018-08-11 11:32
Reporter: cbiedl Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Fix HPROF detection
Description: Seems it wasn't my brightest day when I submitted "Java HPROF dumps" a few years ago. So: "short" should have been "byte", this breaks detection on big endian. And the creation stamp should be printed only if the previous line matched. Patch below.

Besides, the URL is 404.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: hprof.patch (657 bytes) 2018-08-06 19:37
https://bugs.astron.com/file_download.php?file_id=18&type=bug
Notes
(0000047)
christos   
2018-08-11 11:32   
Applied, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
15 [file] General feature N/A 2018-07-24 15:19 2018-08-11 11:27
Reporter: eschwartz Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: confirmed Product Version:  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Try to acquire the "magic" name on the Python Package Index
Description: Per https://www.python.org/dev/peps/pep-0541/ an abandoned project can be deleted by the PyPI maintainers to clear the way for reusing the name.

The current "magic" package on https://pypi.org/project/magic/ is unmaintained since initial upload in 2003, it cannot even be installed as there is no code uploaded to PyPI, the "Project links: Download" points at a website that no longer exists (according to web.archive.org it disappeared sometime between 20121203 and 20130103), and I cannot find the original uploader on the internet more recently than 2003.

I suspect it would not be difficult to convince the PyPI maintainers of the validity of a claim by the official project. :)
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0000016)
christos   
2018-07-25 06:55   
I'll send mail to jp-py@jsnp.net who owns the project first.
(0000017)
christos   
2018-07-25 06:59   
I've sent mail, waiting for a response.
(0000021)
christos   
2018-08-01 09:02   
Sent mail to infrastructure-stuff@python.org to ask what to do next.
(0000046)
christos   
2018-08-11 11:27   
No answer there, opened: https://github.com/pypa/pypi-legacy/issues/802

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
22 [file] General minor have not tried 2018-07-26 20:57 2018-08-06 21:22
Reporter: cbiedl Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Possible typo in magic.man: warning: macro `It' not defined
Description: Hello,

commit cc32246d2aa7cc6ecc2071d1d6ea3c6a7015f2f2
Author: Christos Zoulas <christos@zoulas.com>
Date: Fri Jun 22 20:39:49 2018 +0000

    Add quad indirect offsets

added ".It S2" to the first line of doc/magic.man, which triggers a warning by man about an undefined macro. Care to check?
Tags: compression
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0000031)
christos   
2018-08-01 10:31   
fixed, thanks

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
12 [file] General feature have not tried 2018-07-22 10:03 2018-08-02 06:33
Reporter: cbiedl Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Please support EDID (Extended Display Identification Data)
Description: See https://bugs.debian.org/896932
File format description is at https://en.wikipedia.org/wiki/Extended_Display_Identification_Data

Tentative magic:

    0 string \x00\xFF\xFF\xFF\xFF\xFF\xFF\x00
    >19 byte x
    >>18 byte x EDID data, version %u.
    >>19 byte x \b%u

Also, I'd like to add

    >>17 ubyte+1990 <255 \b, manufactured %u

but there's an overrun so a value 22 is shown as 220, not 2012
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0000037)
christos   
2018-08-02 06:33   
Applied, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
10 [file] General minor always 2018-07-13 22:07 2018-08-02 06:26
Reporter: anonymous Platform: Debian  
Assigned To: christos OS: Linux  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Please tech file to recognize the Sketchup 3D model format
Description: This is forwarded from <URL: https://bugs.debian.org/903693 >.

The Sketchup 3D model format is used by the Sketchup modelling tool
available from <URL: https://www.sketchup.com/ >.

This is how it is handled at the moment:

  % file 35vertical.skp
  35vertical.skp: Zip archive data, o
  % file --mime 35vertical.skp
  35vertical.skp: application/octet-stream; charset=binary
  %

According to <URL: https://www.filesuffix.com/en/extension/skp >, its
MIME type should be application/vnd.sketchup.skp. According to
<URL:https://www.iana.org/assignments/media-types/application/vnd.sketchup.skp>,
this format is not registered with IANA.

An example file can be downloaded from
<URL: https://www.thingiverse.com/thing:898198 >.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0000011)
cbiedl   
2018-07-22 07:56   
As apparently all sketchup files have an identical header (some framing and a ucs-2 encoded text), the magic is fairly simple:

0 string \xff\xfe\xff\x0e\x53\x00\x6b\x00\x65\x00\x74\x00\x63\x00\x68\x00\x55\x00\x70\x00\x20\x00\x4d\x00\x6f\x00\x64\x00\x65\x00\x6c\x00 SketchUp Model
!:mime application/vnd.sketchup.skp
!:ext skp

The Debian package will ship this from the next version on.

    Christoph

PS: Any chance we'll ever have the mailing list again?
(0000036)
christos   
2018-08-02 06:26   
Added magic, and the mailing list is in mailman.astron.com

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
14 [file] General minor have not tried 2018-07-22 12:50 2018-08-01 13:44
Reporter: cbiedl Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: feedback Product Version:  
Product Build: Resolution: open  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Issues with flif magic
Description: Debian bug: https://bugs.debian.org/864023

The current state of flif (Free Lossless Image Format) detection is fairly broken. Things don't getter by looking at the spec¹ as apparently implementation is somewhat different.

As far as I can tell from the flif sources and images I've created using the flif tool:

The dimension (width, height) information is at offset 6 (spec says: 7). They are certainly not short but "varint", a dynamic format that can hold arbitrary values without wasting space (more or less the way, a length information is stored in ASN.1).

And a minor issue: The trailing comma as in "8-bit/color," leads to doubled comma in the output.

No idea how to proceed from here. Maybe ask the original submitter for review, assuming they have a bigger collection of flif files?

Cheers,
    Christoph

¹ http://flif.info/spec.html
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0000035)
christos   
2018-08-01 13:44   
Hmm, I wrote code to parse varint, but it seems that all the image examples I have work fine with the non-varint magic...

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
16 [file] General minor have not tried 2018-07-24 20:05 2018-08-01 12:05
Reporter: cbiedl Platform: Linux  
Assigned To: christos OS: Debian  
Priority: normal OS Version: all  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: magic for AutoCAD Drawing Exchange Format
Description: Debian bug https://bugs.debian.org/702744

The original proposal introduced a lot of regressions; I reworked it
and found no mis-detection even after checking my huge collection.

Still this could take some improvement, especially the regular
expression should better be something less expensive.

So for the record, the file format is something like:

* Format is text, line-based, DOS line endings
* The first four lines are

    0
    SECTION
    2
    HEADER

  where at least the numbers might be indented with whitespace.
* Further below there might be a keyword like "AC1006", denoting the
  actual version.

Also, the \000 in the first pattern is just a dirty hack to avoid the
string "ASCII text, with CRLF line terminators" is appended to the
output. Which, although technically correct, adds more confusion than
help, YMMV.



# AutoCAD Drawing Exchange Format
0 regex \^[\ \t]*0\r?\000$
>1 regex \^[\ \t]*SECTION\r?$
>>2 regex \^[\ \t]*2\r?$
>>>3 regex \^[\ \t]*HEADER\r?$ AutoCAD Drawing Exchange Format
!:mime application/x-dxf
!:ext dxf

>>>>&1 search/8192 AC1006 \b, R10
>>>>&1 search/8192 AC1009 \b, R11/R12
>>>>&1 search/8192 AC1012 \b, R13
>>>>&1 search/8192 AC1014 \b, R14
>>>>&1 search/8192 AC1015 \b, version 2000
>>>>&1 search/8192 AC1018 \b, version 2004
>>>>&1 search/8192 AC1021 \b, version 2007
>>>>&1 search/8192 AC1024 \b, version 2010
Tags:
Steps To Reproduce:
Additional Information:
System Description Maintainer for the file package in Debian.
Attached Files:
Notes
(0000034)
christos   
2018-08-01 12:05   
Applied, thanks

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
19 [file] General minor have not tried 2018-07-26 04:56 2018-08-01 10:34
Reporter: cbiedl Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: Recognize ia64 and amd64 COFF files
Description: Debian bug: https://bugs.debian.org/697846

Please consider the attached path to identify some 64bit architecture COFF files.

Regards,

    Christoph
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: upstream.coff-amd64.patch (1,022 bytes) 2018-07-26 04:56
https://bugs.astron.com/file_download.php?file_id=10&type=bug
Notes
(0000033)
christos   
2018-08-01 10:34   
Fixed, thanks

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
21 [file] General minor have not tried 2018-07-26 20:45 2018-08-01 10:33
Reporter: cbiedl Platform: Linux  
Assigned To: christos OS: Debian  
Priority: normal OS Version: all  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version: 5.35  
    Target Version:  
Summary: [PATCH] Add png extensions
Description: Ubuntu bug https://bugs.launchpad.net/ubuntu/+source/file/+bug/1726096

Add extensions for png
Tags:
Steps To Reproduce:
Additional Information:
System Description Maintainer for the file package in Debian.
Attached Files: ubuntu-1726096.patch (434 bytes) 2018-07-26 20:45
https://bugs.astron.com/file_download.php?file_id=11&type=bug
Notes
(0000032)
christos   
2018-08-01 10:33   
Fixed, thanks!

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
4 [file] General minor N/A 2018-06-17 19:55 2018-08-01 10:22
Reporter: valoq Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Several issues reported by coverity
Description: The static code analysis tool coverity found several issues in file

https://scan.coverity.com/projects/linuxsandboxingproject-file

Since the tool does not provide a mean to extract the result in a readable form, the details can only be accessed after login

I have attached one example issue below
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: oobaccess (1,277 bytes) 2018-06-17 19:55
https://bugs.astron.com/file_download.php?file_id=3&type=bug
Notes
(0000006)
christos   
2018-06-23 16:15   
I don't see the problem with the attached code; I have asked the owners to give me access to see the rest of the coverity issues.
(0000030)
christos   
2018-08-01 10:22   
All coverity issues have been addressed; the one mentioned here is a false-positive.

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
6 [file] General crash always 2018-06-22 14:55 2018-08-01 09:05
Reporter: tobias Platform: i686  
Assigned To: christos OS: Linux  
Priority: normal OS Version: 4.17.2  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: out of boundary read in DER parser
Description: It is possible to trigger an out of boundary read in DER parser if a custom magic file is used.

Parsing the length of a tag allows UINT32_MAX which will overflow the check if enough memory is available.

It is therefore needed to check for an UINT32_MAX overflow before checking the available amount of data.
Tags:
Steps To Reproduce: $ mkdir ~/magic
$ cp der-magic ~/magic
$ file -m ~/magic poc.der
Segmentation fault (core dumped)
$ _
Additional Information:
Attached Files: der-magic (30 bytes) 2018-06-22 14:55
https://bugs.astron.com/file_download.php?file_id=7&type=bug
poc.der (28 bytes) 2018-06-22 14:55
https://bugs.astron.com/file_download.php?file_id=6&type=bug
file-5.33-der.patch (326 bytes) 2018-06-22 14:55
https://bugs.astron.com/file_download.php?file_id=5&type=bug
Notes
(0000003)
christos   
2018-06-23 15:15   
Patch applied thanks!
(0000029)
christos   
2018-08-01 09:05   
feedback timeout

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
5 [file] General minor always 2018-06-22 14:50 2018-08-01 09:05
Reporter: tobias Platform: i686  
Assigned To: christos OS: Linux  
Priority: normal OS Version: 4.17.2  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: seccomp is lacking 32 bit support
Description: The allowed system calls are not enough for 32 bit Linux systems with large file support.

I have extended the commands to pass installation (make install fails during magic creation) and at least basic usage.
Tags:
Steps To Reproduce: Run "./configure && make && make install" on a 32 bit Linux system which uses large file support.
Additional Information:
Attached Files: file-5.33-seccomp.patch (735 bytes) 2018-06-22 14:50
https://bugs.astron.com/file_download.php?file_id=4&type=bug
Notes
(0000004)
christos   
2018-06-23 16:09   
Patch applied, thanks!
(0000028)
christos   
2018-08-01 09:05   
feedback timeout

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
13 [file] General minor have not tried 2018-07-22 10:51 2018-08-01 09:04
Reporter: cbiedl Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: ELF: Please handle files without program headers gracefully
Description: Debian bug: https://bugs.debian.org/882310

libmagic reports files without a program header as "corrupted program header size". As mentioned in that report, there used to be a fix for this in Redhat¹ some whopping 15 years ago, but it apparently never was upstreamed. I took the liberty to forward-port it to 5.33

¹ https://bugzilla.redhat.com/attachment.cgi?id=95833&action=diff&context=patch&collapsed=&headers=1&format=raw
Tags:
Steps To Reproduce: See the Debian bug
Additional Information:
Attached Files: 0001-ELF-Handle-files-without-program-headers-gracefully.patch (1,565 bytes) 2018-07-22 10:51
https://bugs.astron.com/file_download.php?file_id=9&type=bug
Notes
(0000013)
christos   
2018-07-25 06:12   
Applied, thanks!
(0000027)
christos   
2018-08-01 09:04   
feedback timeout

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
2 [file] General minor always 2018-06-12 09:33 2018-08-01 09:04
Reporter: Hugal31 Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Too much false positive for DIY-Thermocam format
Description: I think the DIY-Thermocam format in the "measure" magic file is unwell defined and causes too many false positives.
For example :

# V1 or Lepton 2.x
9608 byte <19
>9600 use diy-thermocam-checker
>>9600 default x (Lepton 2.x),
>>>9600 use diy-thermocam-parser

A file with the byte 3840 set to 0xFF, for example, will trigger the first line, because it will be resolved as signed "-1", and "-1 < 19" is true.
I believe this behaviour is incorrect and can be solved by using "ubyte" and "ulefloat".
The same applies to the other rules, where I think changing the signed condition to an unsigned would greatly reduce the number of false positives.


I don't know the DIY-Thermocam format, and it was added by someone named "Harald Geyer". If someone know the file format or know how to contact him, please help to fix this magic file.
Tags:
Steps To Reproduce: Use underflow to trigger some rules. See file attached for example.
Additional Information:
Attached Files: measure-fake.bin (9,621 bytes) 2018-06-12 09:33
https://bugs.astron.com/file_download.php?file_id=2&type=bug
Notes
(0000005)
christos   
2018-06-23 16:13   
Fixed as suggested
(0000026)
christos   
2018-08-01 09:04   
feedback timeout

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
1 [file] General feature N/A 2018-06-09 17:14 2018-08-01 09:03
Reporter: GerbilSoft Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: New additions and improvements: ADX, DDS, KTX, Wii/GCN
Description: Here are a bunch of patches I've been queueing up for a while, but haven't been able to submit due to the previous bug tracker being down. There are 20 patches (corresponding to local commits).

Overall list of changes:
* Support for Sega CRI ADX audio files.
* GBS files have fixed 32-char text fields, so a NULL terminator might not be present.
* Added unofficial MIME types from XDG.
* Some Sega Wii games have "GCIX" magic for GVR instead of "GBIX".
* Detect Mozilla Mork databases.
* Detect new texture formats: Khronos KTX, Valve VTF, Valve VTF3 (PS3), ASTC
* ELF: Detect Wii U binaries (Cafe OS)
* GCN/Wii: Detect unencrypted images from RVT-H Readers and headered images from the official SDKs.
* DirectDraw Surface: Moved from msdos to images; added more detail; reuse the rules for Sega PVR (Xbox) files.
Tags:
Steps To Reproduce:
Additional Information:
Attached Files: file.2018-04-21.15-55.tar.gz (11,614 bytes) 2018-06-09 17:14
https://bugs.astron.com/file_download.php?file_id=1&type=bug
Notes
(0000007)
christos   
2018-06-23 16:43   
patches applied! many thanks!
(0000025)
christos   
2018-08-01 09:03   
feedback timeout

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
7 [file] General minor always 2018-06-22 21:54 2018-08-01 09:03
Reporter: bodo Platform:  
Assigned To: christos OS:  
Priority: low OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: python function magic.detect_from_filename does not handle non-existent file
Description: The python api provides the function magic.detect_from_filename. When the file given as argument does not exist, it throws the exception
ValueError: not enough values to unpack (expected 2, got 1)
which does not correctly represent the failure condition.

detect_from_filename calls _create_filemagic with the return value of mime_magic.file.
If the file does not exist, mime_magic.file returns "cannot open `foobar' (No such file or directory)".
_create_filemagic then goes on to split that value into mime_type and mime_encoding.
But as the error message does not contain a semicolon, this leads to the above exception.
Tags:
Steps To Reproduce: Do not have the file 'foobar' in the current directory and execute the following in the python intepreter:

>>> import magic
>>> magic.detect_from_filename('foobar')
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib64/python3.5/site-packages/magic.py", line 264, in detect_from_filename
    none_magic.file(filename))
  File "/usr/lib64/python3.5/site-packages/magic.py", line 251, in _create_filemagic
    mime_type, mime_encoding = mime_detected.split('; ')
ValueError: not enough values to unpack (expected 2, got 1)
Additional Information: versions:
- sys-apps/file-5.32 on gentoo linux with USE="+python"
- python-3.5.5
Attached Files:
Notes
(0000002)
christos   
2018-06-23 14:58   
Committed a change to raise the actual error as a ValueError
(0000008)
bodo   
2018-06-24 14:11   
Works fine in python2 now. Python3 gives:

TabError: inconsistent use of tabs and spaces in indentation

Please replace your tabs with 8 spaces.
(0000009)
christos   
2018-06-24 15:51   
Fixed, thanks!
(0000012)
christos   
2018-07-25 06:08   
Should be fixed in HEAD:

$ python
Python 2.7.13 (default, Feb 13 2017, 09:50:26)
[GCC 5.4.0] on netbsd7
Type "help", "copyright", "credits" or "license" for more information.
>>> import magic
>>> magic.detect_from_filename('foobar')
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "magic.py", line 267, in detect_from_filename
    none_magic.file(filename))
  File "magic.py", line 254, in _create_filemagic
    raise ValueError(mime_detected)
ValueError: cannot open `foobar' (No such file or directory)
>>>
(0000024)
christos   
2018-08-01 09:03   
feedback timeout

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
11 [file] General minor always 2018-07-22 08:07 2018-08-01 09:03
Reporter: cbiedl Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Differing results from magic_file() and magic_buffer()
Description: The recent changes in file added inspection on the stat() system call result. This is of course not possible when magic_buffer() was call which does not know about the underlying file, if any.

As one of several results, the test suite of Adam Hupp's python-magic breaks as it silently compares the result of both functions and fails on any difference: https://github.com/ahupp/python-magic/issues/173

Can you please add a warning to the documentation of magic_buffer() this might have a different result/less detailed result? One example is some ELF files where the executable bit is taken into consideration.

And about that one, the gzip magic checks for the file size only AFAICT. Given the buffer size provided by any magic_buffer() caller, it should be possible to create a synthetic stat record containing at least that information.

Cheers,
    Christoph
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0000014)
christos   
2018-07-25 06:24   
Thanks. The ELF change that depended on stat(2) has been undone, but the magic_buffer and magic_file can still return different results, so I've documented it.
(0000023)
christos   
2018-08-01 09:03   
feedback timeout

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
17 [file] General minor have not tried 2018-07-24 22:45 2018-08-01 09:02
Reporter: cbiedl Platform: Linux  
Assigned To: christos OS: Debian  
Priority: normal OS Version: all  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: NULL check for ms in magic_setparam, magic_getparam?
Description: Hello,

all the public functions in magic.c that take a "struct magic_set" as parameter check at first whether it's NULL. However, magic_setparam and magic_getparam do not. By intention?

Next step was to ask whether the "val" void pointer shouldn't be checked before dereferencing it. And all the other pointers that are provided in various functions.

    Christoph
Tags:
Steps To Reproduce:
Additional Information:
System Description Maintainer for the file package in Debian.
Attached Files:
Notes
(0000015)
christos   
2018-07-25 06:27   
Thanks, for now I've added the ms == NULL tests for consistency.
(0000022)
christos   
2018-08-01 09:02   
feedback timeout

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
18 [file] General minor always 2018-07-25 03:23 2018-08-01 08:51
Reporter: anonymous Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: --mime-encoding reports a mangled string for .doc files
Description: Background in https://stackoverflow.com/a/45177322/113632


Calling --mime on a .doc file prints:

$ file --mime /tmp/example.doc
/tmp/example.doc: application/msword; charset=binary

Which leads me to believe --mime-encoding should print "binary", but instead it prints "application/mswordbinary":

$ file --mime-encoding /tmp/example.doc
/tmp/example.doc: application/mswordbinary

Which appears to be the concatenation of the type and the encoding. Experimenting with several other file types all print *just* their encoding (e.g. binary, us-ascii, etc.).
Tags:
Steps To Reproduce: 1. Get a .doc file
2. Run `file --mime-encoding YOUR_FILE.doc`
Additional Information:
Attached Files:
Notes
(0000018)
christos   
2018-07-25 07:16   
Fixed on HEAD, thanks!
(0000020)
christos   
2018-08-01 08:51   
feedback timeout

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
20 [file] General minor always 2018-07-26 13:04 2018-08-01 08:51
Reporter: anonymous Platform: x86_64  
Assigned To: christos OS: GNU/Linux  
Priority: normal OS Version: CentOS 7  
Status: resolved Product Version: 5.34  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: --mime-encoding --uncompress reports a mangled string for .tar.gz files
Description: Hello!
Have a problem similar to https://bugs.astron.com/view.php?id=18, but for .tar.gz files instead of .doc
Option --mime-encoding --uncompress (-z) for my .tar.gz file produces "application/x-tarbinary"

$ file --mime-encoding --uncompress example.tar.gz
example.tar.gz: application/x-tarbinary

$ file --mime --uncompress example.tar.gz
example.tar.gz: application/x-tar; charset=binary compressed-encoding=application/x-gzip; charset=binary

Suppose that instead of "application/x-tarbinary" program should just return "binary"
Tried with latest release 5.34 (compile from source) and with old pre-installed version 5.11
Tags:
Steps To Reproduce: 1. Create example.tar.gz archive with two non-empty text files in it;
2. Run `file --mime-encoding --uncompress example.tar.gz`
Additional Information:
Attached Files:
Notes
(0000019)
christos   
2018-08-01 08:51   
fixed, thanks

View Issue Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
8 [file] General minor N/A 2018-07-08 08:56 2018-07-10 03:16
Reporter: valoq Platform:  
Assigned To: christos OS:  
Priority: normal OS Version:  
Status: resolved Product Version:  
Product Build: Resolution: fixed  
Projection: none      
ETA: none Fixed in Version:  
    Target Version:  
Summary: Make Bugtracker publicly accessible
Description: The bugtracker is currently only accessible after registration and login.
This makes contributing and researching bugs/errors harder.

Please consider to make the bugtracker publicly accessible without requiring a login
Tags:
Steps To Reproduce:
Additional Information:
Attached Files:
Notes
(0000010)
christos   
2018-07-10 03:16   
Added anonymous login.