[File] [PATCH] Add rules for FreeBSD kernel minidumps

[Michał Górny]

Recognize FreeBSD kernel minidump magic and print its architecture.
For amd64, arm, arm64 and i386 also print the version as the offset
and endianness are clear there.  I do not have VMs for other
architectures to test right now.
---
 magic/Magdir/freebsd | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/magic/Magdir/freebsd b/magic/Magdir/freebsd
index a01ac4a2..b04ac50b 100644
--- a/magic/Magdir/freebsd
+++ b/magic/Magdir/freebsd
@@ -142,3 +142,16 @@
 >9	byte	2		%d bytes in header,
 >>10	byte	x		%d chars wide by
 >>11	byte	x		%d chars high
+
+#
+# FreeBSD kernel minidumps
+#
+0	string	minidump\040FreeBSD/	FreeBSD kernel minidump
+>17	string	amd64			for %s,
+>>24	lelong	x			version %d
+>17	string	arm			for %s,
+>>24	lelong	x			version %d
+>17	string	i386			for %s,
+>>24	lelong	x			version %d
+>17	default	x
+>>17	string >\0			for %s
-- 
2.34.1