[File] [PATCH] Add rules for FreeBSD kernel minidumps

[Christos Zoulas]

Committed, thanks!

christos

> On Jan 18, 2022, at 2:40 PM, Michał Górny <mgorny at gentoo.org> wrote:
> 
> Recognize FreeBSD kernel minidump magic and print its architecture.
> For amd64, arm, arm64 and i386 also print the version as the offset
> and endianness are clear there.  I do not have VMs for other
> architectures to test right now.
> ---
> magic/Magdir/freebsd | 13 +++++++++++++
> 1 file changed, 13 insertions(+)
> 
> diff --git a/magic/Magdir/freebsd b/magic/Magdir/freebsd
> index a01ac4a2..b04ac50b 100644
> --- a/magic/Magdir/freebsd
> +++ b/magic/Magdir/freebsd
> @@ -142,3 +142,16 @@
>> 9	byte	2		%d bytes in header,
>>> 10	byte	x		%d chars wide by
>>> 11	byte	x		%d chars high
> +
> +#
> +# FreeBSD kernel minidumps
> +#
> +0	string	minidump\040FreeBSD/	FreeBSD kernel minidump
> +>17	string	amd64			for %s,
> +>>24	lelong	x			version %d
> +>17	string	arm			for %s,
> +>>24	lelong	x			version %d
> +>17	string	i386			for %s,
> +>>24	lelong	x			version %d
> +>17	default	x
> +>>17	string >\0			for %s
> --
> 2.34.1
> 
> --
> File mailing list
> File at astron.com
> https://mailman.astron.com/mailman/listinfo/file

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 235 bytes
Desc: Message signed with OpenPGP
URL: <https://mailman.astron.com/pipermail/file/attachments/20220118/73d030f7/attachment.asc>