[File] [PATCH] Magdir/softquad DESC or font file binary misidentifies 5View capture

[Christos Zoulas]

Committed, thanks!

christos

> On Oct 27, 2022, at 3:44 PM, Jörg Jenderek <joerg.jen.der.ek at gmx.net> wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> Hello,
> 
> some weeks ago ago i send patch for 5View capture files.
> 
> For control reason i looked again at my samples. When running file
> command version 5.43 with -k option on such 5VW examples then i
> get an output like:
> 
> kroete.dat:    SoftQuad DESC or font file binary
> linux.5vw:     5View capture file, record size 0x18,
> 	       file type 0x18001000; record size 0x24,
> 	       record type 0x80000000, RecSize 0x3c,
> 	       Time-stamp Tue Oct 25 22:43:09 2022
> 	       SoftQuad DESC or font file binary
> My5view-5.5vw: 5View capture file, record size 0x18,
> 	       file type 0x18001000; record size 0x24,
> 	       record type 0x80000000, RecSize 0x9e,
> 	       Time-stamp Sat Apr  9 19:47:41 2022
> 	       SoftQuad DESC or font file binary
> mywin8-6.5vw:  5View capture file, record size 0x18,
> 	       file type 0x18001000; record size 0x24,
> 	       record type 0x80000000, RecSize 0x156,
> 	       Time-stamp Wed Apr 27 21:26:53 2022
> 	       SoftQuad DESC or font file binary
> 
> Unfortunately all examples are also described wrong by lines inside
> Magdir/softquad. These looks like:
> 0	short	0125252		SoftQuad DESC or font file binary
>> 2	short	>0		- version %d
> 
> Unfortunately i found no file format description or examples or
> software. At least on SoftQuad Software page on Wikipedia i found
> little bit of information. That is now expressed by line like:
> # URL:		https://en.wikipedia.org/wiki/SoftQuad_Software
> 
> The short value octal 0125252 is AAAA hexadecimal. So this expression
> is also true for 5View captures which start by test line inside
> Magdir/sniffer like:
> 0	string		\xaa\xaa\xaa\xaa
> 
> Without any knowledge about SoftQuad but with human brain i expect
> that second test line with version is executed for "real" SoftQuad
> examples. So maybe we get here something like low positive number
> like 0, 1 or 2. But for 5View capture this value would be interpreted
> as "very negative" value -21846 ( that is hexadecimal AAAA). So to
> skip 5View capture do displaying part after second test for version.
> So this now becomes like:
> 0  short 0125252
>> 2 short >0	SoftQuad DESC or font file binary - version %d
> 
> After applying the above mentioned modifications by patch
> file-5.43-softquad-5vw.diff and using Magdir/sniffer
> then my 5View captures are still described but misidentification as
> SoftQuad vanish. This now looks like:
> kroete.dat:    data
> linux.5vw:     5View capture file, record size 0x18,
> 	       file type 0x18001000; record size 0x24,
> 	       record type 0x80000000, RecSize 0x3c,
> 	       Time-stamp Tue Oct 25 22:43:09 2022
> My5view-5.5vw: 5View capture file, record size 0x18,
> 	       file type 0x18001000; record size 0x24,
> 	       record type 0x80000000, RecSize 0x9e,
> 	       Time-stamp Sat Apr  9 19:47:41 2022
> mywin8-6.5vw:  5View capture file, record size 0x18,
> 	       file type 0x18001000; record size 0x24,
> 	       record type 0x80000000, RecSize 0x156,
> 	       Time-stamp Wed Apr 27 21:26:53 2022
> 
> I hope my diff file can be applied in future version of file
> utility.
> 
> With best wishes,
> Jörg Jenderek
> - --
> Jörg Jenderek
> -----BEGIN PGP SIGNATURE-----
> Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
> 
> iF0EARECAB0WIQS5/qNWKD4ASGOJGL+v8rHJQhrU1gUCY1rfuAAKCRCv8rHJQhrU
> 1mzkAJ9bbLRob8T9dvciP6JeDoaXEDVpyQCfRScGeGAlf+LTyG4YB9qiGZtZGPU=
> =LKGb
> -----END PGP SIGNATURE-----
> <file-5_43-softquad-5vw_diff.DEFANGED-115605><file-5_43-softquad-5vw_diff_sig.DEFANGED-115606>-- 
> File mailing list
> File at astron.com
> https://mailman.astron.com/mailman/listinfo/file
> <sanitizer.log>