[File] Types uelong+8, string/f, regex/30c, etc.

Christos Zoulas christos at zoulas.com
Sat Feb 15 20:02:43 UTC 2025



> On Feb 15, 2025, at 2:12 PM, Sudarshan S Chawathe <chaw at eip10.org> wrote:
> 
> There are several occurrences of tests in which the type field looks
> something like 'uelong+8' or 'uleshort/100'. (Both of these specific
> ones are in Magdir/riff.) The meaning of such suffixes to the type is
> easy to infer but it does not seem to be documented in 'man magic' (or I
> somehow missed it).

Documented.
> 
> On a related note, I also found some instances of the modifier 'f' for
> strings and I do not understand its semantics.  In particular several
> instances of 'string/fwt' appear in Magdir/commands, for instance.

That is the full word flag and it is documented.
> 
> Also, when types are suffixed by both length and other modifiers (e.g.,
> regex/30/c), is it valid to omit the second slash (e.g., regex/30c)?  My
> reading of the man page suggests no, but I found one instance of
> regex/30c in Magdir/games.
> 
Yes. slashes are optional. I clarified it in the documentation.


> I would be grateful for any clarifications or pointers.

Thanks for pointing them out!

christos 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 235 bytes
Desc: Message signed with OpenPGP
URL: <https://mailman.astron.com/pipermail/file/attachments/20250215/cbdc95ff/attachment.asc>


More information about the File mailing list