Magic-Mirror/radare2
1
0
Fork 0
mirror of https://github.com/radareorg/radare2.git synced 2024-11-27 07:00:30 +00:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

Update flash magic, reduce false positive and add a test

Browse Source
This commit is contained in:
Sylvain Pelissier 2022-09-16 10:15:33 +02:00 committed by pancake
parent 1944e59783
commit 7a4c50b406
2 changed files with 19 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
libr/magic/d/default/flash
View File

@ -7,16 +7,21 @@
#
# http://www.macromedia.com/software/flash/open/
#
0 string FWS Macromedia Flash data,
>3 byte x version %d
0 string FWS
>3 byte <11
>>3 byte >0 Macromedia Flash data, version %d
>>4 ulelong x file size (header included) %d
!:mime application/x-shockwave-flash
0 string CWS Macromedia Flash data (compressed),
0 string CWS
>3 byte <11
>>3 byte >0 Macromedia Flash data (compressed), version %d
>4 ulelong x file size (header included) %d
!:mime application/x-shockwave-flash
>3 byte x version %d
# From: Cal Peake <cp@absolutedigital.net>
0 string FLV Macromedia Flash Video
!:mime video/x-flv
#
# From Dave Wilson
0 string AGD4\xbe\xb8\xbb\xcb\x00 Macromedia Freehand 9 Document

9
test/db/cmd/cmd_search_magic Normal file
View File

@ -0,0 +1,9 @@
NAME=search magic
FILE=bins/swf/CurveBall.swf
CMDS=<<EOF
/m
EOF
EXPECT=<<EOF
0x00000000 1 Macromedia Flash data, version 5 file size (header included) 67765
EOF
RUN