dnrops
/
radare2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add LZMA-BE magic signatures ##search

This commit is contained in:
radare 2020-03-31 21:17:02 +02:00 committed by GitHub
parent 657acb2f1f
commit 6379317f57
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
binr/r2r/r2r
View File

Binary file not shown.

8
libr/magic/d/default/compressed
View File

@ -109,6 +109,14 @@
>6 byte&0x10 0 single-block stream >6 byte&0x10 0 single-block stream
>6 byte&0x10 0x10 multi-block stream >6 byte&0x10 0x10 multi-block stream
## Classic LZMA signature
0 byte >0x5a
>0 byte <0x5e
>>5 belong 0xffffffff
>>>1 belong >0
>>>>1 belong <0xfffff
>>>>>1 belong x LZMA BE compressed data dictionary size: %d bytes,
#0 string \xff\x06\x00\x00\x73\x4e\x61\x50\x70\x59 Snappy compression, stream identifier #0 string \xff\x06\x00\x00\x73\x4e\x61\x50\x70\x59 Snappy compression, stream identifier
#0 string \x1f\x9d\x90 compress'd data, 16 bits #0 string \x1f\x9d\x90 compress'd data, 16 bits

10
test/new/db/cmd/cmd_search
View File

@ -1,3 +1,13 @@
NAME=/m lzma
FILE=../bins/other/hello-world.lzma
EXPECT=<<EOF
0x00000000 1 LZMA BE compressed data dictionary size: 32768 bytes,
EOF
CMDS=<<EOF
pm
EOF
RUN
NAME=/r push [imm] refs NAME=/r push [imm] refs
FILE=../bins/pe/x.dll FILE=../bins/pe/x.dll
EXPECT=<<EOF EXPECT=<<EOF