From a912500a9e6ec6f8db481b0a33f74129a59e677b Mon Sep 17 00:00:00 2001
From: Craig Heffner <heffnercj@gmail.com>
Date: Tue, 15 Nov 2016 12:10:38 -0500
Subject: [PATCH] Added false positive detection for 'ROMFS v9.0' file system
---
src/binwalk/magic/filesystems | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/src/binwalk/magic/filesystems b/src/binwalk/magic/filesystems
index e6d038f..fc371f9 100644
--- a/src/binwalk/magic/filesystems
+++ b/src/binwalk/magic/filesystems
@@ -542,10 +542,12 @@
# ftp://ftp.dlink.eu/Products/dir/dir-600/driver_software/DIR-600_fw_revC1_3-05B15__all_en_20120216.zip
0x10 string ROMFS\x20v D-Link ROMFS filesystem,
>0x17 string x version %s,
+>0 string !\x2EmoR
+>>0 string !Rom\x2E {invalid} unknown endianess
>0 string \x2EmoR little endian,
>>8 lelong x size: <= %d
>>8 lelong-0x20 x {jump:%d}
->0 string Rom\x2E big endian
+>0 string Rom\x2E big endian,
>>8 belong x size: <= %d
>>8 belong-0x20 x {jump:%d}
--
libgit2 0.26.0