Added RAR 5.0 signature support

bec12a27 · devttys0 · d8f0edfc · bec12a27
Commit bec12a27 authored 6 years ago by devttys0
Show whitespace changes
Inline Side-by-side

Showing with 4 additions and 2 deletions

archives src/binwalk/magic/archives +4 -2

No files found.
--- a/src/binwalk/magic/archives
+++ b/src/binwalk/magic/archives
@@ -105,8 +105,10 @@
 >7      byte        >9          {invalid}
 >7      byte        <0          {invalid}

-# RAR archiver (http://kthoom.googlecode.com/hg/docs/unrar.html)
-0   string      \x52\x61\x72\x21\x1A\x07\x00        RAR archive data, first volume type:
+# RAR archiver (http://kthoom.googlecode.com/hg/docs/unrar.html, https://www.rarlab.com/technote.htm#rarsign)
+0   string      \x52\x61\x72\x21\x1A\x07            RAR archive data,
+>6  ubyte       0                                   version 4.x, first volume type:
+>6  ubyte       1                                   version 5.x, first volume type:
 >9  ubyte       <0x72                               {invalid}
 >9  ubyte       >0x7B                               {invalid}
 >9  ubyte       0x72                                MARK_HEAD