Updated tar signatures.

dc57a3fb · devttys0 · 12a9d6d4 · dc57a3fb · dc57a3fb
Commit dc57a3fb authored 11 years ago by devttys0
Hide whitespace changes
Inline Side-by-side

Showing with 18 additions and 0 deletions

binwalk src/binwalk/magic/binwalk +9 -0

archives src/magic/archives +9 -0

No files found.
--- a/src/binwalk/magic/binwalk
+++ b/src/binwalk/magic/binwalk
@@ -2,7 +2,16 @@

 # POSIX tar archives
 0	string		ustar\000		POSIX tar archive{offset-adjust:-257}
+>8	byte		!0
+>>8	string		x			\b, owner user name: "%.32s"
+>40	byte		!0
+>>40	string		x			\b, owner group name: "%.32s"
+
 0	string          ustar\040\040\000	POSIX tar archive (GNU){offset-adjust:-257}
+>8	byte		!0
+>>8	string		x			\b, owner user name: "%.32s"
+>40	byte		!0
+>>40	string		x			\b, owner group name: "%.32s"

 # JAR archiver (.j), this is the successor to ARJ, not Java's JAR (which is essentially ZIP)
 0       string  \x1aJar\x1b JAR (ARJ Software, Inc.) archive data{offset-adjust:-14}

--- a/src/magic/archives
+++ b/src/magic/archives
@@ -2,7 +2,16 @@

 # POSIX tar archives
 0	string		ustar\000		POSIX tar archive{offset-adjust:-257}
+>8	byte		!0
+>>8	string		x			\b, owner user name: "%.32s"
+>40	byte		!0
+>>40	string		x			\b, owner group name: "%.32s"
+
 0	string          ustar\040\040\000	POSIX tar archive (GNU){offset-adjust:-257}
+>8	byte		!0
+>>8	string		x			\b, owner user name: "%.32s"
+>40	byte		!0
+>>40	string		x			\b, owner group name: "%.32s"

 # JAR archiver (.j), this is the successor to ARJ, not Java's JAR (which is essentially ZIP)
 0       string  \x1aJar\x1b JAR (ARJ Software, Inc.) archive data{offset-adjust:-14}