Unverified Commit ffe3e925 by devttys0 Committed by GitHub

Merge pull request #366 from E3V3A/patch-1

Fix broken QNX4/6 detection
parents 701da0f9 c988c378
......@@ -681,8 +681,13 @@
>16 lelong x {strlen:%d}
>20 string x first file name: "{string}"
# QNX6 filesystem
0 string \xEB\x10\x90\x00 QNX6 filesystem
# QNX4 Filesystem
0 string \xEB\x10\x90\x00 QNX4 Boot Block
# QNX6 Filesystem
# https://www.forensicfocus.com/Forums/viewtopic/t=16846/
# Also known as the QNX6_SUPER_MAGIC (in linux sources)
0 string \x68\x19\x11\x22 QNX6 Super Block
# QNX IFS
0 string \xEB\x7E\xFF\x00 QNX IFS
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment