[310] | 1 | /* SAMHAIN file system integrity testing */
|
---|
| 2 | /* Copyright (C) 2011 Rainer Wichmann */
|
---|
| 3 | /* */
|
---|
| 4 | /* This program is free software; you can redistribute it */
|
---|
| 5 | /* and/or modify */
|
---|
| 6 | /* it under the terms of the GNU General Public License as */
|
---|
| 7 | /* published by */
|
---|
| 8 | /* the Free Software Foundation; either version 2 of the License, or */
|
---|
| 9 | /* (at your option) any later version. */
|
---|
| 10 | /* */
|
---|
| 11 | /* This program is distributed in the hope that it will be useful, */
|
---|
| 12 | /* but WITHOUT ANY WARRANTY; without even the implied warranty of */
|
---|
| 13 | /* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the */
|
---|
| 14 | /* GNU General Public License for more details. */
|
---|
| 15 | /* */
|
---|
| 16 | /* You should have received a copy of the GNU General Public License */
|
---|
| 17 | /* along with this program; if not, write to the Free Software */
|
---|
| 18 | /* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
|
---|
| 19 |
|
---|
| 20 | #include "config_xor.h"
|
---|
| 21 |
|
---|
| 22 | #ifndef NULL
|
---|
| 23 | #if !defined(__cplusplus)
|
---|
| 24 | #define NULL ((void*)0)
|
---|
| 25 | #else
|
---|
| 26 | #define NULL (0)
|
---|
| 27 | #endif
|
---|
| 28 | #endif
|
---|
| 29 |
|
---|
| 30 | #if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
|
---|
| 31 |
|
---|
| 32 | #include "samhain.h"
|
---|
| 33 | #include "sh_mem.h"
|
---|
| 34 | #include "sh_error_min.h"
|
---|
| 35 | #include "sh_utils.h"
|
---|
| 36 |
|
---|
| 37 | #define FIL__ _("sh_filetype.c")
|
---|
| 38 |
|
---|
| 39 | #include <string.h>
|
---|
| 40 | #include <stdlib.h>
|
---|
| 41 | #include <ctype.h>
|
---|
| 42 |
|
---|
| 43 | /* #define SH_FILE_MAIN 1 */
|
---|
| 44 | #ifdef SH_FILE_MAIN
|
---|
| 45 | #include <stdio.h>
|
---|
| 46 | #define _(a) a
|
---|
| 47 | #define N_(a) a
|
---|
| 48 | #define sl_strlcpy strncpy
|
---|
| 49 | #endif
|
---|
| 50 |
|
---|
| 51 | #define SH_FTYPE_MAX 32
|
---|
| 52 |
|
---|
| 53 | /* List of filetype description, in the format:
|
---|
| 54 | * offset : type(0=text, 1=binary) : length(if binary) : G1 : G2 : G3 : Name : Teststring
|
---|
| 55 | *
|
---|
| 56 | * This list is mostly taken from the 'filetype' library by Paul L Daniels.
|
---|
| 57 | *
|
---|
| 58 | * Copyright (c) 2003, PLD
|
---|
| 59 | * All rights reserved.
|
---|
| 60 | *
|
---|
| 61 | * Redistribution and use in source and binary forms, with or
|
---|
| 62 | * without modification, are permitted provided that the
|
---|
| 63 | * following conditions are met:
|
---|
| 64 | *
|
---|
| 65 | * * Redistributions of source code must retain the above
|
---|
| 66 | * copyright notice, this list of conditions and the following
|
---|
| 67 | * disclaimer.
|
---|
| 68 | *
|
---|
| 69 | * * Redistributions in binary form must reproduce the above
|
---|
| 70 | * copyright notice, this list of conditions and the following
|
---|
| 71 | * disclaimer in the documentation and/or other materials provided
|
---|
| 72 | * with the distribution.
|
---|
| 73 | *
|
---|
| 74 | * * Neither the name of the PLD nor the names of its contributors
|
---|
| 75 | * may be used to endorse or promote products derived from this software
|
---|
| 76 | * without specific prior written permission.
|
---|
| 77 | *
|
---|
| 78 | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
---|
| 79 | * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
---|
| 80 | * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
---|
| 81 | * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
---|
| 82 | * COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
|
---|
| 83 | * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
|
---|
| 84 | * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
---|
| 85 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
|
---|
| 86 | * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
---|
| 87 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
|
---|
| 88 | * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
---|
| 89 | * POSSIBILITY OF SUCH DAMAGE.
|
---|
| 90 | */
|
---|
| 91 |
|
---|
| 92 |
|
---|
| 93 | char * sh_ftype_list[] = {
|
---|
| 94 |
|
---|
| 95 | N_("6:0:0:IMAGE:COMPRESSED:JPG:JFIF Jpeg:JFIF"),
|
---|
| 96 | N_("0:0:0:IMAGE:COMPRESSED:PNG:PNG:=89PNG=0d=0a=1a=0a"),
|
---|
| 97 | N_("0:0:0:IMAGE:COMPRESSED:JPG:JFIF Jpeg:=FF=D8=FF"),
|
---|
| 98 | N_("0:0:0:IMAGE:COMPRESSED:GIF:GIF:GIF97a"),
|
---|
| 99 | N_("0:0:0:IMAGE:COMPRESSED:GIF:GIF:GIF89a"),
|
---|
| 100 | N_("0:0:0:IMAGE:COMPRESSED:GIF:GIF:GIF87a"),
|
---|
| 101 | N_("0:1:4:IMAGE:COMPRESSED:TIFF:TIFF-LE:II=2A=00"),
|
---|
| 102 | N_("0:1:4:IMAGE:COMPRESSED:TIFF:TIFF-BE:MM=00=2A"),
|
---|
| 103 | N_("0:1:2:IMAGE:COMPRESSED:PCX:PCX25:=0A=00"),
|
---|
| 104 | N_("0:1:2:IMAGE:COMPRESSED:PCX:PCX28WP:=0A=02"),
|
---|
| 105 | N_("0:1:2:IMAGE:COMPRESSED:PCX:PCX28NP:=0A=03"),
|
---|
| 106 | N_("0:1:2:IMAGE:COMPRESSED:PCX:PCX30:=0A=05"),
|
---|
| 107 | N_("0:0:0:IMAGE:RAW:BMP:Bitmap:BM"),
|
---|
| 108 | N_("0:0:0:IMAGE:RAW:XPM:XPM:/* XPM */"),
|
---|
| 109 | N_("0:0:0:IMAGE:SPECIAL:AUTOCAD:DWT:AC=31=30=31"),
|
---|
| 110 | N_("0:0:0:IMAGE:SPECIAL:AUTOCAD:DWF:(DWF V"),
|
---|
| 111 | N_("0:0:0:IMAGE:SPECIAL:AUTOCAD:WMF:=D7=CD=C6=9A"),
|
---|
| 112 | N_("0:0:0:IMAGE:SPECIAL:AUTOCAD:DWG:AC10"),
|
---|
| 113 | N_("8:0:0:IMAGE:SPECIAL:COREL:CorelDraw:CDR"),
|
---|
| 114 | N_("0:0:0:IMAGE:SPECIAL:FITS:Fits file:SIMPLE=20=20="),
|
---|
| 115 | N_("1536:0:0:IMAGE:SPECIAL:VISIO:VisioDraw:Visio"),
|
---|
| 116 | N_("128:0:0:IMAGE:SPECIAL:DICM:DICOM medical:DICM"),
|
---|
| 117 | N_("0:0:0:IMAGE:SPECIAL:PHS:Photoshop:8BPS"),
|
---|
| 118 | N_("0:0:0:IMAGE:SPECIAL:XCF:Gimp XCF:gimp xcf"),
|
---|
| 119 | N_("0:0:0:MOVIE:COMPRESSED:RIFF:RIFF/AVI Movie:RIFF"),
|
---|
| 120 | N_("0:0:0:MOVIE:RAW:MOV:SGI Movie:MOVI:.mov SGI Movie"),
|
---|
| 121 | N_("0:1:4:MOVIE:COMPRESSED:MPG:Mpeg 2:=00=00=01=BA"),
|
---|
| 122 | N_("0:1:4:MOVIE:COMPRESSED:MPG:Mpeg 2:=00=00=01=B3"),
|
---|
| 123 | N_("4:0:0:MOVIE:COMPRESSED:QT:QuickTime:moov"),
|
---|
| 124 | N_("4:0:0:MOVIE:COMPRESSED:QT:QuickTime:mdat"),
|
---|
| 125 | N_("36:0:0:MOVIE:COMPRESSED:QT:QuickTime:moov"),
|
---|
| 126 | N_("36:0:0:MOVIE:COMPRESSED:QT:QuickTime:mdat"),
|
---|
| 127 | N_("68:0:0:MOVIE:COMPRESSED:QT:QuickTime:moov"),
|
---|
| 128 | N_("68:0:0:MOVIE:COMPRESSED:QT:QuickTime:mdat"),
|
---|
| 129 | N_("0:1:3:MOVIE:COMPRESSED:FLI:FLIC animation:=00=11=AF"),
|
---|
| 130 | N_("0:0:0:MOVIE:COMPRESSED:FLASH:Flash data:FWS"),
|
---|
| 131 | N_("0:0:0:MOVIE:COMPRESSED:FLASH:Flash data:CWS"),
|
---|
| 132 | N_("0:0:0:MOVIE:COMPRESSED:FLASH:Flash video:FLV"),
|
---|
| 133 | N_("0:0:0:MOVIE:COMPRESSED:WMV:WMV:=30=26=B2=75=8E=66=CF"),
|
---|
| 134 | N_("0:0:0:AUDIO:RAW:SND:Sun Audio:.snd"),
|
---|
| 135 | N_("0:0:0:AUDIO:RAW:EMOD:EMOD:Mod"),
|
---|
| 136 | N_("1080:0:0:AUDIO:RAW:MOD:SoundTracker (.M.K):.M.K"),
|
---|
| 137 | N_("1080:0:0:AUDIO:RAW:MOD:SoundTracker (M.K.):M.K."),
|
---|
| 138 | N_("1080:0:0:AUDIO:RAW:MOD:NoiseTracker:N.T."),
|
---|
| 139 | N_("1080:0:0:AUDIO:RAW:MOD:SoundTracker (M!K!):M!K!"),
|
---|
| 140 | N_("1080:0:0:AUDIO:RAW:MOD:SoundTracker (M&K!):M&K!"),
|
---|
| 141 | N_("8:0:0:AUDIO:RAW:WAVE:Wave:WAVE"),
|
---|
| 142 | N_("0:1:4:AUDIO:RAW:DEC:DEC-Audio:=00=64=73=2E"),
|
---|
| 143 | N_("0:0:0:AUDIO:STANDARD:MIDI:Midi:MThd"),
|
---|
| 144 | N_("0:0:0:AUDIO:COMPRESSED:REAL:RealMedia:.RMF"),
|
---|
| 145 | N_("0:0:0:AUDIO:COMPRESSED:OGG:Ogg Vorbis:OggS"),
|
---|
| 146 | N_("0:0:0:AUDIO:COMPRESSED:FLAC:Flac:fLaC"),
|
---|
| 147 | N_("0:1:5:AUDIO:COMPRESSED:MP3:MP3 Audio:=49=44=33=02=00"),
|
---|
| 148 | N_("0:1:5:AUDIO:COMPRESSED:MP3:MP3 Audio:=49=44=33=03=00"),
|
---|
| 149 | N_("0:1:5:AUDIO:COMPRESSED:MP3:MP3 Audio:=49=44=33=04=00"),
|
---|
| 150 | N_("0:1:2:AUDIO:COMPRESSED:MP3:MP3 Audio:=ff=fb"),
|
---|
| 151 | N_("0:1:2:AUDIO:COMPRESSED:MP3:MP3 Audio:=ff=fa"),
|
---|
| 152 | N_("2:0:0:ARCHIVE:COMPRESSED:LHA:Lha 0:-lh0-"),
|
---|
| 153 | N_("2:0:0:ARCHIVE:COMPRESSED:LHA:Lha 1:-lh1-"),
|
---|
| 154 | N_("2:0:0:ARCHIVE:COMPRESSED:LHA:Lha 4:-lz4-"),
|
---|
| 155 | N_("2:0:0:ARCHIVE:COMPRESSED:LHA:Lha z5:-lz5-"),
|
---|
| 156 | N_("2:0:0:ARCHIVE:COMPRESSED:LHA:Lha 5:-lh5-"),
|
---|
| 157 | N_("0:0:0:ARCHIVE:COMPRESSED:RAR:RarArchive:Rar!"),
|
---|
| 158 | N_("0:0:0:ARCHIVE:COMPRESSED:ZIP:PkZip:PK=03=04"),
|
---|
| 159 | N_("0:0:0:ARCHIVE:COMPRESSED:7Z:7-Zip:=37=7A=BC=AF=27=1C"),
|
---|
| 160 | N_("0:0:0:ARCHIVE:COMPRESSED:COMPRESS:Compress:=1F=89"),
|
---|
| 161 | N_("0:0:0:ARCHIVE:COMPRESSED:GZIP:Gzip:=1F=8B"),
|
---|
| 162 | N_("0:0:0:ARCHIVE:COMPRESSED:BZIP2:Bzip2:BZh"),
|
---|
| 163 | N_("0:0:0:ARCHIVE:COMPRESSED:ARJ:ARJ:=60=ea"),
|
---|
| 164 | N_("0:0:0:ARCHIVE:COMPRESSED:ARJ:ARJ:=ea=60"),
|
---|
| 165 | N_("0:0:0:ARCHIVE:COMPRESSED:HPAK:HPack:HPAK"),
|
---|
| 166 | N_("0:0:0:ARCHIVE:COMPRESSED:JAM:Jam:=E9,=01JAM"),
|
---|
| 167 | N_("0:0:0:ARCHIVE:COMPRESSED:SQUISH:Squish:SQSH"),
|
---|
| 168 | N_("0:1:8:ARCHIVE:COMPRESSED:CAB:MS Cabinet:MSCF=00=00=00=00"),
|
---|
| 169 | N_("20:0:0:ARCHIVE:COMPRESSED:ZOO:Zoo:=FD=C4=A7=DC"),
|
---|
| 170 | N_("0:0:0:ARCHIVE:COMPRESSED:XPK:Amiga XPK Archive:XPKF"),
|
---|
| 171 | N_("0:0:0:ARCHIVE:PACKAGE:RPM:RPM:=ED=AB=EE=DB"),
|
---|
| 172 | N_("0:0:0:ARCHIVE:PACKAGE:DEB:DEB:!<arch>=0A""debian"),
|
---|
| 173 | N_("0:0:0:ARCHIVE:UNIX:AR:AR:!<arch>"),
|
---|
| 174 | N_("0:0:0:ARCHIVE:UNIX:AR:AR:<ar>"),
|
---|
| 175 | N_("257:1:8:ARCHIVE:UNIX:TAR:TAR:ustar=20=20=00"),
|
---|
| 176 | N_("257:1:6:ARCHIVE:UNIX:TAR:TAR:ustar=00"),
|
---|
| 177 | N_("0:0:0:LIBRARY:JAVA:CLASS:Java:=CA=FE=BA=BE"),
|
---|
| 178 | N_("2108:0:0:DOCUMENT:OFFICE:WORD:Word v5:MSWordDoc"),
|
---|
| 179 | N_("2112:0:0:DOCUMENT:OFFICE:WORD:Word v5:MSWordDoc"),
|
---|
| 180 | N_("2080:0:0:DOCUMENT:OFFICE:EXCEL:Excel v4:Microsoft Excel"),
|
---|
| 181 | N_("2080:0:0:DOCUMENT:OFFICE:WORD:MS Word:Microsoft Word"),
|
---|
| 182 | N_("0:0:0:DOCUMENT:OFFICE:WORD:Word:=94=A6=2E"),
|
---|
| 183 | N_("512:1:19:DOCUMENT:OFFICE:WORD:Word:R=00o=00o=00t=00 =00""E=00n=00t=00r=00y"),
|
---|
| 184 | N_("0:1:9:DOCUMENT:OFFICE:ALL:MSOffice:=D0=CF=11=E0=A1=B1=1A=E1=00"),
|
---|
| 185 | N_("0:0:0:DOCUMENT:ADOBE:PDF:PortableDocument:%PDF-"),
|
---|
| 186 | N_("0:0:0:DOCUMENT:ADOBE:EPS:EncapsulatedPS:%!PS-ADOBE EPS"),
|
---|
| 187 | N_("0:0:0:DOCUMENT:STANDARD:RTF:RichText:{\\rtf"),
|
---|
| 188 | N_("6:1:4:DOCUMENT:STANDARD:RTF:RichText Compressed:=00=00LZ"),
|
---|
| 189 | N_("6:0:0:DOCUMENT:ID:VCARD:VCARD:vcard"),
|
---|
| 190 | N_("0:0:0:EXECUTABLE:DOS:EXE:DosExe:MZ"),
|
---|
| 191 | N_("0:0:0:EXECUTABLE:DOS:EXE:DosExe:LZ"),
|
---|
| 192 | N_("0:0:0:EXECUTABLE:DOS:COM:DosCom 1:=E9"),
|
---|
| 193 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Bourne:#!/bin/sh"),
|
---|
| 194 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Bourne:#! /bin/sh"),
|
---|
| 195 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Bourne:#!/bin/bash"),
|
---|
| 196 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Bourne:#! /bin/bash"),
|
---|
| 197 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Bourne:#!/usr/bin/bash"),
|
---|
| 198 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Bourne:#! /usr/bin/bash"),
|
---|
| 199 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Csh:#!/usr/bin/csh"),
|
---|
| 200 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Csh:#! /usr/bin/csh"),
|
---|
| 201 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Csh:#!/bin/csh"),
|
---|
| 202 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Csh:#! /bin/csh"),
|
---|
| 203 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Korn:#! /usr/bin/ksh"),
|
---|
| 204 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Korn:#!/usr/bin/ksh"),
|
---|
| 205 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Korn:#! /bin/ksh"),
|
---|
| 206 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Korn:#!/bin/ksh"),
|
---|
| 207 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Tenex:#!/usr/bin/tcsh"),
|
---|
| 208 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Tenex:#! /usr/bin/tcsh"),
|
---|
| 209 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Tenex:#!/bin/tcsh"),
|
---|
| 210 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Tenex:#! /bin/tcsh"),
|
---|
| 211 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Zsh:#!/usr/bin/zsh"),
|
---|
| 212 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Zsh:#! /usr/bin/zsh"),
|
---|
| 213 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Zsh:#!/bin/zsh"),
|
---|
| 214 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Zsh:#! /bin/zsh"),
|
---|
| 215 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:ash:#!/usr/bin/ash"),
|
---|
| 216 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:ash:#! /usr/bin/ash"),
|
---|
| 217 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:ash:#!/bin/ash"),
|
---|
| 218 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:ash:#! /bin/ash"),
|
---|
| 219 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:awk:#!/usr/bin/nawk"),
|
---|
| 220 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:awk:#! /usr/bin/nawk"),
|
---|
| 221 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:awk:#!/bin/nawk"),
|
---|
| 222 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:awk:#! /bin/nawk"),
|
---|
| 223 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:awk:#!/bin/gawk"),
|
---|
| 224 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:awk:#! /bin/gawk"),
|
---|
| 225 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:awk:#!/bin/awk"),
|
---|
| 226 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:awk:#! /bin/awk"),
|
---|
| 227 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:perl:#!/usr/bin/perl"),
|
---|
| 228 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:perl:#! /usr/bin/perl"),
|
---|
| 229 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:perl:#!/bin/perl"),
|
---|
| 230 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:perl:#! /bin/perl"),
|
---|
| 231 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Shell script:#!/"),
|
---|
| 232 | N_("0:0:0:EXECUTABLE:UNIX:SHELL:Shell script:#! /"),
|
---|
| 233 | N_("0:0:0:EXECUTABLE:UNIX:ELF:Linux ELF32:=7f""ELF=01"),
|
---|
| 234 | N_("0:0:0:EXECUTABLE:UNIX:ELF:Linux ELF:=7f""ELF=02"),
|
---|
| 235 | N_("0:0:0:EXECUTABLE:DOS:COM:DosCom 2:=8c"),
|
---|
| 236 | N_("0:0:0:EXECUTABLE:DOS:COM:DosCom 3:=eb"),
|
---|
| 237 | N_("0:0:0:EXECUTABLE:DOS:COM:DosCom 4:=b8"),
|
---|
| 238 | N_("0:1:4:EXECUTABLE:AMIGAOS:EXECUTABLE:AmigaOS Executable:=00=00=03=F3"),
|
---|
| 239 | N_("0:1:20:DATABASE:ANY:ACCESS:MSAccess:=00=01=00=00Standard=20Jet=20""DB=00"),
|
---|
| 240 | N_("0:1:2:DATABASE:ANY:MYSQL:MySQL database:=fe=01"),
|
---|
| 241 | N_("0:1:4:DATABASE:ANY:MYSQL:MySQL database:=fe=fe=03=00"),
|
---|
| 242 | N_("0:1:4:DATABASE:ANY:MYSQL:MySQL database:=fe=fe=07=00"),
|
---|
| 243 | N_("0:1:4:DATABASE:ANY:MYSQL:MySQL database:=fe=fe=05=00"),
|
---|
| 244 | N_("0:1:4:DATABASE:ANY:MYSQL:MySQL database:=fe=fe=06=00"),
|
---|
| 245 |
|
---|
| 246 | NULL,
|
---|
| 247 | NULL,
|
---|
| 248 | NULL,
|
---|
| 249 | NULL,
|
---|
| 250 |
|
---|
| 251 | NULL,
|
---|
| 252 | NULL,
|
---|
| 253 | NULL,
|
---|
| 254 | NULL,
|
---|
| 255 |
|
---|
| 256 | NULL,
|
---|
| 257 | NULL,
|
---|
| 258 | NULL,
|
---|
| 259 | NULL,
|
---|
| 260 |
|
---|
| 261 | NULL,
|
---|
| 262 | NULL,
|
---|
| 263 | NULL,
|
---|
| 264 | NULL,
|
---|
| 265 |
|
---|
| 266 | NULL,
|
---|
| 267 | };
|
---|
| 268 |
|
---|
| 269 | static unsigned int sh_ftype_def = 0;
|
---|
| 270 |
|
---|
| 271 | #define SH_FTYPE_ADD 16
|
---|
| 272 |
|
---|
| 273 | struct sh_ftype_rec {
|
---|
| 274 | size_t offset;
|
---|
| 275 | size_t length;
|
---|
| 276 | char pattern[SH_FTYPE_MAX];
|
---|
| 277 |
|
---|
| 278 | char type[SH_FTYPE_MAX];
|
---|
| 279 | };
|
---|
| 280 |
|
---|
| 281 |
|
---|
| 282 | struct sh_ftype_rec ** sh_ftype_arr = NULL;
|
---|
| 283 | static unsigned int sh_ftype_nn = 0;
|
---|
| 284 |
|
---|
| 285 | #if !defined(SH_FILE_MAIN)
|
---|
| 286 |
|
---|
| 287 | static unsigned int sh_ftype_usr = 0;
|
---|
| 288 |
|
---|
| 289 | extern char * unquote_string (const char * str, size_t len);
|
---|
| 290 |
|
---|
| 291 | int sh_restrict_add_ftype(const char * str)
|
---|
| 292 | {
|
---|
| 293 | size_t len;
|
---|
| 294 | char * cond;
|
---|
| 295 |
|
---|
| 296 | if (sh_ftype_def == 0)
|
---|
| 297 | {
|
---|
| 298 | while(sh_ftype_list[sh_ftype_def] != NULL) ++sh_ftype_def;
|
---|
| 299 | }
|
---|
| 300 |
|
---|
| 301 | if (!str)
|
---|
| 302 | {
|
---|
| 303 | if (sh_ftype_usr > 0)
|
---|
| 304 | {
|
---|
| 305 | unsigned int i, j = sh_ftype_def;
|
---|
| 306 |
|
---|
| 307 | for (i = 0; i < sh_ftype_usr; ++i)
|
---|
| 308 | {
|
---|
| 309 | SH_FREE(sh_ftype_list[j+i]);
|
---|
| 310 | sh_ftype_list[j+i] = NULL;
|
---|
| 311 | }
|
---|
| 312 | sh_ftype_usr = 0;
|
---|
| 313 | }
|
---|
| 314 |
|
---|
| 315 | if (sh_ftype_arr)
|
---|
| 316 | {
|
---|
| 317 | unsigned int i = 0;
|
---|
| 318 |
|
---|
| 319 | while(sh_ftype_arr[i] != NULL)
|
---|
| 320 | {
|
---|
| 321 | SH_FREE(sh_ftype_arr[i]);
|
---|
| 322 | ++i;
|
---|
| 323 | }
|
---|
| 324 | SH_FREE(sh_ftype_arr);
|
---|
| 325 | sh_ftype_arr = NULL;
|
---|
| 326 | }
|
---|
| 327 | }
|
---|
| 328 | else if (sh_ftype_usr < SH_FTYPE_ADD)
|
---|
| 329 | {
|
---|
| 330 | len = strlen(str);
|
---|
| 331 | cond = unquote_string(str, len);
|
---|
| 332 | sh_ftype_list[sh_ftype_def+sh_ftype_usr] = cond;
|
---|
| 333 | ++sh_ftype_usr;
|
---|
| 334 | }
|
---|
| 335 | else
|
---|
| 336 | {
|
---|
| 337 | return -1;
|
---|
| 338 | }
|
---|
| 339 | return 0;
|
---|
| 340 | }
|
---|
| 341 |
|
---|
| 342 |
|
---|
| 343 | #endif
|
---|
| 344 |
|
---|
| 345 |
|
---|
| 346 | static int init_record(unsigned int n, char * define,
|
---|
| 347 | struct sh_ftype_rec * record)
|
---|
| 348 | {
|
---|
| 349 | unsigned int offset, dtype, length, i = 0, xn = 0;
|
---|
| 350 | char type[SH_FTYPE_MAX];
|
---|
| 351 | char pattern[SH_FTYPE_MAX];
|
---|
| 352 |
|
---|
| 353 | char * end;
|
---|
| 354 | char * start;
|
---|
| 355 |
|
---|
| 356 | offset = strtoul(define, &end, 0);
|
---|
| 357 | if (*end != ':')
|
---|
| 358 | return -1;
|
---|
| 359 |
|
---|
| 360 | start = end; ++start;
|
---|
| 361 | dtype = strtoul(start, &end, 0);
|
---|
| 362 | if (*end != ':')
|
---|
| 363 | return -1;
|
---|
| 364 |
|
---|
| 365 | start = end; ++start;
|
---|
| 366 | length = strtoul(start, &end, 0);
|
---|
| 367 | if (*end != ':')
|
---|
| 368 | return -1;
|
---|
| 369 |
|
---|
| 370 | start = end; ++start;
|
---|
| 371 |
|
---|
| 372 | while (*start && (i < sizeof(type)))
|
---|
| 373 | {
|
---|
| 374 | type[i] = *start; ++start;
|
---|
| 375 | if (type[i] == ':')
|
---|
| 376 | ++xn;
|
---|
| 377 | if (xn == 3)
|
---|
| 378 | {
|
---|
| 379 | type[i] = '\0';
|
---|
| 380 | break;
|
---|
| 381 | }
|
---|
| 382 | ++i;
|
---|
| 383 | }
|
---|
| 384 | if (xn != 3)
|
---|
| 385 | return -1;
|
---|
| 386 |
|
---|
| 387 | start = strchr(start, ':');
|
---|
| 388 |
|
---|
| 389 | if (!start)
|
---|
| 390 | return -1;
|
---|
| 391 |
|
---|
| 392 | ++start;
|
---|
| 393 |
|
---|
| 394 | if (dtype == 0)
|
---|
| 395 | {
|
---|
| 396 | sl_strlcpy(pattern, start, sizeof(pattern));
|
---|
| 397 | length = strlen(pattern);
|
---|
| 398 | }
|
---|
| 399 | else if (length <= sizeof(pattern))
|
---|
| 400 | {
|
---|
| 401 | memcpy(pattern, start, length);
|
---|
| 402 | }
|
---|
| 403 | else
|
---|
| 404 | {
|
---|
| 405 | return -1;
|
---|
| 406 | }
|
---|
| 407 |
|
---|
| 408 | for (i = 0; i < n; ++i)
|
---|
| 409 | {
|
---|
| 410 | if (sh_ftype_arr[i]->length <= length &&
|
---|
| 411 | sh_ftype_arr[i]->offset == offset)
|
---|
| 412 | {
|
---|
| 413 | if (0 == memcmp(sh_ftype_arr[i]->pattern, pattern,
|
---|
| 414 | sh_ftype_arr[i]->length))
|
---|
| 415 | {
|
---|
| 416 | #ifdef SH_FILE_MAIN
|
---|
| 417 | fprintf(stderr,
|
---|
| 418 | "Pattern %d (%s / %s) override by earlier pattern %d (%s / %s)\n",
|
---|
| 419 | n, type, pattern,
|
---|
| 420 | i, sh_ftype_arr[i]->type, sh_ftype_arr[i]->pattern);
|
---|
| 421 | #else
|
---|
| 422 | char errbuf[256];
|
---|
| 423 |
|
---|
| 424 | sl_snprintf(errbuf, sizeof(errbuf),
|
---|
| 425 | _("Pattern %d (%s) override by earlier pattern %d (%s)"),
|
---|
| 426 | n, type,
|
---|
| 427 | i, sh_ftype_arr[i]->type);
|
---|
| 428 | sh_error_handle((-1), FIL__, __LINE__, -1, MSG_E_SUBGEN,
|
---|
| 429 | errbuf,
|
---|
| 430 | _("init_record"));
|
---|
| 431 | #endif
|
---|
| 432 | }
|
---|
| 433 | }
|
---|
| 434 | }
|
---|
| 435 |
|
---|
| 436 |
|
---|
| 437 | record->offset = offset;
|
---|
| 438 | record->length = length;
|
---|
| 439 | memcpy(record->pattern, pattern, length);
|
---|
| 440 | sl_strlcpy(record->type, type, SH_FTYPE_MAX);
|
---|
| 441 |
|
---|
| 442 | return 0;
|
---|
| 443 | }
|
---|
| 444 |
|
---|
| 445 | static void file_arr_init()
|
---|
| 446 | {
|
---|
| 447 | unsigned int i, nn = 0;
|
---|
| 448 |
|
---|
| 449 | if (sh_ftype_def == 0)
|
---|
| 450 | {
|
---|
| 451 | while(sh_ftype_list[sh_ftype_def] != NULL) ++sh_ftype_def;
|
---|
| 452 | }
|
---|
| 453 |
|
---|
| 454 | while (sh_ftype_list[nn] != NULL) ++nn;
|
---|
| 455 |
|
---|
| 456 | #ifdef SH_FILE_MAIN
|
---|
| 457 | printf("%d definitions found, defined = %d\n", nn, sh_ftype_def);
|
---|
| 458 | #endif
|
---|
| 459 |
|
---|
| 460 | #ifdef SH_FILE_MAIN
|
---|
[454] | 461 | sh_ftype_arr = calloc((nn+1), sizeof(struct sh_ftype_rec *));
|
---|
[310] | 462 | #else
|
---|
| 463 | sh_ftype_arr = SH_ALLOC((nn+1) * sizeof(struct sh_ftype_rec *));
|
---|
| 464 | #endif
|
---|
| 465 |
|
---|
| 466 | for(i = 0; i < nn; i++)
|
---|
| 467 | {
|
---|
| 468 | #ifdef SH_FILE_MAIN
|
---|
[454] | 469 | sh_ftype_arr[i] = calloc(1, sizeof(struct sh_ftype_rec));
|
---|
[310] | 470 | #else
|
---|
| 471 | sh_ftype_arr[i] = SH_ALLOC(sizeof(struct sh_ftype_rec));
|
---|
| 472 | #endif
|
---|
| 473 |
|
---|
| 474 | memset(sh_ftype_arr[i], 0, sizeof(struct sh_ftype_rec));
|
---|
| 475 | if (i < sh_ftype_def)
|
---|
| 476 | {
|
---|
| 477 | char * p = _(sh_ftype_list[i]);
|
---|
| 478 | size_t len = strlen(p);
|
---|
| 479 | char * cond = unquote_string(p, len);
|
---|
| 480 |
|
---|
| 481 | init_record(i, cond, sh_ftype_arr[i]);
|
---|
| 482 | }
|
---|
| 483 | else
|
---|
| 484 | {
|
---|
| 485 | init_record(i, sh_ftype_list[i], sh_ftype_arr[i]);
|
---|
| 486 | }
|
---|
| 487 | }
|
---|
| 488 | sh_ftype_arr[nn] = NULL;
|
---|
| 489 | sh_ftype_nn = nn;
|
---|
| 490 |
|
---|
| 491 | return;
|
---|
| 492 | }
|
---|
| 493 |
|
---|
| 494 | static char * check_filetype(char * filetype,
|
---|
| 495 | const char * buffer, size_t buflen)
|
---|
| 496 | {
|
---|
| 497 | unsigned int i;
|
---|
| 498 | const char * p;
|
---|
| 499 |
|
---|
| 500 | if (!sh_ftype_arr)
|
---|
| 501 | {
|
---|
| 502 | file_arr_init();
|
---|
| 503 | }
|
---|
| 504 |
|
---|
| 505 | for (i = 0; i < sh_ftype_nn; ++i)
|
---|
| 506 | {
|
---|
| 507 | if (sh_ftype_arr[i]->length > 0 &&
|
---|
| 508 | (sh_ftype_arr[i]->length + sh_ftype_arr[i]->offset) < buflen)
|
---|
| 509 | {
|
---|
| 510 | p = &buffer[sh_ftype_arr[i]->offset];
|
---|
| 511 |
|
---|
| 512 | if (0 == memcmp(p, sh_ftype_arr[i]->pattern, sh_ftype_arr[i]->length))
|
---|
| 513 | {
|
---|
| 514 | sl_strlcpy(filetype, sh_ftype_arr[i]->type, SH_FTYPE_MAX);
|
---|
| 515 | return (filetype);
|
---|
| 516 | }
|
---|
| 517 | }
|
---|
| 518 | }
|
---|
| 519 |
|
---|
| 520 | if (buflen > 0) {
|
---|
| 521 |
|
---|
| 522 | int flag = 0;
|
---|
| 523 |
|
---|
| 524 | p = buffer;
|
---|
| 525 | for (i = 0; i < buflen; ++i) {
|
---|
| 526 | if (*p == '\0')
|
---|
| 527 | {
|
---|
| 528 | sl_strlcpy(filetype, _("FILE:BINARY:UNKNOWN"), SH_FTYPE_MAX);
|
---|
| 529 | goto out;
|
---|
| 530 | }
|
---|
| 531 | else if (!isgraph((int)*p) && !isspace((int)*p))
|
---|
| 532 | {
|
---|
| 533 | flag = 1;
|
---|
| 534 | }
|
---|
| 535 | ++p;
|
---|
| 536 | }
|
---|
| 537 | if (flag == 0)
|
---|
| 538 | {
|
---|
| 539 | sl_strlcpy(filetype, _("FILE:TEXT:ASCII"), SH_FTYPE_MAX);
|
---|
| 540 | goto out;
|
---|
| 541 | }
|
---|
| 542 | }
|
---|
| 543 | sl_strlcpy(filetype, _("FILE:UNKNOWN:UNKNOWN"), SH_FTYPE_MAX);
|
---|
| 544 | out:
|
---|
| 545 | return filetype;
|
---|
| 546 | }
|
---|
| 547 |
|
---|
| 548 | #if !defined(SH_FILE_MAIN)
|
---|
| 549 |
|
---|
| 550 | int matches_filetype(SL_TICKET ft, char * test_type)
|
---|
| 551 | {
|
---|
| 552 | char buffer[3072];
|
---|
| 553 | char filetype[SH_FTYPE_MAX];
|
---|
| 554 | long len;
|
---|
| 555 |
|
---|
[481] | 556 | len = sl_read_timeout (ft, buffer, sizeof(buffer), 12, S_TRUE);
|
---|
[310] | 557 |
|
---|
| 558 | sl_rewind(ft);
|
---|
| 559 |
|
---|
| 560 | if (len > 0)
|
---|
| 561 | {
|
---|
| 562 | check_filetype(filetype, buffer, len);
|
---|
| 563 | }
|
---|
| 564 | else
|
---|
| 565 | {
|
---|
| 566 | sl_strlcpy(filetype, _("FILE:UNKNOWN:UNKNOWN"), SH_FTYPE_MAX);
|
---|
| 567 | }
|
---|
| 568 |
|
---|
| 569 | if (0 == strcmp(filetype, test_type))
|
---|
| 570 | {
|
---|
| 571 | return 1;
|
---|
| 572 | }
|
---|
| 573 |
|
---|
| 574 | return 0;
|
---|
| 575 | }
|
---|
| 576 |
|
---|
| 577 | #else
|
---|
| 578 | /* SH_FILE_MAIN */
|
---|
| 579 | #include <unistd.h>
|
---|
| 580 |
|
---|
| 581 | int main (int argc, char * argv[])
|
---|
| 582 | {
|
---|
| 583 | char buffer[3072];
|
---|
| 584 | char filetype[SH_FTYPE_MAX];
|
---|
| 585 | size_t len;
|
---|
| 586 |
|
---|
| 587 | FILE * fh = fopen(argv[1], "r");
|
---|
| 588 |
|
---|
| 589 | if (fh)
|
---|
| 590 | {
|
---|
| 591 | int fd = fileno(fh);
|
---|
| 592 |
|
---|
| 593 | len = read(fd, buffer, 3072);
|
---|
| 594 |
|
---|
| 595 | check_filetype(filetype, buffer, len);
|
---|
| 596 |
|
---|
| 597 | fprintf(stdout, "%s: %s\n", argv[1], filetype);
|
---|
| 598 |
|
---|
| 599 | return 0;
|
---|
| 600 | }
|
---|
| 601 | return 1;
|
---|
| 602 | }
|
---|
| 603 | #endif
|
---|
| 604 |
|
---|
| 605 | #endif
|
---|
| 606 | /* #if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE) */
|
---|