| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277 | 
							
- #------------------------------------------------------------------------------
 
- # elf:  file(1) magic for ELF executables
 
- #
 
- # We have to check the byte order flag to see what byte order all the
 
- # other stuff in the header is in.
 
- #
 
- # What're the correct byte orders for the nCUBE and the Fujitsu VPP500?
 
- #
 
- # updated by Daniel Quinlan (quinlan@yggdrasil.com)
 
- 0	string		\177ELF		ELF
 
- >4	byte		0		invalid class
 
- >4	byte		1		32-bit
 
- >4	byte		2		64-bit
 
- >5	byte		0		invalid byte order
 
- >5	byte		1		LSB
 
- >>16	leshort		0		no file type,
 
- !:mime	application/octet-stream
 
- >>16	leshort		1		relocatable,
 
- !:mime	application/x-object
 
- >>16	leshort		2		executable,
 
- !:mime	application/x-executable
 
- >>16	leshort		3		shared object,
 
- !:mime	application/x-sharedlib
 
- # Core handling from Peter Tobias <tobias@server.et-inf.fho-emden.de>
 
- # corrections by Christian 'Dr. Disk' Hechelmann <drdisk@ds9.au.s.shuttle.de>
 
- >>16	leshort		4		core file
 
- !:mime	application/x-coredump
 
- # Core file detection is not reliable.
 
- #>>>(0x38+0xcc) string	>\0		of '%s'
 
- #>>>(0x38+0x10) lelong	>0		(signal %d),
 
- >>16	leshort		&0xff00		processor-specific,
 
- >>18	leshort		0		no machine,
 
- >>18	leshort		1		AT&T WE32100 - invalid byte order,
 
- >>18	leshort		2		SPARC - invalid byte order,
 
- >>18	leshort		3		Intel 80386,
 
- >>18	leshort		4		Motorola
 
- >>>36	lelong		&0x01000000	68000 - invalid byte order,
 
- >>>36	lelong		&0x00810000	CPU32 - invalid byte order,
 
- >>>36	lelong		0		68020 - invalid byte order,
 
- >>18	leshort		5		Motorola 88000 - invalid byte order,
 
- >>18	leshort		6		Intel 80486,
 
- >>18	leshort		7		Intel 80860,
 
- # The official e_machine number for MIPS is now #8, regardless of endianness.
 
- # The second number (#10) will be deprecated later. For now, we still
 
- # say something if #10 is encountered, but only gory details for #8.
 
- >>18	leshort		8		MIPS,
 
- >>>36	lelong		&0x20		N32
 
- >>18	leshort		10		MIPS,
 
- >>>36	lelong		&0x20		N32
 
- >>18	leshort		8
 
- # only for 32-bit
 
- >>>4	byte		1
 
- >>>>36  lelong&0xf0000000	0x00000000	MIPS-I
 
- >>>>36  lelong&0xf0000000	0x10000000	MIPS-II
 
- >>>>36  lelong&0xf0000000	0x20000000	MIPS-III
 
- >>>>36  lelong&0xf0000000	0x30000000	MIPS-IV
 
- >>>>36  lelong&0xf0000000	0x40000000	MIPS-V
 
- >>>>36  lelong&0xf0000000	0x50000000	MIPS32
 
- >>>>36  lelong&0xf0000000	0x60000000	MIPS64
 
- >>>>36  lelong&0xf0000000	0x70000000	MIPS32 rel2
 
- >>>>36  lelong&0xf0000000	0x80000000	MIPS64 rel2
 
- # only for 64-bit
 
- >>>4	byte		2
 
- >>>>48  lelong&0xf0000000	0x00000000	MIPS-I
 
- >>>>48  lelong&0xf0000000	0x10000000	MIPS-II
 
- >>>>48  lelong&0xf0000000	0x20000000	MIPS-III
 
- >>>>48  lelong&0xf0000000	0x30000000	MIPS-IV
 
- >>>>48  lelong&0xf0000000	0x40000000	MIPS-V
 
- >>>>48  lelong&0xf0000000	0x50000000	MIPS32
 
- >>>>48  lelong&0xf0000000	0x60000000	MIPS64
 
- >>>>48  lelong&0xf0000000	0x70000000	MIPS32 rel2
 
- >>>>48  lelong&0xf0000000	0x80000000	MIPS64 rel2
 
- >>18	leshort		9		Amdahl - invalid byte order,
 
- >>18	leshort		10		MIPS (deprecated),
 
- >>18	leshort		11		RS6000 - invalid byte order,
 
- >>18	leshort		15		PA-RISC - invalid byte order,
 
- >>>50	leshort		0x0214		2.0
 
- >>>48	leshort		&0x0008		(LP64),
 
- >>18	leshort		16		nCUBE,
 
- >>18	leshort		17		Fujitsu VPP500,
 
- >>18	leshort		18		SPARC32PLUS,
 
- >>18	leshort		20		PowerPC,
 
- >>18	leshort		22		IBM S/390,
 
- >>18	leshort		36		NEC V800,
 
- >>18	leshort		37		Fujitsu FR20,
 
- >>18	leshort		38		TRW RH-32,
 
- >>18	leshort		39		Motorola RCE,
 
- >>18	leshort		40		ARM,
 
- >>18	leshort		41		Alpha,
 
- >>18	leshort		0xa390		IBM S/390 (obsolete),
 
- >>18	leshort		42		Renesas SH,
 
- >>18	leshort		43		SPARC V9 - invalid byte order,
 
- >>18	leshort		44		Siemens Tricore Embedded Processor,
 
- >>18	leshort		45		Argonaut RISC Core, Argonaut Technologies Inc.,
 
- >>18	leshort		46		Renesas H8/300,
 
- >>18	leshort		47		Renesas H8/300H,
 
- >>18	leshort		48		Renesas H8S,
 
- >>18	leshort		49		Renesas H8/500,
 
- >>18	leshort		50		IA-64,
 
- >>18	leshort		51		Stanford MIPS-X,
 
- >>18	leshort		52		Motorola Coldfire,
 
- >>18	leshort		53		Motorola M68HC12,
 
- >>18	leshort		54		Fujitsu MMA,
 
- >>18	leshort		55		Siemens PCP,
 
- >>18	leshort		56		Sony nCPU,
 
- >>18	leshort		57		Denso NDR1,
 
- >>18	leshort		58		Start*Core,
 
- >>18	leshort		59		Toyota ME16,
 
- >>18	leshort		60		ST100,
 
- >>18	leshort		61		Tinyj emb.,
 
- >>18	leshort		62		x86-64,
 
- >>18	leshort		63		Sony DSP,
 
- >>18	leshort		66		FX66,
 
- >>18	leshort		67		ST9+ 8/16 bit,
 
- >>18	leshort		68		ST7 8 bit,
 
- >>18	leshort		69		MC68HC16,
 
- >>18	leshort		70		MC68HC11,
 
- >>18	leshort		71		MC68HC08,
 
- >>18	leshort		72		MC68HC05,
 
- >>18	leshort		73		SGI SVx,
 
- >>18	leshort		74		ST19 8 bit,
 
- >>18	leshort		75		Digital VAX,
 
- >>18	leshort		76		Axis cris,
 
- >>18	leshort		77		Infineon 32-bit embedded,
 
- >>18	leshort		78		Element 14 64-bit DSP,
 
- >>18	leshort		79		LSI Logic 16-bit DSP,
 
- >>18	leshort		80		MMIX,
 
- >>18	leshort		81		Harvard machine-independent,
 
- >>18	leshort		82		SiTera Prism,
 
- >>18	leshort		83		Atmel AVR 8-bit,
 
- >>18	leshort		84		Fujitsu FR30,
 
- >>18	leshort		85		Mitsubishi D10V,
 
- >>18	leshort		86		Mitsubishi D30V,
 
- >>18	leshort		87		NEC v850,
 
- >>18	leshort		88		Renesas M32R,
 
- >>18	leshort		89		Matsushita MN10300,
 
- >>18	leshort		90		Matsushita MN10200,
 
- >>18	leshort		91		picoJava,
 
- >>18	leshort		92		OpenRISC,
 
- >>18	leshort		93		ARC Cores Tangent-A5,
 
- >>18	leshort		0x3426		OpenRISC (obsolete),
 
- >>18	leshort		0x8472		OpenRISC (obsolete),
 
- >>18	leshort		94		Tensilica Xtensa,
 
- >>18	leshort		97		NatSemi 32k,
 
- >>18	leshort		106		Analog Devices Blackfin,
 
- >>18	leshort		0x9026		Alpha (unofficial),
 
- >>20	lelong		0		invalid version
 
- >>20	lelong		1		version 1
 
- >>36	lelong		1		MathCoPro/FPU/MAU Required
 
- >5	byte		2		MSB
 
- >>16	beshort		0		no file type,
 
- !:mime	application/octet-stream
 
- >>16	beshort		1		relocatable,
 
- !:mime	application/x-object
 
- >>16	beshort		2		executable,
 
- !:mime	application/x-executable
 
- >>16	beshort		3		shared object,
 
- !:mime	application/x-sharedlib
 
- >>16	beshort		4		core file,
 
- !:mime	application/x-coredump
 
- #>>>(0x38+0xcc) string	>\0		of '%s'
 
- #>>>(0x38+0x10) belong	>0		(signal %d),
 
- >>16	beshort		&0xff00		processor-specific,
 
- >>18	beshort		0		no machine,
 
- >>18	beshort		1		AT&T WE32100,
 
- >>18	beshort		2		SPARC,
 
- >>18	beshort		3		Intel 80386 - invalid byte order,
 
- >>18	beshort		4		Motorola
 
- >>>36	belong		&0x01000000	68000,
 
- >>>36	belong		&0x00810000	CPU32,
 
- >>>36	belong		0		68020,
 
- >>18	beshort		5		Motorola 88000,
 
- >>18	beshort		6		Intel 80486 - invalid byte order,
 
- >>18	beshort		7		Intel 80860,
 
- # only for MIPS - see comment in little-endian section above.
 
- >>18	beshort		8		MIPS,
 
- >>>36	belong		&0x20		N32
 
- >>18	beshort		10		MIPS,
 
- >>>36	belong		&0x20		N32
 
- >>18	beshort		8
 
- # only for 32-bit
 
- >>>4	byte		1
 
- >>>>36  belong&0xf0000000	0x00000000	MIPS-I
 
- >>>>36  belong&0xf0000000	0x10000000	MIPS-II
 
- >>>>36  belong&0xf0000000	0x20000000	MIPS-III
 
- >>>>36  belong&0xf0000000	0x30000000	MIPS-IV
 
- >>>>36  belong&0xf0000000	0x40000000	MIPS-V
 
- >>>>36  belong&0xf0000000	0x50000000	MIPS32
 
- >>>>36  belong&0xf0000000	0x60000000	MIPS64
 
- >>>>36  belong&0xf0000000	0x70000000	MIPS32 rel2
 
- >>>>36  belong&0xf0000000	0x80000000	MIPS64 rel2
 
- # only for 64-bit
 
- >>>4	byte		2
 
- >>>>48	belong&0xf0000000	0x00000000	MIPS-I
 
- >>>>48	belong&0xf0000000	0x10000000	MIPS-II
 
- >>>>48	belong&0xf0000000	0x20000000	MIPS-III
 
- >>>>48	belong&0xf0000000	0x30000000	MIPS-IV
 
- >>>>48	belong&0xf0000000	0x40000000	MIPS-V
 
- >>>>48	belong&0xf0000000	0x50000000	MIPS32
 
- >>>>48	belong&0xf0000000	0x60000000	MIPS64
 
- >>>>48	belong&0xf0000000	0x70000000	MIPS32 rel2
 
- >>>>48	belong&0xf0000000	0x80000000	MIPS64 rel2
 
- >>18	beshort		9		Amdahl,
 
- >>18	beshort		10		MIPS (deprecated),
 
- >>18	beshort		11		RS6000,
 
- >>18	beshort		15		PA-RISC
 
- >>>50	beshort		0x0214		2.0
 
- >>>48	beshort		&0x0008		(LP64)
 
- >>18	beshort		16		nCUBE,
 
- >>18	beshort		17		Fujitsu VPP500,
 
- >>18	beshort		18		SPARC32PLUS,
 
- >>>36	belong&0xffff00	&0x000100	V8+ Required,
 
- >>>36	belong&0xffff00	&0x000200	Sun UltraSPARC1 Extensions Required,
 
- >>>36	belong&0xffff00	&0x000400	HaL R1 Extensions Required,
 
- >>>36	belong&0xffff00	&0x000800	Sun UltraSPARC3 Extensions Required,
 
- >>18	beshort		20		PowerPC or cisco 4500,
 
- >>18	beshort		21		64-bit PowerPC or cisco 7500,
 
- >>18	beshort		22		IBM S/390,
 
- >>18	beshort		23		Cell SPU,
 
- >>18	beshort		24		cisco SVIP,
 
- >>18	beshort		25		cisco 7200,
 
- >>18	beshort		36		NEC V800 or cisco 12000,
 
- >>18	beshort		37		Fujitsu FR20,
 
- >>18	beshort		38		TRW RH-32,
 
- >>18	beshort		39		Motorola RCE,
 
- >>18	beshort		40		ARM,
 
- >>18	beshort		41		Alpha,
 
- >>18	beshort		42		Renesas SH,
 
- >>18	beshort		43		SPARC V9,
 
- >>18	beshort		44		Siemens Tricore Embedded Processor,
 
- >>18	beshort		45		Argonaut RISC Core, Argonaut Technologies Inc.,
 
- >>18	beshort		46		Renesas H8/300,
 
- >>18	beshort		47		Renesas H8/300H,
 
- >>18	beshort		48		Renesas H8S,
 
- >>18	beshort		49		Renesas H8/500,
 
- >>18	beshort		50		IA-64,
 
- >>18	beshort		51		Stanford MIPS-X,
 
- >>18	beshort		52		Motorola Coldfire,
 
- >>18	beshort		53		Motorola M68HC12,
 
- >>18	beshort		73		Cray NV1,
 
- >>18	beshort		75		Digital VAX,
 
- >>18	beshort		88		Renesas M32R,
 
- >>18	leshort		92		OpenRISC,
 
- >>18	leshort		0x3426		OpenRISC (obsolete),
 
- >>18	leshort		0x8472		OpenRISC (obsolete),
 
- >>18	beshort		94		Tensilica Xtensa,
 
- >>18	beshort		97		NatSemi 32k,
 
- >>18	beshort		0x18ad		AVR32 (unofficial),
 
- >>18	beshort		0x9026		Alpha (unofficial),
 
- >>18	beshort		0xa390		IBM S/390 (obsolete),
 
- >>20	belong		0		invalid version
 
- >>20	belong		1		version 1
 
- >>36	belong		1		MathCoPro/FPU/MAU Required
 
- # Up to now only 0, 1 and 2 are defined; I've seen a file with 0x83, it seemed
 
- # like proper ELF, but extracting the string had bad results.
 
- >4      byte            <0x80
 
- >>8	string		>\0		(%s)
 
- >8	string		\0
 
- >>7	byte		0		(SYSV)
 
- >>7	byte		1		(HP-UX)
 
- >>7	byte		2		(NetBSD)
 
- >>7	byte		3		(GNU/Linux)
 
- >>7	byte		4		(GNU/Hurd)
 
- >>7	byte		5		(86Open)
 
- >>7	byte		6		(Solaris)
 
- >>7	byte		7		(Monterey)
 
- >>7	byte		8		(IRIX)
 
- >>7	byte		9		(FreeBSD)
 
- >>7	byte		10		(Tru64)
 
- >>7	byte		11		(Novell Modesto)
 
- >>7	byte		12		(OpenBSD)
 
- # VMS Itanium added by gerardo.cacciari@gmail.com
 
- >8      string          \2
 
- >>7     byte            13              (OpenVMS)
 
- >>7	byte		97		(ARM)
 
- >>7	byte		255		(embedded)
 
 
  |