xref: /freebsd/contrib/file/magic/Magdir/coff (revision f6a3b357e9be4c6423c85eff9a847163a0d307c8)
1
2#------------------------------------------------------------------------------
3# $File: coff,v 1.2 2017/03/17 21:35:28 christos Exp $
4# coff: file(1) magic for Common Object Files not specific to known cpu types or manufactures
5#
6# COFF
7#
8# by Joerg Jenderek at Oct 2015
9# https://en.wikipedia.org/wiki/COFF
10# https://de.wikipedia.org/wiki/Common_Object_File_Format
11# http://www.delorie.com/djgpp/doc/coff/filhdr.html
12
13# display name+variables+flags of Common Object Files Format (32bit)
14# Maybe used also in adi,att3b,clipper,hitachi-sh,hp,ibm6000,intel,
15# mips,motorola,msdos,osf1,sharc,varied.out,vax
160	name				display-coff
17# test for unused flag bits (0x8000,0x0800,0x0400,0x0200,x0080) in f_flags
18>18	uleshort&0x8E80	0
19>>0	clear		x
20# f_magic - magic number
21# DJGPP, 80386 COFF executable, MS Windows COFF Intel 80386 object file (./intel)
22>>0	uleshort	0x014C		Intel 80386
23# Hitachi SH big-endian COFF (./hitachi-sh)
24>>0	uleshort	0x0500		Hitachi SH big-endian
25# Hitachi SH little-endian COFF (./hitachi-sh)
26>>0	uleshort	0x0550		Hitachi SH little-endian
27# executable (RISC System/6000 V3.1) or obj module (./ibm6000)
28#>>0	uleshort	0x01DF
29# TODO for other COFFs
30#>>0	uleshort	0xABCD		COFF_TEMPLATE
31>>0	default		x
32>>>0	uleshort	x		type 0x%04x
33>>0	uleshort	x		COFF
34# F_EXEC flag bit
35>>18	leshort		^0x0002		object file
36#!:mime	application/x-coff
37#!:ext cof/o/obj/lib
38>>18	leshort		&0x0002		executable
39#!:mime	application/x-coffexec
40# F_RELFLG flag bit,static object
41>>18	leshort		&0x0001		\b, no relocation info
42# F_LNNO flag bit
43>>18	leshort		&0x0004		\b, no line number info
44# F_LSYMS flag bit
45>>18	leshort		&0x0008		\b, stripped
46>>18	leshort		^0x0008		\b, not stripped
47# flags in other COFF versions
48#0x0010    F_FDPR_PROF
49#0x0020    F_FDPR_OPTI
50#0x0040    F_DSA
51# F_AR32WR flag bit
52#>>>18	leshort		&0x0100		\b, 32 bit little endian
53#0x1000    F_DYNLOAD
54#0x2000    F_SHROBJ
55#0x4000    F_LOADONLY
56# f_nscns - number of sections
57>>2	uleshort	<2		\b, %d section
58>>2	uleshort	>1		\b, %d sections
59# f_timdat - file time & date stamp only for little endian
60#>>4	date		x		\b, %s
61# f_symptr - symbol table pointer, only for not stripped
62>>8	ulelong		>0		\b, symbol offset=0x%x
63# f_nsyms - number of symbols, only for not stripped
64>>12	ulelong		>0		\b, %d symbols
65# f_opthdr - optional header size
66>>16	uleshort	>0		\b, optional header size %d
67# at offset 20 can be optional header, extra bytes FILHSZ-20 because
68# do not rely on sizeof(FILHDR) to give the correct size for header.
69# or first section header
70# additional variables for other COFF files
71# >20	beshort		0407		(impure)
72# >20	beshort		0410		(pure)
73# >20	beshort		0413		(demand paged)
74# >20	beshort		0421		(standalone)
75# >22	leshort		>0		- version %d
76# >168	string		.lowmem		Apple toolbox
77
78