1b6cee71dSXin LI 2b6cee71dSXin LI#------------------------------------------------------------ 3*3e41d09dSXin LI# $File: java,v 1.18 2015/11/29 22:08:14 christos Exp $ 4b6cee71dSXin LI# Java ByteCode and Mach-O binaries (e.g., Mac OS X) use the 5b6cee71dSXin LI# same magic number, 0xcafebabe, so they are both handled 6b6cee71dSXin LI# in the entry called "cafebabe". 7b6cee71dSXin LI#------------------------------------------------------------ 8b6cee71dSXin LI# Java serialization 9b6cee71dSXin LI# From Martin Pool (m.pool@pharos.com.au) 10b6cee71dSXin LI0 beshort 0xaced Java serialization data 11b6cee71dSXin LI>2 beshort >0x0004 \b, version %d 12b6cee71dSXin LI 13b6cee71dSXin LI0 belong 0xfeedfeed Java KeyStore 14b6cee71dSXin LI!:mime application/x-java-keystore 15b6cee71dSXin LI0 belong 0xcececece Java JCE KeyStore 16b6cee71dSXin LI!:mime application/x-java-jce-keystore 17b6cee71dSXin LI 18b6cee71dSXin LI# Java source 19*3e41d09dSXin LI0 regex \^import.*;$ Java source 20b6cee71dSXin LI!:mime text/x-java 21*3e41d09dSXin LI 22*3e41d09dSXin LI# Java HPROF dumps 23*3e41d09dSXin LI# https://java.net/downloads/heap-snapshot/hprof-binary-format.html 24*3e41d09dSXin LI0 string JAVA\x20PROFILE\x201.0. 25*3e41d09dSXin LI>0x12 short 0 26*3e41d09dSXin LI>>0x11 ushort-0x31 <2 Java HPROF dump, 27*3e41d09dSXin LI>>0x17 beqdate/1000 x created %s 28