lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date:	Wed, 30 Jan 2008 17:34:42 -0700
From:	Andreas Dilger <>
To:	Eric Sandeen <>
Cc:	ext4 development <>
Subject: Re: RFC: "file" magic for ext4

On Jan 30, 2008  11:19 -0600, Eric Sandeen wrote:
> This seems to work fine; any comments, either about
> the logic, or the text descriptions, or the various
> options I've shown/not shown?
> To test, copy your "magic" file somewhere local, 
> replace the ext2/3 section with the following,
> and do something like:
> # file -C -m magic; file -m ./magic -s /dev/sda1
> -Eric
> # ext2/ext3 filesystems - Andreas Dilger <>

Lol, you may as well fix up the email.... will
probably be the least transient.

> 0x438   leshort         0xEF53          Linux
> >0x44c  lelong          x               rev %d
> >0x43e  leshort         x               \b.%d
> # No journal?  ext2
> >0x45c  lelong          ^0x0000004      ext2 filesystem data
> >>0x43a leshort         ^0x0000001      (mounted or unclean)
> # Has a journal?  ext3 or ext4
> >0x45c  lelong          &0x0000004
> #  and small INCOMPAT?
> >>0x460 lelong          <0x0000040
> #   and small RO_COMPAT?
> >>>0x464 lelong         <0x0000008      ext3 filesystem data
> #   else large RO_COMPAT?
> >>>0x464 lelong         >0x0000007      ext4 filesystem data
> #  else large INCOMPAT?
> >>0x460 lelong          >0x000003f      ext4 filesystem data
> # General flags for any ext* fs
> >0x460  lelong          &0x0000004      (needs journal recovery)
> >0x43a  leshort         &0x0000002      (errors)
> # INCOMPAT flags
> >0x460  lelong          &0x0000001      (compressed)
> #>0x460 lelong          &0x0000002      (filetype)
> #>0x460 lelong          &0x0000010      (meta bg)
> >0x460  lelong          &0x0000040      (extents)
> >0x460  lelong          &0x0000080      (64bit)
> #>0x460 lelong          &0x0000100      (mmp)
> #>0x460 lelong          &0x0000200      (flex bg)
> # RO_INCOMPAT flags
> #>0x464 lelong          &0x0000001      (sparse super)
> >0x464  lelong          &0x0000002      (large files)
> >0x464  lelong          &0x0000008      (huge files)
> #>0x464 lelong          &0x0000010      (gdt checksum)
> #>0x464 lelong          &0x0000020      (many subdirs)
> #>0x463 lelong          &0x0000040      (extra isize)

Cheers, Andreas
Andreas Dilger
Sr. Staff Engineer, Lustre Group
Sun Microsystems of Canada, Inc.

To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
the body of a message to
More majordomo info at

Powered by blists - more mailing lists