binwalk 3.1.0

Analyzes data for embedded file types
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

use crate::extractors::common::{ExtractionResult, Extractor, ExtractorType};
use crate::extractors::inflate;

/// Size of the checksum that follows the ZLIB deflate data stream
pub const CHECKSUM_SIZE: usize = 4;

/// Defines the internal extractor function for decompressing zlib data
pub fn zlib_extractor() -> Extractor {
    Extractor {
        utility: ExtractorType::Internal(zlib_decompress),
        ..Default::default()
    }
}

/// Internal extractor for decompressing ZLIB data
pub fn zlib_decompress(
    file_data: &[u8],
    offset: usize,
    output_directory: Option<&String>,
) -> ExtractionResult {
    // Size of the zlib header
    const HEADER_SIZE: usize = 2;

    // Do the decompression, ignoring the ZLIB header
    let mut result =
        inflate::inflate_decompressor(file_data, offset + HEADER_SIZE, output_directory);

    // If the decompression reported the size of the deflate data, update the reported size
    // to include the ZLIB header and checksum fields
    if let Some(deflate_size) = result.size {
        result.size = Some(HEADER_SIZE + deflate_size + CHECKSUM_SIZE);
    }

    result
}