binwalk 3.1.0

Analyzes data for embedded file types
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

use crate::structures::common::{self, StructureError};
use std::collections::HashMap;

/// Stores info on a RAR archive
#[derive(Debug, Default, Clone)]
pub struct RarArchiveHeader {
    pub version: usize,
}

/// Parse a RAR archive header
pub fn parse_rar_archive_header(rar_data: &[u8]) -> Result<RarArchiveHeader, StructureError> {
    let archive_header_structure =
        vec![("magic_p1", "u32"), ("magic_p2", "u16"), ("version", "u8")];

    // Version field of 0 indicates RARv4; version field of 1 indicates RARv5
    let version_map: HashMap<usize, usize> = HashMap::from([(0, 4), (1, 5)]);

    // Parse the header
    if let Ok(archive_header) = common::parse(rar_data, &archive_header_structure, "little") {
        // Make sure the version number is one of the known versions
        if version_map.contains_key(&archive_header["version"]) {
            return Ok(RarArchiveHeader {
                version: version_map[&archive_header["version"]],
            });
        }
    }

    Err(StructureError)
}