binwalk 3.1.0

Analyzes data for embedded file types
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

use crate::signatures::common::{
    SignatureError, SignatureResult, CONFIDENCE_LOW, CONFIDENCE_MEDIUM,
};

/// Human readable description
pub const DESCRIPTION: &str = "compress'd data";

/// Compress'd files always start with these bytes
pub fn compressd_magic() -> Vec<Vec<u8>> {
    vec![b"\x1F\x9D\x90".to_vec()]
}

/// "Validate" the compress'd header
pub fn compressd_parser(
    _file_data: &[u8],
    offset: usize,
) -> Result<SignatureResult, SignatureError> {
    // Successful return value; confidence is medium since this only matches magic bytes at the beginning of a file
    let mut result = SignatureResult {
        offset,
        description: DESCRIPTION.to_string(),
        confidence: CONFIDENCE_LOW,
        ..Default::default()
    };

    if offset == 0 {
        result.confidence = CONFIDENCE_MEDIUM;
    }

    Ok(result)
}