2 #------------------------------------------------------------------------------
3 # $File: coff,v 1.2 2017/03/17 21:35:28 christos Exp $
4 # coff: file(1) magic for Common Object Files not specific to known cpu types or manufactures
8 # by Joerg Jenderek at Oct 2015
9 # https://en.wikipedia.org/wiki/COFF
10 # https://de.wikipedia.org/wiki/Common_Object_File_Format
11 # http://www.delorie.com/djgpp/doc/coff/filhdr.html
13 # display name+variables+flags of Common Object Files Format (32bit)
14 # Maybe used also in adi,att3b,clipper,hitachi-sh,hp,ibm6000,intel,
15 # mips,motorola,msdos,osf1,sharc,varied.out,vax
17 # test for unused flag bits (0x8000,0x0800,0x0400,0x0200,x0080) in f_flags
20 # f_magic - magic number
21 # DJGPP, 80386 COFF executable, MS Windows COFF Intel 80386 object file (./intel)
22 >>0 uleshort 0x014C Intel 80386
23 # Hitachi SH big-endian COFF (./hitachi-sh)
24 >>0 uleshort 0x0500 Hitachi SH big-endian
25 # Hitachi SH little-endian COFF (./hitachi-sh)
26 >>0 uleshort 0x0550 Hitachi SH little-endian
27 # executable (RISC System/6000 V3.1) or obj module (./ibm6000)
29 # TODO for other COFFs
30 #>>0 uleshort 0xABCD COFF_TEMPLATE
32 >>>0 uleshort x type 0x%04x
35 >>18 leshort ^0x0002 object file
36 #!:mime application/x-coff
38 >>18 leshort &0x0002 executable
39 #!:mime application/x-coffexec
40 # F_RELFLG flag bit,static object
41 >>18 leshort &0x0001 \b, no relocation info
43 >>18 leshort &0x0004 \b, no line number info
45 >>18 leshort &0x0008 \b, stripped
46 >>18 leshort ^0x0008 \b, not stripped
47 # flags in other COFF versions
52 #>>>18 leshort &0x0100 \b, 32 bit little endian
56 # f_nscns - number of sections
57 >>2 uleshort <2 \b, %d section
58 >>2 uleshort >1 \b, %d sections
59 # f_timdat - file time & date stamp only for little endian
61 # f_symptr - symbol table pointer, only for not stripped
62 >>8 ulelong >0 \b, symbol offset=0x%x
63 # f_nsyms - number of symbols, only for not stripped
64 >>12 ulelong >0 \b, %d symbols
65 # f_opthdr - optional header size
66 >>16 uleshort >0 \b, optional header size %d
67 # at offset 20 can be optional header, extra bytes FILHSZ-20 because
68 # do not rely on sizeof(FILHDR) to give the correct size for header.
69 # or first section header
70 # additional variables for other COFF files
71 # >20 beshort 0407 (impure)
72 # >20 beshort 0410 (pure)
73 # >20 beshort 0413 (demand paged)
74 # >20 beshort 0421 (standalone)
75 # >22 leshort >0 - version %d
76 # >168 string .lowmem Apple toolbox