xref: /dragonfly/contrib/file/magic/Magdir/riff (revision a444603f)
1
2#------------------------------------------------------------------------------
3# $File: riff,v 1.35 2020/06/05 17:15:03 christos Exp $
4# riff:  file(1) magic for RIFF format
5# See
6#
7#	https://www.seanet.com/users/matts/riffmci/riffmci.htm
8#	http://www-mmsp.ece.mcgill.ca/Documents/AudioFormats/WAVE/Docs/riffmci.pdf
9#
10
11# audio format tag. Assume limits: max 1024 bit, 128 channels, 1 MHz
120   name    riff-wave
13>0	leshort		1		\b, Microsoft PCM
14>>14	leshort		>0
15>>>14	leshort		<1024	\b, %d bit
16>0	leshort		2		\b, Microsoft ADPCM
17>0	leshort		6		\b, ITU G.711 A-law
18>0	leshort		7		\b, ITU G.711 mu-law
19>0	leshort		8		\b, Microsoft DTS
20>0	leshort		17		\b, IMA ADPCM
21>0	leshort		20		\b, ITU G.723 ADPCM (Yamaha)
22>0	leshort		49		\b, GSM 6.10
23>0	leshort		64		\b, ITU G.721 ADPCM
24>0	leshort		80		\b, MPEG
25>0	leshort		85		\b, MPEG Layer 3
26>0	leshort		0x2001		\b, DTS
27>2	leshort		=1		\b, mono
28>2	leshort		=2		\b, stereo
29>2	leshort		>2
30>>2	leshort		<128	\b, %d channels
31>4	lelong		>0
32>>4	lelong		<1000000	%d Hz
33
34# try to find "fmt "
350   name    riff-walk
36>0  string  fmt\x20
37>>4 lelong  <0x80
38>>>8 use    riff-wave
39>0  string  LIST
40>>&(4.l+4)  use riff-walk
41>0  string  DISP
42>>&(4.l+4)  use riff-walk
43>0  string  bext
44>>&(4.l+4)  use riff-walk
45>0  string  Fake
46>>&(4.l+4)  use riff-walk
47>0  string  fact
48>>&(4.l+4)  use riff-walk
49>0  string  VP8
50>>11		byte		0x9d
51>>>12		byte		0x01
52>>>>13		byte		0x2a	\b, VP8 encoding
53>>>>>14		leshort&0x3fff	x	\b, %d
54>>>>>16		leshort&0x3fff	x	\bx%d, Scaling:
55>>>>>14		leshort&0xc000	0x0000	\b [none]
56>>>>>14		leshort&0xc000	0x1000	\b [5/4]
57>>>>>14		leshort&0xc000	0x2000	\b [5/3]
58>>>>>14		leshort&0xc000	0x3000	\b [2]
59>>>>>14		leshort&0xc000	0x0000	\bx[none]
60>>>>>14		leshort&0xc000	0x1000	\bx[5/4]
61>>>>>14		leshort&0xc000	0x2000	\bx[5/3]
62>>>>>14		leshort&0xc000	0x3000	\bx[2]
63>>>>>15		byte&0x80	=0x00	\b, YUV color
64>>>>>15		byte&0x80	=0x80	\b, bad color specification
65>>>>>15		byte&0x40	=0x40	\b, no clamping required
66>>>>>15		byte&0x40	=0x00	\b, decoders should clamp
67#>0  string  x		we got %s
68#>>&(4.l+4)  use riff-walk
69
70# AVI section extended by Patrik Radman <patrik+file-magic@iki.fi>
71#
720	string		RIFF		RIFF (little-endian) data
73# RIFF Palette format
74# Update: Joerg Jenderek
75# URL: https://en.wikipedia.org/wiki/Resource_Interchange_File_Format
76# Reference: https://worms2d.info/Palette_file
77>8	string		PAL\ 		\b, palette
78!:mime	application/x-riff
79# color palette by Microsoft Corporation
80!:ext	pal
81# file size =  chunk size + 8 in most cases
82>>4	ulelong+8	x		\b, %u bytes
83# Extended PAL Format
84>>12	string		plth		\b, extended
85# Simple PAL Format
86>>12	string		data
87# data chunk size = color entries * 4 + 4 + sometimes extra (4) appended bytes
88>>>16	ulelong		x		\b, data size %u
89# palVersion is always 0x0300
90#>>>20	leshort		x		\b, version 0x%4.4x
91# palNumEntries specifies the number of palette color entries
92>>>22	uleshort	x		\b, %u entries
93# after palPalEntry sized (number of color entries * 4 ) vector
94>>>(22.s*4)	ubequad	x
95# jump relative 22 ( 8 + 16) bytes forward points after end of file or to
96# appended extra bytes like in http://safecolours.rigdenage.com/set(ms).zip/Protan(MS).pal
97>>>>&16		ubelong	x		\b, extra bytes
98>>>>>&-4	ubelong	>0		0x%8.8x
99# RIFF Device Independent Bitmap format
100>8	string		RDIB		\b, device-independent bitmap
101>>16	string		BM
102>>>30	leshort		12		\b, OS/2 1.x format
103>>>>34	leshort		x		\b, %d x
104>>>>36	leshort		x		%d
105>>>30	leshort		64		\b, OS/2 2.x format
106>>>>34	leshort		x		\b, %d x
107>>>>36	leshort		x		%d
108>>>30	leshort		40		\b, Windows 3.x format
109>>>>34	lelong		x		\b, %d x
110>>>>38	lelong		x		%d x
111>>>>44	leshort		x		%d
112# RIFF MIDI format
113>8	string		RMID		\b, MIDI
114# RIFF Multimedia Movie File format
115>8	string		RMMP		\b, multimedia movie
116# RIFF wrapper for MP3
117>8	string		RMP3		\b, MPEG Layer 3 audio
118# Microsoft WAVE format (*.wav)
119>8	string		WAVE		\b, WAVE audio
120!:mime	audio/x-wav
121>>12    string  >\0
122>>>12   use     riff-walk
123# Update:	Joerg Jenderek
124# lower case for Corel Draw version 8 Bidi
125>8	string/c	cdr
126# skip Corel CCX Clipart
127>>8	string		!CDRXcont
128# Corel Draw Picture
129>>>0	use     corel-draw
130# URL:		http://fileformats.archiveteam.org/wiki/CCX_(Corel)
131# Reference:	http://mark0.net/download/triddefs_xml.7z/defs/c/ccx-corel.trid.xml
132>>8	string		=CDRXcont	\b, Corel Clipart
133!:mime	application/x-corel-ccx
134!:ext	ccx
135# 3rd chunk data {Corel\040Binary\040Meta\040File}
136#>>>20	string		x		\b, 3rd '%-s'
137>>>4	ulelong+8	x		\b, %u bytes
138# From:		Joerg Jenderek
139# URL:		https://en.wikipedia.org/wiki/CorelDRAW
140# Reference:	http://fileformats.archiveteam.org/wiki/CorelDRAW
141# Picture templates created by newer software start with RIFF type CDT
142>8	string		CDT
143>>0	use		corel-draw
144# Picture templates with version 4.4
145>8	string		CDST
146>>0	use		corel-draw
147# pattern created by newer software start with RIFF type PAT
148>8	string		PAT
149>>0	use		corel-draw
150>8	string		NUNDROOT	\b, Steinberg CuBase
151# AVI == Audio Video Interleave
152>8	string		AVI\040		\b, AVI
153!:mime	video/x-msvideo
154>>12    string          LIST
155>>>20   string          hdrlavih
156>>>>&36 lelong          x               \b, %u x
157>>>>&40 lelong          x               %u,
158>>>>&4  lelong          >1000000        <1 fps,
159>>>>&4  lelong          1000000         1.00 fps,
160>>>>&4  lelong          500000          2.00 fps,
161>>>>&4  lelong          333333          3.00 fps,
162>>>>&4  lelong          250000          4.00 fps,
163>>>>&4  lelong          200000          5.00 fps,
164>>>>&4  lelong          166667          6.00 fps,
165>>>>&4  lelong          142857          7.00 fps,
166>>>>&4  lelong          125000          8.00 fps,
167>>>>&4  lelong          111111          9.00 fps,
168>>>>&4  lelong          100000          10.00 fps,
169# ]9.9,10.1[
170>>>>&4  lelong          <101010
171>>>>>&-4        lelong  >99010
172>>>>>>&-4       lelong  !100000         ~10 fps,
173>>>>&4  lelong          83333           12.00 fps,
174# ]11.9,12.1[
175>>>>&4  lelong          <84034
176>>>>>&-4        lelong  >82645
177>>>>>>&-4       lelong  !83333          ~12 fps,
178>>>>&4  lelong          66667           15.00 fps,
179# ]14.9,15.1[
180>>>>&4  lelong          <67114
181>>>>>&-4        lelong  >66225
182>>>>>>&-4       lelong  !66667          ~15 fps,
183>>>>&4  lelong          50000           20.00 fps,
184>>>>&4  lelong          41708           23.98 fps,
185>>>>&4  lelong          41667           24.00 fps,
186# ]23.9,24.1[
187>>>>&4  lelong          <41841
188>>>>>&-4        lelong  >41494
189>>>>>>&-4       lelong  !41708
190>>>>>>>&-4      lelong  !41667          ~24 fps,
191>>>>&4  lelong          40000           25.00 fps,
192# ]24.9,25.1[
193>>>>&4  lelong          <40161
194>>>>>&-4        lelong  >39841
195>>>>>>&-4       lelong  !40000          ~25 fps,
196>>>>&4  lelong          33367           29.97 fps,
197>>>>&4  lelong          33333           30.00 fps,
198# ]29.9,30.1[
199>>>>&4  lelong          <33445
200>>>>>&-4        lelong  >33223
201>>>>>>&-4       lelong  !33367
202>>>>>>>&-4      lelong  !33333          ~30 fps,
203>>>>&4  lelong          <32224          >30 fps,
204##>>>>&4  lelong          x               (%lu)
205##>>>>&20 lelong          x               %lu frames,
206# Note: The tests below assume that the AVI has 1 or 2 streams,
207#       "vids" optionally followed by "auds".
208#       (Should cover 99.9% of all AVIs.)
209# assuming avih length = 56
210>>>88   string  LIST
211>>>>96  string  strlstrh
212>>>>>108        string  vids    video:
213>>>>>>&0        lelong  0               uncompressed
214# skip past vids strh
215>>>>>>(104.l+108)       string  strf
216>>>>>>>(104.l+132)      lelong          1       RLE 8bpp
217>>>>>>>(104.l+132)      string/c        cvid    Cinepak
218>>>>>>>(104.l+132)      string/c        i263    Intel I.263
219>>>>>>>(104.l+132)      string/c        iv32    Indeo 3.2
220>>>>>>>(104.l+132)      string/c        iv41    Indeo 4.1
221>>>>>>>(104.l+132)      string/c        iv50    Indeo 5.0
222>>>>>>>(104.l+132)      string/c        mp42    Microsoft MPEG-4 v2
223>>>>>>>(104.l+132)      string/c        mp43    Microsoft MPEG-4 v3
224>>>>>>>(104.l+132)      string/c        fmp4    FFMpeg MPEG-4
225>>>>>>>(104.l+132)      string/c        mjpg    Motion JPEG
226>>>>>>>(104.l+132)      string/c        div3    DivX 3
227>>>>>>>>112             string/c        div3    Low-Motion
228>>>>>>>>112             string/c        div4    Fast-Motion
229>>>>>>>(104.l+132)      string/c        divx    DivX 4
230>>>>>>>(104.l+132)      string/c        dx50    DivX 5
231>>>>>>>(104.l+132)      string/c        xvid    XviD
232>>>>>>>(104.l+132)	string/c	h264	H.264
233>>>>>>>(104.l+132)      string/c        wmv3    Windows Media Video 9
234>>>>>>>(104.l+132)      string/c        h264    X.264 or H.264
235>>>>>>>(104.l+132)      lelong  0
236##>>>>>>>(104.l+132)      string  x       (%.4s)
237# skip past first (video) LIST
238>>>>(92.l+96)   string  LIST
239>>>>>(92.l+104) string  strlstrh
240>>>>>>(92.l+116)        string          auds    \b, audio:
241# auds strh length = 56:
242>>>>>>>(92.l+172)       string          strf
243>>>>>>>>(92.l+180)      leshort 0x0001  uncompressed PCM
244>>>>>>>>(92.l+180)      leshort 0x0002  ADPCM
245>>>>>>>>(92.l+180)      leshort 0x0006  aLaw
246>>>>>>>>(92.l+180)      leshort 0x0007  uLaw
247>>>>>>>>(92.l+180)      leshort 0x0050  MPEG-1 Layer 1 or 2
248>>>>>>>>(92.l+180)      leshort 0x0055  MPEG-1 Layer 3
249>>>>>>>>(92.l+180)      leshort 0x2000  Dolby AC3
250>>>>>>>>(92.l+180)      leshort 0x0161  DivX
251##>>>>>>>>(92.l+180)      leshort x       (0x%.4x)
252>>>>>>>>(92.l+182)      leshort 1       (mono,
253>>>>>>>>(92.l+182)      leshort 2       (stereo,
254>>>>>>>>(92.l+182)      leshort >2      (%d channels,
255>>>>>>>>(92.l+184)      lelong  x       %d Hz)
256# auds strh length = 64:
257>>>>>>>(92.l+180)       string          strf
258>>>>>>>>(92.l+188)      leshort 0x0001  uncompressed PCM
259>>>>>>>>(92.l+188)      leshort 0x0002  ADPCM
260>>>>>>>>(92.l+188)      leshort 0x0055  MPEG-1 Layer 3
261>>>>>>>>(92.l+188)      leshort 0x2000  Dolby AC3
262>>>>>>>>(92.l+188)      leshort 0x0161  DivX
263##>>>>>>>>(92.l+188)      leshort x       (0x%.4x)
264>>>>>>>>(92.l+190)      leshort 1       (mono,
265>>>>>>>>(92.l+190)      leshort 2       (stereo,
266>>>>>>>>(92.l+190)      leshort >2      (%d channels,
267>>>>>>>>(92.l+192)      lelong  x       %d Hz)
268# Animated Cursor format
269>8	string		ACON		\b, animated cursor
270# SoundFont 2 <mpruett@sgi.com>
271>8	string		sfbk		SoundFont/Bank
272# MPEG-1 wrapped in a RIFF, apparently
273>8      string          CDXA            \b, wrapped MPEG-1 (CDXA)
274>8	string		4XMV		\b, 4X Movie file
275# AMV-type AVI file: https://wiki.multimedia.cx/index.php?title=AMV
276>8	string		AMV\040		\b, AMV
277>8      string          WEBP            \b, Web/P image
278!:mime	image/webp
279>>12	use		riff-walk
280# From:		Joerg Jenderek
281# URL:		https://en.wikipedia.org/wiki/CorelDRAW
282# Reference:	http://fileformats.archiveteam.org/wiki/CorelDRAW
283# Note:		Since version 3 CorelDraw Pictures are RIFF based
284# but data chunks remain proprietary.
285# Since version 14 til 15 packed as "content/riffData.cdr" and
286# since 16 "content/root.dat" in ZIP container
287# TODO:		distinguish templates with version 12.5 from Designer illustration 12
288#	display information of RIFF based Corel Draw pictures, templates and patterns
2890	name   	corel-draw
290# display second chunk for debugging
291#>8	string		x		\b, [8]=%.8s
292>0	string		x		\b, Corel Draw
293#!:mime	image/x-coreldraw
294!:mime	application/vnd.corel-draw
295# used by newer pictures templates
296>>8	string		CDT
297# used by templates with newer versions since 16
298>>>12	string		=fver		Picture template (root.dat)
299!:ext	dat
300# used by templates with older versions with vrsn tag
301>>>12	string		!fver
302# used by templates with older versions 14-15
303>>>>11	string		>E		Picture template (riffData.cdr)
304!:ext	cdr
305# used by templates with older versions 11-13
306>>>>11	string		<F		Picture template
307!:ext	cdt/cdrt
308# used by older templates with version 4.4
309>>8	string		CDST		Picture template
310!:ext	cdt
311# used by templates with version 12.5
312>>8	string		DESC		Picture template
313!:ext	cdt
314# used by newer patterns with version 22
315>>8	string		PAT		Pattern
316!:ext	dat
317# remaining older templates, patterns, drawings
318>>8	default		x
319# pattern with old version 4.y
320>>>26	ulelong		=0x0000206C	Pattern
321!:ext	pat
322# pattern with newer versions
323>>>26	ulelong		=0x00000D2C	Pattern
324!:ext	pat
325# remaining older templates or pictures
326>>>26	default		x
327# used by older versions 5 - 15
328>>>>12	string		=vrsn
329# 4th chunk size unequal 282Ch only found for CDR
330>>>>>26	ulelong		!0x0000282c	Picture
331!:ext	cdr
332>>>>>26	default		x		Picture or template
333!:ext	cdr/cdt
334# used by newer versions since 16
335>>>>12	string		=fver		Picture (root.dat)
336!:ext	dat
337# version marked by 1 ASCII char: space~3, ... , F~15,  ... , N~22, ... R~22 template
338>11	string		x		\b, version
339>11	string		>\040		'%-.1s'
340>0	use		corel-version
341>4	ulelong+8	x		\b, %u bytes
342#
343#	display numeric version of RIFF based Corel after 3rd RIFF tag
3440	name   	corel-version
345# for debugging purpose; vrsn for short content; fver for 16 byte size
346#>12	string		x		\b, TAG "%-4.4s"
347# 1st data chunk length 2 implies short content version
348>16	ulelong		2
349# vrsn chunk short content interpreted by MajorVersion * 100 + MinorVersion
350>>20	uleshort/100	x		%u
351>>20	uleshort%100	>0		\b.%u
352# for debugging purpose display next chunk like: DISP LIST
353#>>22	string		x		\b, 4th "%-4.4s"
354#>>26	ulelong		x		\b, 4th SIZE 0x%x
355# for debugging purpose display 5th chunk like: LIST DISP ccmm osfp
356#>>(26.l+30)	string	x		\b, 5th "%-4.4s"
357# 1st data chunk length 10h implies 16 byte content with version info
358>16	ulelong		0x10
359>>34	ubyte		x		%u
360>>>33	ubyte		>0		\b.%u
361#
362# XXX - some of the below may only appear in little-endian form.
363#
364# Also "MV93" appears to be for one form of Macromedia Director
365# files, and "GDMF" appears to be another multimedia format.
366#
3670	string		RIFX		RIFF (big-endian) data
368# RIFF Palette format
369>8	string		PAL		\b, palette
370>>16	beshort		x		\b, version %d
371>>18	beshort		x		\b, %d entries
372# RIFF Device Independent Bitmap format
373>8	string		RDIB		\b, device-independent bitmap
374>>16	string		BM
375>>>30	beshort		12		\b, OS/2 1.x format
376>>>>34	beshort		x		\b, %d x
377>>>>36	beshort		x		%d
378>>>30	beshort		64		\b, OS/2 2.x format
379>>>>34	beshort		x		\b, %d x
380>>>>36	beshort		x		%d
381>>>30	beshort		40		\b, Windows 3.x format
382>>>>34	belong		x		\b, %d x
383>>>>38	belong		x		%d x
384>>>>44	beshort		x		%d
385# RIFF MIDI format
386>8	string		RMID		\b, MIDI
387# RIFF Multimedia Movie File format
388>8	string		RMMP		\b, multimedia movie
389# Microsoft WAVE format (*.wav)
390>8	string		WAVE		\b, WAVE audio
391>>20	leshort		1		\b, Microsoft PCM
392>>>34	leshort		>0		\b, %d bit
393>>22	beshort		=1		\b, mono
394>>22	beshort		=2		\b, stereo
395>>22	beshort		>2		\b, %d channels
396>>24	belong		>0		%d Hz
397# Corel Draw Picture big endian not tested by real examples
398#>8	string		CDRA		\b, Corel Draw Picture
399#>8	string		CDR6		\b, Corel Draw Picture, version 6
400>8	string		CDR
401>>0	use     \^corel-draw
402
403# AVI == Audio Video Interleave
404>8	string		AVI\040		\b, AVI
405# Animated Cursor format
406>8	string		ACON		\b, animated cursor
407# Notation Interchange File Format (big-endian only)
408>8	string		NIFF		\b, Notation Interchange File Format
409# SoundFont 2 <mpruett@sgi.com>
410>8	string		sfbk		SoundFont/Bank
411
412#------------------------------------------------------------------------------
413# Sony Wave64
414# see http://www.vcs.de/fileadmin/user_upload/MBS/PDF/Whitepaper/Informations_about_Sony_Wave64.pdf
415# 128 bit RIFF-GUID { 66666972-912E-11CF-A5D6-28DB04C10000 } in little-endian
4160	string	riff\x2E\x91\xCF\x11\xA5\xD6\x28\xDB\x04\xC1\x00\x00		Sony Wave64 RIFF data
417# 128 bit + total file size (64 bits) so 24 bytes
418# then WAVE-GUID { 65766177-ACF3-11D3-8CD1-00C04F8EDB8A }
419>24	string		wave\xF3\xAC\xD3\x11\x8C\xD1\x00\xC0\x4F\x8E\xDB\x8A		\b, WAVE 64 audio
420!:mime	audio/x-w64
421# FMT-GUID { 20746D66-ACF3-11D3-8CD1-00C04F8EDB8A }
422>>40	search/256	fmt\x20\xF3\xAC\xD3\x11\x8C\xD1\x00\xC0\x4F\x8E\xDB\x8A		\b
423>>>&10	leshort		=1		\b, mono
424>>>&10	leshort		=2		\b, stereo
425>>>&10	leshort		>2		\b, %d channels
426>>>&12	lelong		>0		%d Hz
427
428#------------------------------------------------------------------------------
429# MBWF/RF64
430# see EBU TECH 3306 https://tech.ebu.ch/docs/tech/tech3306-2009.pdf
4310	string	RF64\xff\xff\xff\xffWAVEds64		MBWF/RF64 audio
432!:mime	audio/x-wav
433>40	search/256	fmt\x20		\b
434>>&6	leshort		=1		\b, mono
435>>&6	leshort		=2		\b, stereo
436>>&6	leshort		>2		\b, %d channels
437>>&8	lelong		>0		%d Hz
438