Detect parses raw as a CDF (OLE2) compound file and returns the document type it contains. It returns CDFTypeGeneric for input that is not a CDF file

offset returns true if the provided signature can be found at offset in the raw input.

xml returns true if any of the provided XML signatures matches the raw input.

ftyp returns true if any of the FTYP signatures matches the raw input.

Detect returns the MIME type found from the provided byte slice. The result is always a valid MIME type, with "application/octet-stream" returned whe

String returns the string representation of the MIME type, e.g., "application/zip". String return values can change between releases, for example, whe

Match returns how many bytes were needed to match pattern p. It returns -1 if p does not match b.

Peek one byte from b or 0x00 if b is empty.

A valid shebang starts with the "#!" characters, followed by any number of spaces, followed by the path to the interpreter, and, optionally, followed

Line returns the first line from b and advances b with the length of the line. One new line character is trimmed after the line if it exists.

testHeader builds a 512-byte CDF header with secSize-byte sectors and 64-byte short sectors.

DetectReader returns the MIME type of the provided reader. The result is always a valid MIME type, with "application/octet-stream" returned when iden

TrimLWS trims whitespace from beginning of the bytes.

summaryStream builds a minimal (Doc)SummaryInformation property-set stream containing a single NameOfApplication (0x12) property. If wide is true the

Is checks whether this MIME type, or any of its [aliases], is equal to the expected MIME type. MIME type equality test is done on the "type/subtype" s

dirEntryBytes encodes a single 128-byte directory entry. The name is encoded as NUL-terminated UTF-16LE.

idSector encodes ids as a secSize-byte sector of little-endian int32s, padding with -1 (free).

makeCDF assembles a complete single-SAT-sector CDF file with secSize-byte sectors: sector 0: SAT sector 1: directory (root entry, optional summary

padSector pads b with zeros to a full secSize-byte sector.

FromPlain returns the charset of a plain text. It relies on BOM presence and it falls back on checking each byte in content.

GetAnAttribute assumes we passed over an SGML tag and extracts first attribute and its value. Initially, this code existed inside charset/charset.go,

Lookup finds a MIME object by its string representation. The representation can be the main MIME type, or any of its aliases.

Parse will take out a parser from the pool depending on queryType and tries to parse raw bytes as JSON.

Pop one byte from b or 0x00 if b is empty.

PopUntil will advance b until, but not including, the first occurrence of stopAt character. If no occurrence is found, then it will advance until the

Search for occurrences of pattern p inside b at any index. It returns the index where p was found in b and how many bytes were needed for matching the

frameBytes returns the size of the frame body (header + side info + audio data, excluding padding) in bytes.

jsonHelper parses raw and tries to match the q query against it. wantToks ensures we're not wasting time parsing an input that would not pass anyway,

Helper to match by a specific CLSID of a compound file. http://fileformats.archiveteam.org/wiki/Microsoft_Compound_File

Extension returns the file extension associated with the MIME type. It includes the leading dot, as in ".html". When the file format does not have an

Parent returns the parent MIME type from the hierarchy. Each MIME type has a non-nil parent, except for the root MIME type. For example, the applicat

dirAt decodes the i-th directory entry into *out. Callers must ensure i < dirLen(). The UTF-16LE name is decoded into out.name, ASCII-style, stopping

dirLen returns the number of directory entries in dirRaw.

flatten transforms an hierarchy of MIMEs into a slice of MIMEs.

msoxml behaves like zipHas, but it puts restrictions on what the first zip entry can be.

CountFields reads one CSV line and counts how many records that line contained. hasMore reports whether there are more lines in the input. collectInde

Extend adds detection for a sub-format. The detector is a function returning true when the raw input file satisfies a signature. The sub-format will b

FromBOM returns the charset declared in the BOM of content.

SetLimit sets the maximum number of bytes read from input when detecting the MIME type. Increasing the limit provides better detection for file format

buildValidMP3Header builds a known-good MPEG2.5 Layer3 frame header. MPEG2.5 (version=0), Layer3, bitrate index 1 (8 kbps), sample rate index 2 (8000

ciPrefix is like prefix but the check is case insensitive.

https://html.spec.whatwg.org/multipage/urls-and-fetching.html#algorithm-for-extracting-a-character-encoding-from-a-meta-element

nameBytes returns the decoded ASCII name without copying.

readLong reads a long-sector chain starting at sid. If length > 0 the result is truncated to that many bytes. On truncation or any other failure it re

readSecID reinterprets four little-endian bytes as a signed sector id. Every 32-bit pattern is a valid id (values >= 0 are sector numbers, negatives a

sector returns the bytes of long sector secid. If the file is truncated inside the requested sector the result is the available bytes (no padding). If

Truncate inputs at each possible index and test if decoder parses the truncated part successfully.

valid reports whether the four bytes form a syntactically valid MP3 header.

DetectFile returns the MIME type of the provided file. The result is always a valid MIME type, with "application/octet-stream" returned when identifi

Docx matches a Microsoft Word 2007 file.

EqualsAny reports whether s MIME type is equal to any MIME type in mimes. MIME type equality test is done on the "type/subtype" section, ignores any o

FirstNonWS returns the first non-whitespace character from b, or 0x00 if no such character is found.

FromHTML returns the charset of an HTML document. It first looks if a BOM is present and if so uses it to determine the charset. If no BOM is present,

FromXML returns the charset of an XML document. It relies on the XML header <?xml version="1.0" encoding="UTF-8"?> and falls back on the plain text co

Jar matches a Java archive file. There are two types of Jar files: 1. the ones that can be opened with jexec and have 0xCAFE optional flag https://sta

Pptx matches a Microsoft PowerPoint 2007 file.

ReadSlice is the same as PopUntil, but the returned value includes stopAt as well.

TrimRWS trims whitespace from the end of the bytes.

Xlsx matches a Microsoft Excel 2007 file.

appendPath will append a path fragment if queries is not empty. If we don't need query functionality (just checking if a JSON is valid), then we can s

buildFrame constructs a 4-byte MP3 frame header with the given parameters. version: 0=MPEG2.5, 2=MPEG2, 3=MPEG1 layer: 1=Layer3, 2=Layer2, 3=Layer1

Java bytecode and Mach-O binaries share the same magic number. More info here https://github.com/threatstack/libmagic/blob/master/magic/Magdir/cafebab

isMatroskaFileTypeMatched is used for webm and mkv file matching. It checks for .Eߣ sequence. If the sequence is found, then it means it is Matroska

markup returns true is any of the HTML signatures matches the raw input.

match does a depth-first search on the signature tree. It returns the deepest successful node for which all the children detection functions fail.

next extracts the name of the next zip entry.