Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I was reading about the file command and I came across something I don't quite understand:

file is designed to determine the kind of file being queried.... file accomplishes this by performing three sets of tests on the file in question:

  • filesystem tests,
  • magic tests,
  • language tests

What are magic tests?

share|improve this question
add comment

2 Answers 2

up vote 11 down vote accepted

That refers to the "magic bytes" which many file formats have at the beginning of a file which show what kind of file this is.

E.g. if a file starts with #! then it is considered a script.

share|improve this answer
add comment

"magic" here refers to "magic numbers": a special value that's in a known place in a file that identifies its type. The file command has a database of these numbers and what type they correspond to. The library that goes with that database is called libmagic, and you can access that from your own programs.

They aren't necessarily "numbers" as we might think of them. For example, a PNG image file always starts with "\x89PNG\r\n\x1a\n", a Java class begins with the four bytes (in hexadecimal) CA FE BA BE, and an HTML file has "< html" somewhere near the start. It's just some small sequence of data that's known to be in a file of that type, usually very close to the start.

When people are defining file formats they often include one of these in it either deliberately or just as part of making the format fit together. file can uses them afterwards. It also has other ways of actually looking at the contents of the file to guess what it is ("language tests").

share|improve this answer
4  
Note that originally, the "magic numbers" were, specifically, the first two bytes of an executable file, used by the kernel to load it in the appropriate way. #! is actually an example of this, because the kernel itself, on seeing those bytes, is supposed to invoke the command that follows. –  IMSoP Jun 22 at 0:05
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.