diff options
| author | Christophe Grenier <grenier@cgsecurity.org> | 2013-04-11 18:51:48 +0200 |
|---|---|---|
| committer | Christophe Grenier <grenier@cgsecurity.org> | 2013-04-11 18:51:48 +0200 |
| commit | f35635f7d3bd09c6a341734ca781d8f8cb380e2a (patch) | |
| tree | bd1d61d13800881fff8693693bf54b49fdf9330d /src/file_txt.c | |
| parent | d5c750582d093131ad9bef8ab41b0be88be3bdfd (diff) | |
PhotoRec: add several signatures for mbox recovery
Diffstat (limited to 'src/file_txt.c')
| -rw-r--r-- | src/file_txt.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/src/file_txt.c b/src/file_txt.c index 918b4f4..66077fa 100644 --- a/src/file_txt.c +++ b/src/file_txt.c @@ -697,7 +697,8 @@ static int header_check_mbox(const unsigned char *buffer, const unsigned int buf return 0; } reset_file_recovery(file_recovery_new); - file_recovery_new->data_check=NULL; + file_recovery_new->data_check=&data_check_txt; + file_recovery_new->file_check=&file_check_size; /* Incredimail has .imm extension but this extension isn't frequent */ file_recovery_new->extension="mbox"; return 1; @@ -1153,7 +1154,11 @@ static void register_header_check_fasttxt(file_stat_t *file_stat) register_header_check(0, "<!DOCTYPE HTML", 14, &header_check_html, file_stat); register_header_check(0, "BEGIN:VCALENDAR", 15, &header_check_ics, file_stat); register_header_check(0, "From ", 5, &header_check_mbox, file_stat); + register_header_check(0, "Message-ID: ", 12, &header_check_mbox, file_stat); register_header_check(0, "MIME-Version:", 13, &header_check_mbox, file_stat); + register_header_check(0, "Received: from ", 15, &header_check_mbox, file_stat); + register_header_check(0, "Reply-To: ", 10, &header_check_mbox, file_stat); + register_header_check(0, "Return-path: ", 13, &header_check_mbox, file_stat); register_header_check(0, "Return-Path: ", 13, &header_check_mbox, file_stat); register_header_check(0, "package ", 8, &header_check_perlm, file_stat); register_header_check(0, "package\t", 8, &header_check_perlm, file_stat); |