Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x-fmt/80 (Mac Pict) and fmt/1427 (Mac Draw 2) signatures overlap #11

Open
Dclipsham opened this issue Jul 22, 2022 · 5 comments
Open

x-fmt/80 (Mac Pict) and fmt/1427 (Mac Draw 2) signatures overlap #11

Dclipsham opened this issue Jul 22, 2022 · 5 comments

Comments

@Dclipsham
Copy link
Contributor

Signatures for these two formats currently overlap.
x-fmt/80:
44525747(4D44|4432){516}1101

fmt/1427:
44525747(0000|4432)

So an x-fmt/80 with 'D2' following DRWG header will necessarily also match fmt/1427. This is evident in the file 'DOODLE.PCT' found in the EDRM 1.0 dataset (https://edrm.net/resources/data-sets/#1598455996696-88a3bd82-aedf) which is currently getting dual identification outcome based on signature.

Not yet sure the best resolution so just raising an issue for now...

CC @thorsted

@thorsted
Copy link
Contributor

Hmm, I went back at looked at my original submission and there might have been a segment missed for fmt/1427.

<InternalSignature ID="3" Specificity="Specific">
      <ByteSequence Reference="BOFoffset">
        <SubSequence MinFragLength="0" Position="1" SubSeqMaxOffset="0" SubSeqMinOffset="0">
          <Sequence>44525747</Sequence>
          <DefaultShift>5</DefaultShift>
          <Shift Byte="44">4</Shift>
          <Shift Byte="52">3</Shift>
          <Shift Byte="57">2</Shift>
          <Shift Byte="47">1</Shift>
          <RightFragment MaxOffset="0" MinOffset="0" Position="1">0000</RightFragment>
          <RightFragment MaxOffset="0" MinOffset="0" Position="1">4432</RightFragment>
          <RightFragment MaxOffset="0" MinOffset="0" Position="2">0000</RightFragment>
        </SubSequence>
      </ByteSequence>
    </InternalSignature>

The current signature doesn't have that second position fragment. I believe I added it to protect it from some similarities in other versions, but this was one of my earlier signatures, any advice would be appreciated. I remember @jayGattusoNLNZ also used the additional zero's on the signature he developed around the same time. Might warrant a second look.

@ross-spencer
Copy link
Contributor

@Dclipsham @thorsted should this be picked up by the skeleton suite? Do you have any insight into why it isn't?

@Dclipsham
Copy link
Contributor Author

From a quick glance at the v97 suite (not the most recent, but just readily available), fmt/1427 whole file is '44 52 57 47 00 00', and x-fmt/80 begins '44 52 57 47 4D 44' so neither include the 0x44 32 at offset 0x04-05

@tnafrancesca
Copy link
Collaborator

@Dclipsham @thorsted not an ideal solution but maybe in time for the next release before a closer look can happen but should I prioritise x-fmt/80 over fmt/1427 for v.108? Unless this issue has already been picked up on

@Dclipsham
Copy link
Contributor Author

I'm not hugely au fait with the formats yet so can't make that call right now I'm afraid.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants