Skip to content

Instantly share code, notes, and snippets.

@chantra
Created October 3, 2022 18:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save chantra/33277c8d090c63c4411738e8babe5fa8 to your computer and use it in GitHub Desktop.
Save chantra/33277c8d090c63c4411738e8babe5fa8 to your computer and use it in GitHub Desktop.
$ diff -ruN <(~/dump-rpm-headers.py mdatp_101.75.43.x86_64.rpm) <(~/dump-rpm-headers.py mdatp_101.75.43.x86_64.extented.rpm)
--- /proc/self/fd/12 2022-10-03 10:59:15.122137460 -0700
+++ /proc/self/fd/13 2022-10-03 10:59:15.123137468 -0700
@@ -15,7 +15,7 @@
nindex: 9
hsize: 4852
==== Signature Section - Index Entries ====
-[ 0] tag: 62 type: BIN offset:4836 count: 16 # RPMTAG_HEADERSIGNATURES
+[ 0] tag: 62 type: BIN offset: 703 count: 16 # RPMTAG_HEADERSIGNATURES
[ 1] tag: 268 type: BIN offset: 0 count: 287 # RPMSIGTAG_RSA
[ 2] tag: 269 type: STRING offset: 287 count: 1 # RPMSIGTAG_SHA1
[ 3] tag: 273 type: STRING offset: 328 count: 1 # Unknown
@@ -77,6 +77,9 @@
[ 6] RPMSIGTAG_MD5
3171 83b1 f64b ea14 ec4f 66e1 4b9e 8506
+[ 0] RPMTAG_HEADERSIGNATURES
+0010 e2cc 4000 0000 0000 0000 0000 0000
+
[ 7] RPMSIGTAG_PAYLOADSIZE
283298880
@@ -340,14 +343,11 @@
0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
-[ 0] RPMTAG_HEADERSIGNATURES
-0000 003e 0000 0007 ffff ff90 0000 0010
-
==== Header Section - Header ====
magic: b''
- version: b'\x00'
- reserved: b'\x8e\xad\xe8\x01'
- nindex: 0
- hsize: 66
+ version: b'>'
+ reserved: b''
+ nindex: -112
+ hsize: 16
==== Header Section - Index Entries ====
==== Header Section - Data ====
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment