Difference between revisions of "Hexspeak"
From Projects
(→Notable magic numbers) |
(→Notable magic numbers) |
||
| (6 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
== Notable magic numbers == | == Notable magic numbers == | ||
| − | + | * 0x0000000FF1CE ("office") is used as the last part of product codes (guid) for Microsoft Office components (visible in registry under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall registry key). | |
| − | * | + | * 0x00BAB10C ("über (ooba) block") is used as the magic number for the ZFS uberblock. |
| − | * | + | * 0x8BADF00D ("ate bad food") is used by Apple in iOS crash reports, when an application takes too long to launch, terminate, or respond to system events. |
| − | * | + | * 0x1BADB002 ("1 bad boot"[2]) Multiboot header magic number. |
| − | * | + | * 0x1CEB00DA ("ice buddha") was used as the origin for the binary file parser IceBuddha. |
| − | * | + | * 0xB105F00D ("BIOS food") is the value of the low bytes of last four registers on ARM PrimeCell compatible components (the component_id registers), used to identify correct behaviour of a memory-mapped component. |
| − | * | + | * 0xB16B00B5 ("big boobs") was required by Microsoft's Hyper-V hypervisor to be used by Linux guests as their "guest signature". One proposal suggested changing it to 0x0DEFACED ("defaced"). Actually, it was initially changed to decimal and then replaced entirely. |
| − | * | + | * 0xBAADF00D ("bad food") is used by Microsoft's LocalAlloc(LMEM_FIXED) to indicate uninitialised allocated heap memory when the debug heap is used. |
| − | * | + | * 0xBADDCAFE ("bad cafe") is used by Libumem to indicate uninitialized memory area |
| − | * | + | * C15C:0D06:F00D ("cisco dog food") used in the IPv6 address of www.cisco.com on World IPv6 Day. "Dog food" refers to Cisco eating its own dog food with IPv6. |
| − | * | + | * 0xCAFEBABE ("cafe babe") is used by Mach-O to identify Universal object files, and by the Java programming language to identify Java bytecode class files. |
| − | * | + | * 0xCAFED00D ("cafe dude") is used by Java as a magic number for their pack200 compression. |
| − | * | + | * 0xCEFAEDFE ("face feed") is used by Mach-O to identify flat (single architecture) object files. In little endian this reads FEEDFACE, "Feed Face". |
| − | * | + | * 0xD15EA5E ("disease") is a flag that indicates regular boot on the Nintendo GameCube and Wii consoles. |
| − | * | + | * 0xDABBAD00 ("dabba doo") is the name of a blog on computer security. |
| − | * | + | * 0xDEADBABE ("Dead Babe") is used by IBM Jikes RVM as a sanity check of the stack of the primary thread. |
| − | * | + | * 0xDEADBEAF ("dead beaf") is part of the signature code of Jazz Jackrabbit 2 tileset files. Level files have less room for their signatures and use 0xBABE ("babe") instead.[16] It is also the header of campaign gamesaves used in the Halo Game Series. |
| − | * | + | * 0xDEADBEEF ("dead beef") is frequently used to indicate a software crash or deadlock in embedded systems. DEADBEEF was originally used to mark newly allocated areas of memory that had not yet been initialized—when scanning a memory dump, it is easy to see the DEADBEEF. It is used by IBM RS/6000 systems, Mac OS on 32-bit PowerPC processors and the Commodore Amiga as a magic debug value. On Sun Microsystems' Solaris, it marks freed kernel memory. On OpenVMS running on Alpha processors, DEAD_BEEF can be seen by pressing CTRL-T. The DEC Alpha SRM console has a background process that traps memory errors, identified by PS as "BeefEater waiting on 0xdeadbeef". |
| − | * | + | * 0xDEADC0DE ("dead code") is used as a marker in OpenWrt firmware to signify the beginning of the to-be created jffs2 filesystem at the end of the static firmware. |
| − | * | + | * 0xDEADDEAD ("dead dead") is the bug check (STOP) code displayed when invoking a Blue Screen of Death either by telling the kernel via the attached debugger, or by using a special keystroke combination.[18] This is usually seen by driver developers, as it is used to get a memory dump on Windows NT based systems. An alternative to 0xDEADDEAD is the bug check code 0x000000E2, as they are both called MANUALLY_INITIATED_CRASH as seen on the Microsoft Developer Network. |
| − | * | + | * 0xDEADD00D ("dead dude") is used by Android in the Dalvik virtual machine to indicate a VM abort. |
| − | * | + | * 0xDEADFA11 ("dead fall") is used by Apple in iOS crash reports, when the user force quits an application. |
| − | * | + | * 0xDEAD10CC ("dead lock") is used by Apple in iOS crash reports, when application holds on to a system resource while running in the background. |
| − | * | + | * 0xDEADFEED ("dead feed") is used by Apple in iOS crash reports, when a timeout occurs spawning a service |
| − | * | + | * 0xDEFEC8ED ("defecated") is the magic number for OpenSolaris core dumps. |
| − | * | + | * 0xE011CFD0 is used as a magic number for Microsoft Office files. In little endian this reads D0CF11E0, "docfile0". |
| − | * | + | * face:b00c ("facebook") used in the IPv6 address of www.v6.facebook.com |
| − | * | + | * 0xFACEFEED ("face feed") is used by Alpha servers running Windows NT. The Alpha Hardware Abstraction Layer (HAL) generates this error when it encounters a hardware failure. |
| − | * | + | * 0xFBADBEEF ("bad beef") is used in the WebKit and Blink layout engines to indicate a known, unrecoverable error such as out of memory. |
| − | * | + | * 0xFEE1DEAD ("feel dead") is used as a magic number in the Linux reboot system call. |
| − | * | + | * 0xDEADBAAD ("dead bad") is used by the Android libc abort() function when native heap corruption is detected. |
| − | * | + | deadbeef-dead-beef-dead-beef00000075("dead beef") is the GUID assigned to hung/dead virtual machines in Citrix Xenserver. |
| − | + | * 0x4B1D ("Forbid'den'") was a password in some calibration consoles for developers to peer deeper into control registers outside the normal calibration memory range. | |
| − | * | + | |
Latest revision as of 11:52, 3 September 2014
Notable magic numbers
- 0x0000000FF1CE ("office") is used as the last part of product codes (guid) for Microsoft Office components (visible in registry under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall registry key).
- 0x00BAB10C ("über (ooba) block") is used as the magic number for the ZFS uberblock.
- 0x8BADF00D ("ate bad food") is used by Apple in iOS crash reports, when an application takes too long to launch, terminate, or respond to system events.
- 0x1BADB002 ("1 bad boot"[2]) Multiboot header magic number.
- 0x1CEB00DA ("ice buddha") was used as the origin for the binary file parser IceBuddha.
- 0xB105F00D ("BIOS food") is the value of the low bytes of last four registers on ARM PrimeCell compatible components (the component_id registers), used to identify correct behaviour of a memory-mapped component.
- 0xB16B00B5 ("big boobs") was required by Microsoft's Hyper-V hypervisor to be used by Linux guests as their "guest signature". One proposal suggested changing it to 0x0DEFACED ("defaced"). Actually, it was initially changed to decimal and then replaced entirely.
- 0xBAADF00D ("bad food") is used by Microsoft's LocalAlloc(LMEM_FIXED) to indicate uninitialised allocated heap memory when the debug heap is used.
- 0xBADDCAFE ("bad cafe") is used by Libumem to indicate uninitialized memory area
- C15C:0D06:F00D ("cisco dog food") used in the IPv6 address of www.cisco.com on World IPv6 Day. "Dog food" refers to Cisco eating its own dog food with IPv6.
- 0xCAFEBABE ("cafe babe") is used by Mach-O to identify Universal object files, and by the Java programming language to identify Java bytecode class files.
- 0xCAFED00D ("cafe dude") is used by Java as a magic number for their pack200 compression.
- 0xCEFAEDFE ("face feed") is used by Mach-O to identify flat (single architecture) object files. In little endian this reads FEEDFACE, "Feed Face".
- 0xD15EA5E ("disease") is a flag that indicates regular boot on the Nintendo GameCube and Wii consoles.
- 0xDABBAD00 ("dabba doo") is the name of a blog on computer security.
- 0xDEADBABE ("Dead Babe") is used by IBM Jikes RVM as a sanity check of the stack of the primary thread.
- 0xDEADBEAF ("dead beaf") is part of the signature code of Jazz Jackrabbit 2 tileset files. Level files have less room for their signatures and use 0xBABE ("babe") instead.[16] It is also the header of campaign gamesaves used in the Halo Game Series.
- 0xDEADBEEF ("dead beef") is frequently used to indicate a software crash or deadlock in embedded systems. DEADBEEF was originally used to mark newly allocated areas of memory that had not yet been initialized—when scanning a memory dump, it is easy to see the DEADBEEF. It is used by IBM RS/6000 systems, Mac OS on 32-bit PowerPC processors and the Commodore Amiga as a magic debug value. On Sun Microsystems' Solaris, it marks freed kernel memory. On OpenVMS running on Alpha processors, DEAD_BEEF can be seen by pressing CTRL-T. The DEC Alpha SRM console has a background process that traps memory errors, identified by PS as "BeefEater waiting on 0xdeadbeef".
- 0xDEADC0DE ("dead code") is used as a marker in OpenWrt firmware to signify the beginning of the to-be created jffs2 filesystem at the end of the static firmware.
- 0xDEADDEAD ("dead dead") is the bug check (STOP) code displayed when invoking a Blue Screen of Death either by telling the kernel via the attached debugger, or by using a special keystroke combination.[18] This is usually seen by driver developers, as it is used to get a memory dump on Windows NT based systems. An alternative to 0xDEADDEAD is the bug check code 0x000000E2, as they are both called MANUALLY_INITIATED_CRASH as seen on the Microsoft Developer Network.
- 0xDEADD00D ("dead dude") is used by Android in the Dalvik virtual machine to indicate a VM abort.
- 0xDEADFA11 ("dead fall") is used by Apple in iOS crash reports, when the user force quits an application.
- 0xDEAD10CC ("dead lock") is used by Apple in iOS crash reports, when application holds on to a system resource while running in the background.
- 0xDEADFEED ("dead feed") is used by Apple in iOS crash reports, when a timeout occurs spawning a service
- 0xDEFEC8ED ("defecated") is the magic number for OpenSolaris core dumps.
- 0xE011CFD0 is used as a magic number for Microsoft Office files. In little endian this reads D0CF11E0, "docfile0".
- face:b00c ("facebook") used in the IPv6 address of www.v6.facebook.com
- 0xFACEFEED ("face feed") is used by Alpha servers running Windows NT. The Alpha Hardware Abstraction Layer (HAL) generates this error when it encounters a hardware failure.
- 0xFBADBEEF ("bad beef") is used in the WebKit and Blink layout engines to indicate a known, unrecoverable error such as out of memory.
- 0xFEE1DEAD ("feel dead") is used as a magic number in the Linux reboot system call.
- 0xDEADBAAD ("dead bad") is used by the Android libc abort() function when native heap corruption is detected.
deadbeef-dead-beef-dead-beef00000075("dead beef") is the GUID assigned to hung/dead virtual machines in Citrix Xenserver.
- 0x4B1D ("Forbid'den'") was a password in some calibration consoles for developers to peer deeper into control registers outside the normal calibration memory range.
