Difference between revisions of "Hexspeak"

Revision as of 11:47, 3 September 2014

Notable magic numbers

• 0x0000000FF1CE ("office") is used as the last part of product codes (guid) for Microsoft Office components (visible in registry under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall registry key).
• 0x00BAB10C ("über (ooba) block") is used as the magic number for the ZFS uberblock.
• 0x8BADF00D ("ate bad food") is used by Apple Inc.|Apple in IOS (Apple)|iOS crash reports, when an application takes too long to launch, terminate, or respond to system events.
• 0x1BADB002 ("1 bad boot" Multiboot header magic number.
• 0x1CEB00DA ("ice buddha") was used as the origin for the binary file parser IceBuddha.
• 0xB105F00D ("BIOS food") is the value of the low bytes of last four registers on ARM PrimeCell compatible components (the component_id registers), used to identify correct behaviour of a memory-mapped component.
• 0xB16B00B5 ("big boobs") was required by Microsoft's Hyper-V hypervisor to be used by Linux guests as their "guest signature". One proposal suggested changing it to 0x0DEFACED ("defaced") Actually, it was initially changed to decimal and then replaced entirely.
• 0xBAADF00D ("bad food") is used by Microsoft's LocalAlloc(LMEM_FIXED) to indicate uninitialised allocated heap memory when the debug heap is used.^[1]
• 0xBADDCAFE ("bad cafe") is used by Libumem to indicate uninitialized memory area
• C15C:0D06:F00D ("cisco dog food") used in the IPv6 address of www.cisco.com on World IPv6 Day. "Dog food" refers to Cisco Eating your own dog food|eating its own dog food with IPv6.
• 0xCAFEBABE ("cafe babe") is used by Mach-O to identify Universal binary|Universal object files, and by the Java (programming language)|Java programming language to identify Java bytecode class files.^[2]
• 0xCAFED00D ("cafe dude") is used by Java (software platform)|Java as a magic number for their pack200 compression.^[3]
• 0xCEFAEDFE ("face feed") is used by Mach-O to identify flat (single architecture) object files. In little endian this reads FEEDFACE, "Feed Face".
• 0xD15EA5E ("disease") is a flag that indicates regular boot on the Nintendo GameCube and Wii consoles.^[4][5]
• 0xDABBAD00 ("dabba doo") is the name of a blog on computer security.^[6]
• 0xDEADBABE ("Dead Babe") is used by IBM Jikes RVM as a sanity check of the stack of the primary thread.^[7]
• 0xDEADBEAF ("dead beaf") is part of the signature code of Jazz Jackrabbit 2 tileset files.^[8] Level files have less room for their signatures and use 0xBABE ("babe") instead.^[9] It is also the header of campaign gamesaves used in the Halo Game Series.
• 0xDEADBEEF ("dead beef") is frequently used to indicate a software crash or deadlock in embedded systems. DEADBEEF was originally used to mark newly allocated areas of memory that had not yet been initialized—when scanning a memory dump, it is easy to see the DEADBEEF. It is used by IBM RS/6000 systems, Mac OS on 32-bit PowerPC processors and the Commodore International|Commodore Amiga as a magic debug value. On Sun Microsystems' Solaris (operating system)|Solaris, it marks freed kernel memory. On OpenVMS running on Alpha processors, DEAD_BEEF can be seen by pressing CTRL-T. The DEC Alpha SRM console has a background process that traps memory errors, identified by PS as "BeefEater waiting on 0xdeadbeef".^[10]
• 0xDEADC0DE ("dead code") is used as a marker in OpenWrt firmware to signify the beginning of the to-be created jffs2 filesystem at the end of the static firmware.
• 0xDEADDEAD ("dead dead") is the bug check (STOP) code displayed when invoking a blue screen of death|Blue Screen of Death either by telling the kernel via the attached debugger, or by using a special keystroke combination.^[11] This is usually seen by driver developers, as it is used to get a memory dump on Windows NT based systems. An alternative to 0xDEADDEAD is the bug check code 0x000000E2,^[12] as they are both called MANUALLY_INITIATED_CRASH as seen on the Microsoft Developer Network.
• 0xDEADD00D ("dead dude") is used by Android (operating system)|Android in the Dalvik (software)|Dalvik virtual machine to indicate a VM abort.
• 0xDEADFA11 ("dead fall") is used by Apple Inc.|Apple in IOS (Apple)|iOS crash reports, when the user force quits an application.^[13]
• 0xDEAD10CC ("dead lock") is used by Apple Inc.|Apple in IOS (Apple)|iOS crash reports, when application holds on to a system resource while running in the background.^[13]
• 0xDEADFEED ("dead feed") is used by Apple Inc.|Apple in IOS (Apple)|iOS crash reports, when a timeout occurs spawning a service
• 0xDEFEC8ED ("defecated") is the magic number for OpenSolaris core dumps.^[14]
• 0xE011CFD0 is used as a magic number (programming)|magic number for Microsoft Office files. In little endian this reads D0CF11E0, "docfile0".^[15]
• face:b00c ("facebook") used in the IPv6 address of www.v6.facebook.com
• 0xFACEFEED ("face feed") is used by Alpha servers running Windows NT. The Alpha Hardware Abstraction Layer (HAL) generates this error when it encounters a hardware failure.^[16]
• 0xFBADBEEF ("bad beef") is used in the WebKit and Blink (layout engine)|Blink layout engines to indicate a known, unrecoverable error such as out of memory.^[17]
• 0xFEE1DEAD ("feel dead") is used as a magic number in the Linux reboot system call.^[18]
• 0xDEADBAAD ("dead bad") is used by the Android libc abort() function when native heap corruption is detected.
• deadbeef-dead-beef-dead-beef00000075("dead beef") is the GUID assigned to hung/dead virtual machines in Citrix Xenserver.
• 0x4B1D ("Forbid'den'") was a password in some calibration consoles for developers to peer deeper into control registers outside the normal calibration memory range.