ruby-macho 0.2.6 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 090544df5b83590546313bc137f4b55c1e6d270a
-  data.tar.gz: 0d0a63b966d573b4dccb87e5ae2e9bd4cf085b40
+  metadata.gz: 5c4525869d67df12f84b98120b7a0e28cd2e554b
+  data.tar.gz: 007fa710b4d119fe5bb477d4dea2c51664ddbb8d
 SHA512:
-  metadata.gz: abc929ddc16551d654a75234565d1bc07ced095b3c0a22b52439bcd44067458d3704a7f7d26843b475285ecff2e7556aa7ef15e85c7f18daec5cc6f653692870
-  data.tar.gz: 4ddc78eb70a82da2ba9f1361362089b3066da0ba98aaefc234323cd00b60791eb00783c742ff35c9bd95b843978cdb7cfb6a6e642a1e415015083008588a6363
+  metadata.gz: c90ef356d11b1c19b28703ef5a45ef2f1f999a7836ec126b4106a17dcc39630b825a8cd860cbd70c6c31225182c348eb5d1b2f0579fe9ecc072ce39a0ffc0c7c
+  data.tar.gz: a8bb43dd63755f1b1db1f1e3bfc23120d88f41020aa021dea91db9c8e2c7a2e14d7c5182bf2bb315c09236decba982202461a57f8b670ee78d57e1a40b04b874

data/README.md

@@ -14,9 +14,6 @@ executables, dynamic libraries, and so forth.
 
 ### Documentation
 
-**Important**: ruby-macho does not have a stable API (yet). Use it with this
-in mind.
-
 Full documentation is available on [RubyDoc](http://www.rubydoc.info/gems/ruby-macho/).
 
 A quick example of what ruby-macho can do:

data/lib/macho.rb

@@ -5,7 +5,6 @@ require "#{File.dirname(__FILE__)}/macho/load_commands"
 require "#{File.dirname(__FILE__)}/macho/sections"
 require "#{File.dirname(__FILE__)}/macho/macho_file"
 require "#{File.dirname(__FILE__)}/macho/fat_file"
-require "#{File.dirname(__FILE__)}/macho/open"
 require "#{File.dirname(__FILE__)}/macho/exceptions"
 require "#{File.dirname(__FILE__)}/macho/utils"
 require "#{File.dirname(__FILE__)}/macho/tools"
@@ -13,5 +12,29 @@ require "#{File.dirname(__FILE__)}/macho/tools"
 # The primary namespace for ruby-macho.
 module MachO
   # release version
-  VERSION = "0.2.6".freeze
+  VERSION = "1.0.0".freeze
+
+  # Opens the given filename as a MachOFile or FatFile, depending on its magic.
+  # @param filename [String] the file being opened
+  # @return [MachO::MachOFile] if the file is a Mach-O
+  # @return [MachO::FatFile] if the file is a Fat file
+  # @raise [ArgumentError] if the given file does not exist
+  # @raise [MachO::TruncatedFileError] if the file is too small to have a valid header
+  # @raise [MachO::MagicError] if the file's magic is not valid Mach-O magic
+  def self.open(filename)
+    raise ArgumentError, "#{filename}: no such file" unless File.file?(filename)
+    raise TruncatedFileError unless File.stat(filename).size >= 4
+
+    magic = File.open(filename, "rb") { |f| f.read(4) }.unpack("N").first
+
+    if Utils.fat_magic?(magic)
+      file = FatFile.new(filename)
+    elsif Utils.magic?(magic)
+      file = MachOFile.new(filename)
+    else
+      raise MagicError, magic
+    end
+
+    file
+  end
 end

data/lib/macho/fat_file.rb

@@ -7,10 +7,10 @@ module MachO
     # @return [String] the filename loaded from, or nil if loaded from a binary string
     attr_accessor :filename
 
-    # @return [MachO::FatHeader] the file's header
+    # @return [MachO::Headers::FatHeader] the file's header
     attr_reader :header
 
-    # @return [Array<MachO::FatArch>] an array of fat architectures
+    # @return [Array<MachO::Headers::FatArch>] an array of fat architectures
     attr_reader :fat_archs
 
     # @return [Array<MachO::MachOFile>] an array of Mach-O binaries
@@ -109,7 +109,7 @@ module MachO
 
     # @return [String] a string representation of the file's magic number
     def magic_string
-      MH_MAGICS[magic]
+      Headers::MH_MAGICS[magic]
     end
 
     # The file's type. Assumed to be the same for every Mach-O within.
@@ -128,7 +128,7 @@ module MachO
     end
 
     # All load commands responsible for loading dylibs in the file's Mach-O's.
-    # @return [Array<MachO::DylibCommand>] an array of DylibCommands
+    # @return [Array<MachO::LoadCommands::DylibCommand>] an array of DylibCommands
     def dylib_load_commands
       machos.map(&:dylib_load_commands).flatten
     end
@@ -280,7 +280,7 @@ module MachO
     private
 
     # Obtain the fat header from raw file data.
-    # @return [MachO::FatHeader] the fat header
+    # @return [MachO::Headers::FatHeader] the fat header
     # @raise [MachO::TruncatedFileError] if the file is too small to have a valid header
     # @raise [MachO::MagicError] if the magic is not valid Mach-O magic
     # @raise [MachO::MachOBinaryError] if the magic is for a non-fat Mach-O file
@@ -290,7 +290,7 @@ module MachO
       # the smallest fat Mach-O header is 8 bytes
       raise TruncatedFileError if @raw_data.size < 8
 
-      fh = FatHeader.new_from_bin(:big, @raw_data[0, FatHeader.bytesize])
+      fh = Headers::FatHeader.new_from_bin(:big, @raw_data[0, Headers::FatHeader.bytesize])
 
       raise MagicError, fh.magic unless Utils.magic?(fh.magic)
       raise MachOBinaryError unless Utils.fat_magic?(fh.magic)
@@ -308,15 +308,15 @@ module MachO
     end
 
     # Obtain an array of fat architectures from raw file data.
-    # @return [Array<MachO::FatArch>] an array of fat architectures
+    # @return [Array<MachO::Headers::FatArch>] an array of fat architectures
     # @api private
     def populate_fat_archs
       archs = []
 
-      fa_off = FatHeader.bytesize
-      fa_len = FatArch.bytesize
+      fa_off = Headers::FatHeader.bytesize
+      fa_len = Headers::FatArch.bytesize
       header.nfat_arch.times do |i|
-        archs << FatArch.new_from_bin(:big, @raw_data[fa_off + (fa_len * i), fa_len])
+        archs << Headers::FatArch.new_from_bin(:big, @raw_data[fa_off + (fa_len * i), fa_len])
       end
 
       archs

data/lib/macho/headers.rb

@@ -1,587 +1,590 @@
 module MachO
-  # big-endian fat magic
-  # @api private
-  FAT_MAGIC = 0xcafebabe
-
-  # little-endian fat magic
-  # this is defined, but should never appear in ruby-macho code because
-  # fat headers are always big-endian and therefore always unpacked as such.
-  # @api private
-  FAT_CIGAM = 0xbebafeca
-
-  # 32-bit big-endian magic
-  # @api private
-  MH_MAGIC = 0xfeedface
-
-  # 32-bit little-endian magic
-  # @api private
-  MH_CIGAM = 0xcefaedfe
-
-  # 64-bit big-endian magic
-  # @api private
-  MH_MAGIC_64 = 0xfeedfacf
-
-  # 64-bit little-endian magic
-  # @api private
-  MH_CIGAM_64 = 0xcffaedfe
-
-  # association of magic numbers to string representations
-  # @api private
-  MH_MAGICS = {
-    FAT_MAGIC => "FAT_MAGIC",
-    MH_MAGIC => "MH_MAGIC",
-    MH_CIGAM => "MH_CIGAM",
-    MH_MAGIC_64 => "MH_MAGIC_64",
-    MH_CIGAM_64 => "MH_CIGAM_64",
-  }.freeze
-
-  # mask for CPUs with 64-bit architectures (when running a 64-bit ABI?)
-  # @api private
-  CPU_ARCH_ABI64 = 0x01000000
-
-  # any CPU (unused?)
-  # @api private
-  CPU_TYPE_ANY = -1
-
-  # m68k compatible CPUs
-  # @api private
-  CPU_TYPE_MC680X0 = 0x06
-
-  # i386 and later compatible CPUs
-  # @api private
-  CPU_TYPE_I386 = 0x07
-
-  # x86_64 (AMD64) compatible CPUs
-  # @api private
-  CPU_TYPE_X86_64 = (CPU_TYPE_I386 | CPU_ARCH_ABI64)
-
-  # 32-bit ARM compatible CPUs
-  # @api private
-  CPU_TYPE_ARM = 0x0c
-
-  # m88k compatible CPUs
-  # @api private
-  CPU_TYPE_MC88000 = 0xd
-
-  # 64-bit ARM compatible CPUs
-  # @api private
-  CPU_TYPE_ARM64 = (CPU_TYPE_ARM | CPU_ARCH_ABI64)
-
-  # PowerPC compatible CPUs
-  # @api private
-  CPU_TYPE_POWERPC = 0x12
-
-  # PowerPC64 compatible CPUs
-  # @api private
-  CPU_TYPE_POWERPC64 = (CPU_TYPE_POWERPC | CPU_ARCH_ABI64)
-
-  # association of cpu types to symbol representations
-  # @api private
-  CPU_TYPES = {
-    CPU_TYPE_ANY => :any,
-    CPU_TYPE_I386 => :i386,
-    CPU_TYPE_X86_64 => :x86_64,
-    CPU_TYPE_ARM => :arm,
-    CPU_TYPE_ARM64 => :arm64,
-    CPU_TYPE_POWERPC => :ppc,
-    CPU_TYPE_POWERPC64 => :ppc64,
-  }.freeze
-
-  # mask for CPU subtype capabilities
-  # @api private
-  CPU_SUBTYPE_MASK = 0xff000000
-
-  # 64-bit libraries (undocumented!)
-  # @see http://llvm.org/docs/doxygen/html/Support_2MachO_8h_source.html
-  # @api private
-  CPU_SUBTYPE_LIB64 = 0x80000000
-
-  # the lowest common sub-type for `CPU_TYPE_I386`
-  # @api private
-  CPU_SUBTYPE_I386 = 3
-
-  # the i486 sub-type for `CPU_TYPE_I386`
-  # @api private
-  CPU_SUBTYPE_486 = 4
-
-  # the i486SX sub-type for `CPU_TYPE_I386`
-  # @api private
-  CPU_SUBTYPE_486SX = 132
-
-  # the i586 (P5, Pentium) sub-type for `CPU_TYPE_I386`
-  # @api private
-  CPU_SUBTYPE_586 = 5
-
-  # @see CPU_SUBTYPE_586
-  # @api private
-  CPU_SUBTYPE_PENT = CPU_SUBTYPE_586
-
-  # the Pentium Pro (P6) sub-type for `CPU_TYPE_I386`
-  # @api private
-  CPU_SUBTYPE_PENTPRO = 22
-
-  # the Pentium II (P6, M3?) sub-type for `CPU_TYPE_I386`
-  # @api private
-  CPU_SUBTYPE_PENTII_M3 = 54
-
-  # the Pentium II (P6, M5?) sub-type for `CPU_TYPE_I386`
-  # @api private
-  CPU_SUBTYPE_PENTII_M5 = 86
-
-  # the Pentium 4 (Netburst) sub-type for `CPU_TYPE_I386`
-  # @api private
-  CPU_SUBTYPE_PENTIUM_4 = 10
-
-  # the lowest common sub-type for `CPU_TYPE_MC680X0`
-  # @api private
-  CPU_SUBTYPE_MC680X0_ALL = 1
-
-  # @see CPU_SUBTYPE_MC680X0_ALL
-  # @api private
-  CPU_SUBTYPE_MC68030 = CPU_SUBTYPE_MC680X0_ALL
-
-  # the 040 subtype for `CPU_TYPE_MC680X0`
-  # @api private
-  CPU_SUBTYPE_MC68040 = 2
-
-  # the 030 subtype for `CPU_TYPE_MC680X0`
-  # @api private
-  CPU_SUBTYPE_MC68030_ONLY = 3
-
-  # the lowest common sub-type for `CPU_TYPE_X86_64`
-  # @api private
-  CPU_SUBTYPE_X86_64_ALL = CPU_SUBTYPE_I386
-
-  # the Haskell sub-type for `CPU_TYPE_X86_64`
-  # @api private
-  CPU_SUBTYPE_X86_64_H = 8
-
-  # the lowest common sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_ALL = 0
-
-  # the v4t sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_V4T = 5
-
-  # the v6 sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_V6 = 6
-
-  # the v5 sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_V5TEJ = 7
-
-  # the xscale (v5 family) sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_XSCALE = 8
-
-  # the v7 sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_V7 = 9
-
-  # the v7f (Cortex A9) sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_V7F = 10
+  # Classes and constants for parsing the headers of Mach-O binaries.
+  module Headers
+    # big-endian fat magic
+    # @api private
+    FAT_MAGIC = 0xcafebabe
 
-  # the v7s ("Swift") sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_V7S = 11
+    # little-endian fat magic
+    # this is defined, but should never appear in ruby-macho code because
+    # fat headers are always big-endian and therefore always unpacked as such.
+    # @api private
+    FAT_CIGAM = 0xbebafeca
 
-  # the v7k ("Kirkwood40") sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_V7K = 12
-
-  # the v6m sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_V6M = 14
-
-  # the v7m sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_V7M = 15
-
-  # the v7em sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_V7EM = 16
-
-  # the v8 sub-type for `CPU_TYPE_ARM`
-  # @api private
-  CPU_SUBTYPE_ARM_V8 = 13
-
-  # the lowest common sub-type for `CPU_TYPE_ARM64`
-  # @api private
-  CPU_SUBTYPE_ARM64_ALL = 0
-
-  # the v8 sub-type for `CPU_TYPE_ARM64`
-  # @api private
-  CPU_SUBTYPE_ARM64_V8 = 1
-
-  # the lowest common sub-type for `CPU_TYPE_MC88000`
-  # @api private
-  CPU_SUBTYPE_MC88000_ALL = 0
-
-  # @see CPU_SUBTYPE_MC88000_ALL
-  # @api private
-  CPU_SUBTYPE_MMAX_JPC = CPU_SUBTYPE_MC88000_ALL
-
-  # the 100 sub-type for `CPU_TYPE_MC88000`
-  # @api private
-  CPU_SUBTYPE_MC88100 = 1
-
-  # the 110 sub-type for `CPU_TYPE_MC88000`
-  # @api private
-  CPU_SUBTYPE_MC88110 = 2
-
-  # the lowest common sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_ALL = 0
-
-  # the 601 sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_601 = 1
-
-  # the 602 sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_602 = 2
-
-  # the 603 sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_603 = 3
-
-  # the 603e (G2) sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_603E = 4
-
-  # the 603ev sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_603EV = 5
-
-  # the 604 sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_604 = 6
-
-  # the 604e sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_604E = 7
-
-  # the 620 sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_620 = 8
-
-  # the 750 (G3) sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_750 = 9
-
-  # the 7400 (G4) sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_7400 = 10
-
-  # the 7450 (G4 "Voyager") sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_7450 = 11
-
-  # the 970 (G5) sub-type for `CPU_TYPE_POWERPC`
-  # @api private
-  CPU_SUBTYPE_POWERPC_970 = 100
-
-  # any CPU sub-type for CPU type `CPU_TYPE_POWERPC64`
-  # @api private
-  CPU_SUBTYPE_POWERPC64_ALL = CPU_SUBTYPE_POWERPC_ALL
-
-  # association of CPU types/subtype pairs to symbol representations in
-  # (very) roughly descending order of commonness
-  # @see https://opensource.apple.com/source/cctools/cctools-877.8/libstuff/arch.c
-  # @api private
-  CPU_SUBTYPES = {
-    CPU_TYPE_I386 => {
-      CPU_SUBTYPE_I386 => :i386,
-      CPU_SUBTYPE_486 => :i486,
-      CPU_SUBTYPE_486SX => :i486SX,
-      CPU_SUBTYPE_586 => :i586, # also "pentium" in arch(3)
-      CPU_SUBTYPE_PENTPRO => :i686, # also "pentpro" in arch(3)
-      CPU_SUBTYPE_PENTII_M3 => :pentIIm3,
-      CPU_SUBTYPE_PENTII_M5 => :pentIIm5,
-      CPU_SUBTYPE_PENTIUM_4 => :pentium4,
-    }.freeze,
-    CPU_TYPE_X86_64 => {
-      CPU_SUBTYPE_X86_64_ALL => :x86_64,
-      CPU_SUBTYPE_X86_64_H => :x86_64h,
-    }.freeze,
-    CPU_TYPE_ARM => {
-      CPU_SUBTYPE_ARM_ALL => :arm,
-      CPU_SUBTYPE_ARM_V4T => :armv4t,
-      CPU_SUBTYPE_ARM_V6 => :armv6,
-      CPU_SUBTYPE_ARM_V5TEJ => :armv5,
-      CPU_SUBTYPE_ARM_XSCALE => :xscale,
-      CPU_SUBTYPE_ARM_V7 => :armv7,
-      CPU_SUBTYPE_ARM_V7F => :armv7f,
-      CPU_SUBTYPE_ARM_V7S => :armv7s,
-      CPU_SUBTYPE_ARM_V7K => :armv7k,
-      CPU_SUBTYPE_ARM_V6M => :armv6m,
-      CPU_SUBTYPE_ARM_V7M => :armv7m,
-      CPU_SUBTYPE_ARM_V7EM => :armv7em,
-      CPU_SUBTYPE_ARM_V8 => :armv8,
-    }.freeze,
-    CPU_TYPE_ARM64 => {
-      CPU_SUBTYPE_ARM64_ALL => :arm64,
-      CPU_SUBTYPE_ARM64_V8 => :arm64v8,
-    }.freeze,
-    CPU_TYPE_POWERPC => {
-      CPU_SUBTYPE_POWERPC_ALL => :ppc,
-      CPU_SUBTYPE_POWERPC_601 => :ppc601,
-      CPU_SUBTYPE_POWERPC_603 => :ppc603,
-      CPU_SUBTYPE_POWERPC_603E => :ppc603e,
-      CPU_SUBTYPE_POWERPC_603EV => :ppc603ev,
-      CPU_SUBTYPE_POWERPC_604 => :ppc604,
-      CPU_SUBTYPE_POWERPC_604E => :ppc604e,
-      CPU_SUBTYPE_POWERPC_750 => :ppc750,
-      CPU_SUBTYPE_POWERPC_7400 => :ppc7400,
-      CPU_SUBTYPE_POWERPC_7450 => :ppc7450,
-      CPU_SUBTYPE_POWERPC_970 => :ppc970,
-    }.freeze,
-    CPU_TYPE_POWERPC64 => {
-      CPU_SUBTYPE_POWERPC64_ALL => :ppc64,
-      # apparently the only exception to the naming scheme
-      CPU_SUBTYPE_POWERPC_970 => :ppc970_64,
-    }.freeze,
-    CPU_TYPE_MC680X0 => {
-      CPU_SUBTYPE_MC680X0_ALL => :m68k,
-      CPU_SUBTYPE_MC68030 => :mc68030,
-      CPU_SUBTYPE_MC68040 => :mc68040,
-    },
-    CPU_TYPE_MC88000 => {
-      CPU_SUBTYPE_MC88000_ALL => :m88k,
-    },
-  }.freeze
-
-  # relocatable object file
-  # @api private
-  MH_OBJECT = 0x1
-
-  # demand paged executable file
-  # @api private
-  MH_EXECUTE = 0x2
-
-  # fixed VM shared library file
-  # @api private
-  MH_FVMLIB = 0x3
-
-  # core dump file
-  # @api private
-  MH_CORE = 0x4
-
-  # preloaded executable file
-  # @api private
-  MH_PRELOAD = 0x5
-
-  # dynamically bound shared library
-  # @api private
-  MH_DYLIB = 0x6
-
-  # dynamic link editor
-  # @api private
-  MH_DYLINKER = 0x7
-
-  # dynamically bound bundle file
-  # @api private
-  MH_BUNDLE = 0x8
-
-  # shared library stub for static linking only, no section contents
-  # @api private
-  MH_DYLIB_STUB = 0x9
-
-  # companion file with only debug sections
-  # @api private
-  MH_DSYM = 0xa
-
-  # x86_64 kexts
-  # @api private
-  MH_KEXT_BUNDLE = 0xb
-
-  # association of filetypes to Symbol representations
-  # @api private
-  MH_FILETYPES = {
-    MH_OBJECT => :object,
-    MH_EXECUTE => :execute,
-    MH_FVMLIB => :fvmlib,
-    MH_CORE => :core,
-    MH_PRELOAD => :preload,
-    MH_DYLIB => :dylib,
-    MH_DYLINKER => :dylinker,
-    MH_BUNDLE => :bundle,
-    MH_DYLIB_STUB => :dylib_stub,
-    MH_DSYM => :dsym,
-    MH_KEXT_BUNDLE => :kext_bundle,
-  }.freeze
-
-  # association of mach header flag symbols to values
-  # @api private
-  MH_FLAGS = {
-    :MH_NOUNDEFS => 0x1,
-    :MH_INCRLINK => 0x2,
-    :MH_DYLDLINK => 0x4,
-    :MH_BINDATLOAD => 0x8,
-    :MH_PREBOUND => 0x10,
-    :MH_SPLIT_SEGS => 0x20,
-    :MH_LAZY_INIT => 0x40,
-    :MH_TWOLEVEL => 0x80,
-    :MH_FORCE_FLAT => 0x100,
-    :MH_NOMULTIDEFS => 0x200,
-    :MH_NOPREFIXBINDING => 0x400,
-    :MH_PREBINDABLE => 0x800,
-    :MH_ALLMODSBOUND => 0x1000,
-    :MH_SUBSECTIONS_VIA_SYMBOLS => 0x2000,
-    :MH_CANONICAL => 0x4000,
-    :MH_WEAK_DEFINES => 0x8000,
-    :MH_BINDS_TO_WEAK => 0x10000,
-    :MH_ALLOW_STACK_EXECUTION => 0x20000,
-    :MH_ROOT_SAFE => 0x40000,
-    :MH_SETUID_SAFE => 0x80000,
-    :MH_NO_REEXPORTED_DYLIBS => 0x100000,
-    :MH_PIE => 0x200000,
-    :MH_DEAD_STRIPPABLE_DYLIB => 0x400000,
-    :MH_HAS_TLV_DESCRIPTORS => 0x800000,
-    :MH_NO_HEAP_EXECUTION => 0x1000000,
-    :MH_APP_EXTENSION_SAFE => 0x02000000,
-  }.freeze
-
-  # Fat binary header structure
-  # @see MachO::FatArch
-  class FatHeader < MachOStructure
-    # @return [Fixnum] the magic number of the header (and file)
-    attr_reader :magic
-
-    # @return [Fixnum] the number of fat architecture structures following the header
-    attr_reader :nfat_arch
-
-    # always big-endian
-    # @see MachOStructure::FORMAT
-    # @api private
-    FORMAT = "N2".freeze
-
-    # @see MachOStructure::SIZEOF
-    # @api private
-    SIZEOF = 8
-
-    # @api private
-    def initialize(magic, nfat_arch)
-      @magic = magic
-      @nfat_arch = nfat_arch
-    end
-  end
+    # 32-bit big-endian magic
+    # @api private
+    MH_MAGIC = 0xfeedface
 
-  # Fat binary header architecture structure. A Fat binary has one or more of
-  # these, representing one or more internal Mach-O blobs.
-  # @see MachO::FatHeader
-  class FatArch < MachOStructure
-    # @return [Fixnum] the CPU type of the Mach-O
-    attr_reader :cputype
+    # 32-bit little-endian magic
+    # @api private
+    MH_CIGAM = 0xcefaedfe
 
-    # @return [Fixnum] the CPU subtype of the Mach-O
-    attr_reader :cpusubtype
+    # 64-bit big-endian magic
+    # @api private
+    MH_MAGIC_64 = 0xfeedfacf
 
-    # @return [Fixnum] the file offset to the beginning of the Mach-O data
-    attr_reader :offset
+    # 64-bit little-endian magic
+    # @api private
+    MH_CIGAM_64 = 0xcffaedfe
 
-    # @return [Fixnum] the size, in bytes, of the Mach-O data
-    attr_reader :size
+    # association of magic numbers to string representations
+    # @api private
+    MH_MAGICS = {
+      FAT_MAGIC => "FAT_MAGIC",
+      MH_MAGIC => "MH_MAGIC",
+      MH_CIGAM => "MH_CIGAM",
+      MH_MAGIC_64 => "MH_MAGIC_64",
+      MH_CIGAM_64 => "MH_CIGAM_64",
+    }.freeze
+
+    # mask for CPUs with 64-bit architectures (when running a 64-bit ABI?)
+    # @api private
+    CPU_ARCH_ABI64 = 0x01000000
 
-    # @return [Fixnum] the alignment, as a power of 2
-    attr_reader :align
+    # any CPU (unused?)
+    # @api private
+    CPU_TYPE_ANY = -1
 
-    # always big-endian
-    # @see MachOStructure::FORMAT
+    # m68k compatible CPUs
     # @api private
-    FORMAT = "N5".freeze
+    CPU_TYPE_MC680X0 = 0x06
 
-    # @see MachOStructure::SIZEOF
+    # i386 and later compatible CPUs
     # @api private
-    SIZEOF = 20
+    CPU_TYPE_I386 = 0x07
 
+    # x86_64 (AMD64) compatible CPUs
     # @api private
-    def initialize(cputype, cpusubtype, offset, size, align)
-      @cputype = cputype
-      @cpusubtype = cpusubtype
-      @offset = offset
-      @size = size
-      @align = align
-    end
-  end
+    CPU_TYPE_X86_64 = (CPU_TYPE_I386 | CPU_ARCH_ABI64)
 
-  # 32-bit Mach-O file header structure
-  class MachHeader < MachOStructure
-    # @return [Fixnum] the magic number
-    attr_reader :magic
+    # 32-bit ARM compatible CPUs
+    # @api private
+    CPU_TYPE_ARM = 0x0c
 
-    # @return [Fixnum] the CPU type of the Mach-O
-    attr_reader :cputype
+    # m88k compatible CPUs
+    # @api private
+    CPU_TYPE_MC88000 = 0xd
 
-    # @return [Fixnum] the CPU subtype of the Mach-O
-    attr_reader :cpusubtype
+    # 64-bit ARM compatible CPUs
+    # @api private
+    CPU_TYPE_ARM64 = (CPU_TYPE_ARM | CPU_ARCH_ABI64)
 
-    # @return [Fixnum] the file type of the Mach-O
-    attr_reader :filetype
+    # PowerPC compatible CPUs
+    # @api private
+    CPU_TYPE_POWERPC = 0x12
 
-    # @return [Fixnum] the number of load commands in the Mach-O
-    attr_reader :ncmds
+    # PowerPC64 compatible CPUs
+    # @api private
+    CPU_TYPE_POWERPC64 = (CPU_TYPE_POWERPC | CPU_ARCH_ABI64)
 
-    # @return [Fixnum] the size of all load commands, in bytes, in the Mach-O
-    attr_reader :sizeofcmds
+    # association of cpu types to symbol representations
+    # @api private
+    CPU_TYPES = {
+      CPU_TYPE_ANY => :any,
+      CPU_TYPE_I386 => :i386,
+      CPU_TYPE_X86_64 => :x86_64,
+      CPU_TYPE_ARM => :arm,
+      CPU_TYPE_ARM64 => :arm64,
+      CPU_TYPE_POWERPC => :ppc,
+      CPU_TYPE_POWERPC64 => :ppc64,
+    }.freeze
+
+    # mask for CPU subtype capabilities
+    # @api private
+    CPU_SUBTYPE_MASK = 0xff000000
 
-    # @return [Fixnum] the header flags associated with the Mach-O
-    attr_reader :flags
+    # 64-bit libraries (undocumented!)
+    # @see http://llvm.org/docs/doxygen/html/Support_2MachO_8h_source.html
+    # @api private
+    CPU_SUBTYPE_LIB64 = 0x80000000
 
-    # @see MachOStructure::FORMAT
+    # the lowest common sub-type for `CPU_TYPE_I386`
     # @api private
-    FORMAT = "L=7".freeze
+    CPU_SUBTYPE_I386 = 3
 
-    # @see MachOStructure::SIZEOF
+    # the i486 sub-type for `CPU_TYPE_I386`
     # @api private
-    SIZEOF = 28
+    CPU_SUBTYPE_486 = 4
 
+    # the i486SX sub-type for `CPU_TYPE_I386`
     # @api private
-    def initialize(magic, cputype, cpusubtype, filetype, ncmds, sizeofcmds,
-                   flags)
-      @magic = magic
-      @cputype = cputype
-      # For now we're not interested in additional capability bits also to be
-      # found in the `cpusubtype` field. We only care about the CPU sub-type.
-      @cpusubtype = cpusubtype & ~CPU_SUBTYPE_MASK
-      @filetype = filetype
-      @ncmds = ncmds
-      @sizeofcmds = sizeofcmds
-      @flags = flags
-    end
+    CPU_SUBTYPE_486SX = 132
 
-    # @example
-    #  puts "this mach-o has position-independent execution" if header.flag?(:MH_PIE)
-    # @param flag [Symbol] a mach header flag symbol
-    # @return [Boolean] true if `flag` is present in the header's flag section
-    def flag?(flag)
-      flag = MH_FLAGS[flag]
-      return false if flag.nil?
-      flags & flag == flag
-    end
-  end
+    # the i586 (P5, Pentium) sub-type for `CPU_TYPE_I386`
+    # @api private
+    CPU_SUBTYPE_586 = 5
+
+    # @see CPU_SUBTYPE_586
+    # @api private
+    CPU_SUBTYPE_PENT = CPU_SUBTYPE_586
+
+    # the Pentium Pro (P6) sub-type for `CPU_TYPE_I386`
+    # @api private
+    CPU_SUBTYPE_PENTPRO = 22
+
+    # the Pentium II (P6, M3?) sub-type for `CPU_TYPE_I386`
+    # @api private
+    CPU_SUBTYPE_PENTII_M3 = 54
+
+    # the Pentium II (P6, M5?) sub-type for `CPU_TYPE_I386`
+    # @api private
+    CPU_SUBTYPE_PENTII_M5 = 86
+
+    # the Pentium 4 (Netburst) sub-type for `CPU_TYPE_I386`
+    # @api private
+    CPU_SUBTYPE_PENTIUM_4 = 10
+
+    # the lowest common sub-type for `CPU_TYPE_MC680X0`
+    # @api private
+    CPU_SUBTYPE_MC680X0_ALL = 1
+
+    # @see CPU_SUBTYPE_MC680X0_ALL
+    # @api private
+    CPU_SUBTYPE_MC68030 = CPU_SUBTYPE_MC680X0_ALL
+
+    # the 040 subtype for `CPU_TYPE_MC680X0`
+    # @api private
+    CPU_SUBTYPE_MC68040 = 2
+
+    # the 030 subtype for `CPU_TYPE_MC680X0`
+    # @api private
+    CPU_SUBTYPE_MC68030_ONLY = 3
+
+    # the lowest common sub-type for `CPU_TYPE_X86_64`
+    # @api private
+    CPU_SUBTYPE_X86_64_ALL = CPU_SUBTYPE_I386
+
+    # the Haskell sub-type for `CPU_TYPE_X86_64`
+    # @api private
+    CPU_SUBTYPE_X86_64_H = 8
+
+    # the lowest common sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_ALL = 0
+
+    # the v4t sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_V4T = 5
+
+    # the v6 sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_V6 = 6
+
+    # the v5 sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_V5TEJ = 7
+
+    # the xscale (v5 family) sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_XSCALE = 8
+
+    # the v7 sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_V7 = 9
+
+    # the v7f (Cortex A9) sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_V7F = 10
+
+    # the v7s ("Swift") sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_V7S = 11
+
+    # the v7k ("Kirkwood40") sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_V7K = 12
+
+    # the v6m sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_V6M = 14
+
+    # the v7m sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_V7M = 15
 
-  # 64-bit Mach-O file header structure
-  class MachHeader64 < MachHeader
-    # @return [void]
-    attr_reader :reserved
+    # the v7em sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_V7EM = 16
+
+    # the v8 sub-type for `CPU_TYPE_ARM`
+    # @api private
+    CPU_SUBTYPE_ARM_V8 = 13
+
+    # the lowest common sub-type for `CPU_TYPE_ARM64`
+    # @api private
+    CPU_SUBTYPE_ARM64_ALL = 0
+
+    # the v8 sub-type for `CPU_TYPE_ARM64`
+    # @api private
+    CPU_SUBTYPE_ARM64_V8 = 1
+
+    # the lowest common sub-type for `CPU_TYPE_MC88000`
+    # @api private
+    CPU_SUBTYPE_MC88000_ALL = 0
+
+    # @see CPU_SUBTYPE_MC88000_ALL
+    # @api private
+    CPU_SUBTYPE_MMAX_JPC = CPU_SUBTYPE_MC88000_ALL
+
+    # the 100 sub-type for `CPU_TYPE_MC88000`
+    # @api private
+    CPU_SUBTYPE_MC88100 = 1
+
+    # the 110 sub-type for `CPU_TYPE_MC88000`
+    # @api private
+    CPU_SUBTYPE_MC88110 = 2
+
+    # the lowest common sub-type for `CPU_TYPE_POWERPC`
+    # @api private
+    CPU_SUBTYPE_POWERPC_ALL = 0
+
+    # the 601 sub-type for `CPU_TYPE_POWERPC`
+    # @api private
+    CPU_SUBTYPE_POWERPC_601 = 1
+
+    # the 602 sub-type for `CPU_TYPE_POWERPC`
+    # @api private
+    CPU_SUBTYPE_POWERPC_602 = 2
+
+    # the 603 sub-type for `CPU_TYPE_POWERPC`
+    # @api private
+    CPU_SUBTYPE_POWERPC_603 = 3
+
+    # the 603e (G2) sub-type for `CPU_TYPE_POWERPC`
+    # @api private
+    CPU_SUBTYPE_POWERPC_603E = 4
+
+    # the 603ev sub-type for `CPU_TYPE_POWERPC`
+    # @api private
+    CPU_SUBTYPE_POWERPC_603EV = 5
+
+    # the 604 sub-type for `CPU_TYPE_POWERPC`
+    # @api private
+    CPU_SUBTYPE_POWERPC_604 = 6
+
+    # the 604e sub-type for `CPU_TYPE_POWERPC`
+    # @api private
+    CPU_SUBTYPE_POWERPC_604E = 7
+
+    # the 620 sub-type for `CPU_TYPE_POWERPC`
+    # @api private
+    CPU_SUBTYPE_POWERPC_620 = 8
+
+    # the 750 (G3) sub-type for `CPU_TYPE_POWERPC`
+    # @api private
+    CPU_SUBTYPE_POWERPC_750 = 9
 
-    # @see MachOStructure::FORMAT
+    # the 7400 (G4) sub-type for `CPU_TYPE_POWERPC`
     # @api private
-    FORMAT = "L=8".freeze
+    CPU_SUBTYPE_POWERPC_7400 = 10
 
-    # @see MachOStructure::SIZEOF
+    # the 7450 (G4 "Voyager") sub-type for `CPU_TYPE_POWERPC`
     # @api private
-    SIZEOF = 32
+    CPU_SUBTYPE_POWERPC_7450 = 11
 
+    # the 970 (G5) sub-type for `CPU_TYPE_POWERPC`
     # @api private
-    def initialize(magic, cputype, cpusubtype, filetype, ncmds, sizeofcmds,
-                   flags, reserved)
-      super(magic, cputype, cpusubtype, filetype, ncmds, sizeofcmds, flags)
-      @reserved = reserved
+    CPU_SUBTYPE_POWERPC_970 = 100
+
+    # any CPU sub-type for CPU type `CPU_TYPE_POWERPC64`
+    # @api private
+    CPU_SUBTYPE_POWERPC64_ALL = CPU_SUBTYPE_POWERPC_ALL
+
+    # association of CPU types/subtype pairs to symbol representations in
+    # (very) roughly descending order of commonness
+    # @see https://opensource.apple.com/source/cctools/cctools-877.8/libstuff/arch.c
+    # @api private
+    CPU_SUBTYPES = {
+      CPU_TYPE_I386 => {
+        CPU_SUBTYPE_I386 => :i386,
+        CPU_SUBTYPE_486 => :i486,
+        CPU_SUBTYPE_486SX => :i486SX,
+        CPU_SUBTYPE_586 => :i586, # also "pentium" in arch(3)
+        CPU_SUBTYPE_PENTPRO => :i686, # also "pentpro" in arch(3)
+        CPU_SUBTYPE_PENTII_M3 => :pentIIm3,
+        CPU_SUBTYPE_PENTII_M5 => :pentIIm5,
+        CPU_SUBTYPE_PENTIUM_4 => :pentium4,
+      }.freeze,
+      CPU_TYPE_X86_64 => {
+        CPU_SUBTYPE_X86_64_ALL => :x86_64,
+        CPU_SUBTYPE_X86_64_H => :x86_64h,
+      }.freeze,
+      CPU_TYPE_ARM => {
+        CPU_SUBTYPE_ARM_ALL => :arm,
+        CPU_SUBTYPE_ARM_V4T => :armv4t,
+        CPU_SUBTYPE_ARM_V6 => :armv6,
+        CPU_SUBTYPE_ARM_V5TEJ => :armv5,
+        CPU_SUBTYPE_ARM_XSCALE => :xscale,
+        CPU_SUBTYPE_ARM_V7 => :armv7,
+        CPU_SUBTYPE_ARM_V7F => :armv7f,
+        CPU_SUBTYPE_ARM_V7S => :armv7s,
+        CPU_SUBTYPE_ARM_V7K => :armv7k,
+        CPU_SUBTYPE_ARM_V6M => :armv6m,
+        CPU_SUBTYPE_ARM_V7M => :armv7m,
+        CPU_SUBTYPE_ARM_V7EM => :armv7em,
+        CPU_SUBTYPE_ARM_V8 => :armv8,
+      }.freeze,
+      CPU_TYPE_ARM64 => {
+        CPU_SUBTYPE_ARM64_ALL => :arm64,
+        CPU_SUBTYPE_ARM64_V8 => :arm64v8,
+      }.freeze,
+      CPU_TYPE_POWERPC => {
+        CPU_SUBTYPE_POWERPC_ALL => :ppc,
+        CPU_SUBTYPE_POWERPC_601 => :ppc601,
+        CPU_SUBTYPE_POWERPC_603 => :ppc603,
+        CPU_SUBTYPE_POWERPC_603E => :ppc603e,
+        CPU_SUBTYPE_POWERPC_603EV => :ppc603ev,
+        CPU_SUBTYPE_POWERPC_604 => :ppc604,
+        CPU_SUBTYPE_POWERPC_604E => :ppc604e,
+        CPU_SUBTYPE_POWERPC_750 => :ppc750,
+        CPU_SUBTYPE_POWERPC_7400 => :ppc7400,
+        CPU_SUBTYPE_POWERPC_7450 => :ppc7450,
+        CPU_SUBTYPE_POWERPC_970 => :ppc970,
+      }.freeze,
+      CPU_TYPE_POWERPC64 => {
+        CPU_SUBTYPE_POWERPC64_ALL => :ppc64,
+        # apparently the only exception to the naming scheme
+        CPU_SUBTYPE_POWERPC_970 => :ppc970_64,
+      }.freeze,
+      CPU_TYPE_MC680X0 => {
+        CPU_SUBTYPE_MC680X0_ALL => :m68k,
+        CPU_SUBTYPE_MC68030 => :mc68030,
+        CPU_SUBTYPE_MC68040 => :mc68040,
+      },
+      CPU_TYPE_MC88000 => {
+        CPU_SUBTYPE_MC88000_ALL => :m88k,
+      },
+    }.freeze
+
+    # relocatable object file
+    # @api private
+    MH_OBJECT = 0x1
+
+    # demand paged executable file
+    # @api private
+    MH_EXECUTE = 0x2
+
+    # fixed VM shared library file
+    # @api private
+    MH_FVMLIB = 0x3
+
+    # core dump file
+    # @api private
+    MH_CORE = 0x4
+
+    # preloaded executable file
+    # @api private
+    MH_PRELOAD = 0x5
+
+    # dynamically bound shared library
+    # @api private
+    MH_DYLIB = 0x6
+
+    # dynamic link editor
+    # @api private
+    MH_DYLINKER = 0x7
+
+    # dynamically bound bundle file
+    # @api private
+    MH_BUNDLE = 0x8
+
+    # shared library stub for static linking only, no section contents
+    # @api private
+    MH_DYLIB_STUB = 0x9
+
+    # companion file with only debug sections
+    # @api private
+    MH_DSYM = 0xa
+
+    # x86_64 kexts
+    # @api private
+    MH_KEXT_BUNDLE = 0xb
+
+    # association of filetypes to Symbol representations
+    # @api private
+    MH_FILETYPES = {
+      MH_OBJECT => :object,
+      MH_EXECUTE => :execute,
+      MH_FVMLIB => :fvmlib,
+      MH_CORE => :core,
+      MH_PRELOAD => :preload,
+      MH_DYLIB => :dylib,
+      MH_DYLINKER => :dylinker,
+      MH_BUNDLE => :bundle,
+      MH_DYLIB_STUB => :dylib_stub,
+      MH_DSYM => :dsym,
+      MH_KEXT_BUNDLE => :kext_bundle,
+    }.freeze
+
+    # association of mach header flag symbols to values
+    # @api private
+    MH_FLAGS = {
+      :MH_NOUNDEFS => 0x1,
+      :MH_INCRLINK => 0x2,
+      :MH_DYLDLINK => 0x4,
+      :MH_BINDATLOAD => 0x8,
+      :MH_PREBOUND => 0x10,
+      :MH_SPLIT_SEGS => 0x20,
+      :MH_LAZY_INIT => 0x40,
+      :MH_TWOLEVEL => 0x80,
+      :MH_FORCE_FLAT => 0x100,
+      :MH_NOMULTIDEFS => 0x200,
+      :MH_NOPREFIXBINDING => 0x400,
+      :MH_PREBINDABLE => 0x800,
+      :MH_ALLMODSBOUND => 0x1000,
+      :MH_SUBSECTIONS_VIA_SYMBOLS => 0x2000,
+      :MH_CANONICAL => 0x4000,
+      :MH_WEAK_DEFINES => 0x8000,
+      :MH_BINDS_TO_WEAK => 0x10000,
+      :MH_ALLOW_STACK_EXECUTION => 0x20000,
+      :MH_ROOT_SAFE => 0x40000,
+      :MH_SETUID_SAFE => 0x80000,
+      :MH_NO_REEXPORTED_DYLIBS => 0x100000,
+      :MH_PIE => 0x200000,
+      :MH_DEAD_STRIPPABLE_DYLIB => 0x400000,
+      :MH_HAS_TLV_DESCRIPTORS => 0x800000,
+      :MH_NO_HEAP_EXECUTION => 0x1000000,
+      :MH_APP_EXTENSION_SAFE => 0x02000000,
+    }.freeze
+
+    # Fat binary header structure
+    # @see MachO::FatArch
+    class FatHeader < MachOStructure
+      # @return [Fixnum] the magic number of the header (and file)
+      attr_reader :magic
+
+      # @return [Fixnum] the number of fat architecture structures following the header
+      attr_reader :nfat_arch
+
+      # always big-endian
+      # @see MachOStructure::FORMAT
+      # @api private
+      FORMAT = "N2".freeze
+
+      # @see MachOStructure::SIZEOF
+      # @api private
+      SIZEOF = 8
+
+      # @api private
+      def initialize(magic, nfat_arch)
+        @magic = magic
+        @nfat_arch = nfat_arch
+      end
+    end
+
+    # Fat binary header architecture structure. A Fat binary has one or more of
+    # these, representing one or more internal Mach-O blobs.
+    # @see MachO::Headers::FatHeader
+    class FatArch < MachOStructure
+      # @return [Fixnum] the CPU type of the Mach-O
+      attr_reader :cputype
+
+      # @return [Fixnum] the CPU subtype of the Mach-O
+      attr_reader :cpusubtype
+
+      # @return [Fixnum] the file offset to the beginning of the Mach-O data
+      attr_reader :offset
+
+      # @return [Fixnum] the size, in bytes, of the Mach-O data
+      attr_reader :size
+
+      # @return [Fixnum] the alignment, as a power of 2
+      attr_reader :align
+
+      # always big-endian
+      # @see MachOStructure::FORMAT
+      # @api private
+      FORMAT = "N5".freeze
+
+      # @see MachOStructure::SIZEOF
+      # @api private
+      SIZEOF = 20
+
+      # @api private
+      def initialize(cputype, cpusubtype, offset, size, align)
+        @cputype = cputype
+        @cpusubtype = cpusubtype
+        @offset = offset
+        @size = size
+        @align = align
+      end
+    end
+
+    # 32-bit Mach-O file header structure
+    class MachHeader < MachOStructure
+      # @return [Fixnum] the magic number
+      attr_reader :magic
+
+      # @return [Fixnum] the CPU type of the Mach-O
+      attr_reader :cputype
+
+      # @return [Fixnum] the CPU subtype of the Mach-O
+      attr_reader :cpusubtype
+
+      # @return [Fixnum] the file type of the Mach-O
+      attr_reader :filetype
+
+      # @return [Fixnum] the number of load commands in the Mach-O
+      attr_reader :ncmds
+
+      # @return [Fixnum] the size of all load commands, in bytes, in the Mach-O
+      attr_reader :sizeofcmds
+
+      # @return [Fixnum] the header flags associated with the Mach-O
+      attr_reader :flags
+
+      # @see MachOStructure::FORMAT
+      # @api private
+      FORMAT = "L=7".freeze
+
+      # @see MachOStructure::SIZEOF
+      # @api private
+      SIZEOF = 28
+
+      # @api private
+      def initialize(magic, cputype, cpusubtype, filetype, ncmds, sizeofcmds,
+                     flags)
+        @magic = magic
+        @cputype = cputype
+        # For now we're not interested in additional capability bits also to be
+        # found in the `cpusubtype` field. We only care about the CPU sub-type.
+        @cpusubtype = cpusubtype & ~CPU_SUBTYPE_MASK
+        @filetype = filetype
+        @ncmds = ncmds
+        @sizeofcmds = sizeofcmds
+        @flags = flags
+      end
+
+      # @example
+      #  puts "this mach-o has position-independent execution" if header.flag?(:MH_PIE)
+      # @param flag [Symbol] a mach header flag symbol
+      # @return [Boolean] true if `flag` is present in the header's flag section
+      def flag?(flag)
+        flag = MH_FLAGS[flag]
+        return false if flag.nil?
+        flags & flag == flag
+      end
+    end
+
+    # 64-bit Mach-O file header structure
+    class MachHeader64 < MachHeader
+      # @return [void]
+      attr_reader :reserved
+
+      # @see MachOStructure::FORMAT
+      # @api private
+      FORMAT = "L=8".freeze
+
+      # @see MachOStructure::SIZEOF
+      # @api private
+      SIZEOF = 32
+
+      # @api private
+      def initialize(magic, cputype, cpusubtype, filetype, ncmds, sizeofcmds,
+                     flags, reserved)
+        super(magic, cputype, cpusubtype, filetype, ncmds, sizeofcmds, flags)
+        @reserved = reserved
+      end
     end
   end
 end