syscall.sh / arm / ptrace

ptrace

process trace

sys_ptrace(long request, long pid, unsigned long addr, unsigned long data)
number26 (0x1a)
abicommon
entry pointsys_ptrace
sinceLinux 4.10
man pageptrace(2)
sourceelixir.bootlin.com

Registers

registervalue
r726, the syscall number
r0long request
r1long pid
r2unsigned long addr
r3unsigned long data
r0the return value

Then run svc #0 to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/arm/ptrace