syscall.sh / x64 / execve
execve
execute program
sys_execve(const char *filename, const char *const *argv, const char *const *envp)| number | 59 (0x3b) |
|---|---|
| abi | 64 |
| entry point | sys_execve |
| since | Linux 3.3 |
| man page | execve(2) |
| source | elixir.bootlin.com |
Registers
| register | value |
|---|---|
rax | 59, the syscall number |
rdi | const char *filename |
rsi | const char *const *argv |
rdx | const char *const *envp |
rax | the return value |
Then run syscall to enter the kernel.
Same syscall on other architectures
- x86 11
- arm64 221
- arm 11
- riscv64 221
- x32 1073742344
- loongarch64 221
- ppc64 11
- ppc 11
- s390x 11
- mips64 5057
- mipsn32 6057
- mipso32 4011
- alpha 59
- arc 221
- csky 221
- hexagon 221
- m68k 11
- microblaze 11
- nios2 221
- openrisc 221
- parisc 11
- sh 11
- sparc 59
- sparc64 59
- xtensa 117
Get this as JSON: https://api.syscall.sh/v2/syscalls/x64/execve