syscall.sh / x64 / fgetxattr

fgetxattr

retrieve an extended attribute value

sys_fgetxattr(int fd, const char *name, void *value, size_t size)
number193 (0xc1)
abicommon
entry pointsys_fgetxattr
sinceLinux 3.3
man pagefgetxattr(2)
sourceelixir.bootlin.com

Registers

registervalue
rax193, the syscall number
rdiint fd
rsiconst char *name
rdxvoid *value
r10size_t size
raxthe return value

Then run syscall to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/x64/fgetxattr