syscall.sh / x64 / kcmp

kcmp

compare two processes to determine if they share a kernel resource

sys_kcmp(pid_t pid1, pid_t pid2, int type, unsigned long idx1, unsigned long idx2)
number312 (0x138)
abicommon
entry pointsys_kcmp
sinceLinux 3.5
man pagekcmp(2)
sourceelixir.bootlin.com

Registers

registervalue
rax312, the syscall number
rdipid_t pid1
rsipid_t pid2
rdxint type
r10unsigned long idx1
r8unsigned long idx2
raxthe return value

Then run syscall to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/x64/kcmp