syscall.sh / x64 / vfork

vfork

create a child process and block parent

sys_vfork(void)
number58 (0x3a)
abicommon
entry pointsys_vfork
sinceLinux 3.3
man pagevfork(2)
sourceelixir.bootlin.com

Registers

registervalue
rax58, the syscall number
raxthe return value

Then run syscall to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/x64/vfork