syscall.sh / x86 / execve
execve
execute program
sys_execve(const char *filename, const char *const *argv, const char *const *envp)| number | 11 (0xb) |
|---|---|
| abi | i386 |
| entry point | sys_execve |
| since | Linux 3.3 |
| man page | execve(2) |
| source | elixir.bootlin.com |
Registers
| register | value |
|---|---|
eax | 11, the syscall number |
ebx | const char *filename |
ecx | const char *const *argv |
edx | const char *const *envp |
eax | the return value |
Then run int 0x80 to enter the kernel.
Same syscall on other architectures
- x64 59
- arm64 221
- arm 11
- riscv64 221
- x32 1073742344
- loongarch64 221
- ppc64 11
- ppc 11
- s390x 11
- mips64 5057
- mipsn32 6057
- mipso32 4011
- alpha 59
- arc 221
- csky 221
- hexagon 221
- m68k 11
- microblaze 11
- nios2 221
- openrisc 221
- parisc 11
- sh 11
- sparc 59
- sparc64 59
- xtensa 117
Get this as JSON: https://api.syscall.sh/v2/syscalls/x86/execve