syscall.sh / x86 / fgetxattr

fgetxattr

retrieve an extended attribute value

sys_fgetxattr(int fd, const char *name, void *value, size_t size)
number231 (0xe7)
abii386
entry pointsys_fgetxattr
sinceLinux 3.3
man pagefgetxattr(2)
sourceelixir.bootlin.com

Registers

registervalue
eax231, the syscall number
ebxint fd
ecxconst char *name
edxvoid *value
esisize_t size
eaxthe return value

Then run int 0x80 to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/x86/fgetxattr