syscall.sh / x86 / getxattr

getxattr

retrieve an extended attribute value

sys_getxattr(const char *path, const char *name, void *value, size_t size)
number229 (0xe5)
abii386
entry pointsys_getxattr
sinceLinux 3.3
man pagegetxattr(2)
sourceelixir.bootlin.com

Registers

registervalue
eax229, the syscall number
ebxconst char *path
ecxconst char *name
edxvoid *value
esisize_t size
eaxthe return value

Then run int 0x80 to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/x86/getxattr