syscall.sh / x86 / kcmp

kcmp

compare two processes to determine if they share a kernel resource

sys_kcmp(pid_t pid1, pid_t pid2, int type, unsigned long idx1, unsigned long idx2)
number349 (0x15d)
abii386
entry pointsys_kcmp
sinceLinux 3.5
man pagekcmp(2)
sourceelixir.bootlin.com

Registers

registervalue
eax349, the syscall number
ebxpid_t pid1
ecxpid_t pid2
edxint type
esiunsigned long idx1
ediunsigned long idx2
eaxthe return value

Then run int 0x80 to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/x86/kcmp