syscall.sh / x86 / pidfd_getfd
pidfd_getfd
obtain a duplicate of another process's file descriptor
sys_pidfd_getfd(int pidfd, int fd, unsigned int flags)| number | 438 (0x1b6) |
|---|---|
| abi | i386 |
| entry point | sys_pidfd_getfd |
| since | Linux 5.6 |
| man page | pidfd_getfd(2) |
| source | elixir.bootlin.com |
Registers
| register | value |
|---|---|
eax | 438, the syscall number |
ebx | int pidfd |
ecx | int fd |
edx | unsigned int flags |
eax | the return value |
Then run int 0x80 to enter the kernel.
Same syscall on other architectures
- x64 438
- arm64 438
- arm 438
- riscv64 438
- x32 1073742262
- loongarch64 438
- ppc64 438
- ppc 438
- s390x 438
- mips64 5438
- mipsn32 6438
- mipso32 4438
- alpha 548
- arc 438
- csky 438
- hexagon 438
- m68k 438
- microblaze 438
- nios2 438
- openrisc 438
- parisc 438
- sh 438
- sparc 438
- sparc64 438
- xtensa 438
Get this as JSON: https://api.syscall.sh/v2/syscalls/x86/pidfd_getfd