syscall.sh / x86 / pidfd_open

pidfd_open

obtain a file descriptor that refers to a task

sys_pidfd_open(pid_t pid, unsigned int flags)
number434 (0x1b2)
abii386
entry pointsys_pidfd_open
sinceLinux 5.3
man pagepidfd_open(2)
sourceelixir.bootlin.com

Registers

registervalue
eax434, the syscall number
ebxpid_t pid
ecxunsigned int flags
eaxthe return value

Then run int 0x80 to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/x86/pidfd_open