Skip to content

getitimer

Implemented in Antinomie 0.7.0 · Syscall list

long getitimer(int which, struct __kernel_old_itimerval *value);
Number (x86-64) 36
ABI common
Kernel entry point sys_getitimer

This is the raw kernel prototype from the pinned Linux 6.12.94 schema, not the libc wrapper.

Reads the current value of one of the process’s interval timers.

Name Type Meaning
which (arg0) int Selects which object or timer the call applies to.
value (arg1) struct __kernel_old_itimerval * Value to set or compare.

On success: 0.

In an Antinomie trace the Return column and the ret filter field show the raw kernel return value. On failure that is the negative errno, for example -2 for ENOENT, not the -1 plus errno that the libc wrapper gives. syscall.errno holds the positive errno and syscall.success is false.

Raw return Name Meaning
-14 EFAULT A pointer argument points outside the accessible address space.
-22 EINVAL An argument is invalid.

getitimer(2) on man7.org

Coverage mark: Implemented. Every pointer argument has a capture rule in the pinned kernel patch and none of them records a “no decoder”, “address only” or “not observed” gap on any code path. Individual values can still be incomplete on a particular call; see the capture statuses.

Every call is recorded as an Entry record (the six argument words and the pointees copied at entry) and an Exit record (the return value and the pointees copied at exit).

Argument When How Recorded field key Condition
which (arg0) Entry raw scalar word args.0, args.which
value (arg1) Entry the pointer itself, as a raw word args.1, args.raw[1]
↳ pointee Exit structure itimerval (fixed size) arg1.data result is 0
  • Result: ret, syscall.errno, syscall.success, syscall.duration_ns.
  • Argument words: args.which (arg0), args.value (arg1); args.0 to args.5 by position.
  • Structure itimerval behind value (arg1): args.value.<member> for it_interval.tv_sec, it_interval.tv_usec, it_value.tv_sec, it_value.tv_usec.

See Syscall Trace filter for the full syntax.

For what the capture statuses mean, see Capture statuses. For what is never recorded, see Known gaps.