Skip to content

pidfd_open

Implemented in Antinomie 0.7.0 · Syscall list

long pidfd_open(pid_t pid, unsigned int flags);
Number (x86-64) 434
ABI common
Kernel entry point sys_pidfd_open

This is the raw kernel prototype from the pinned Linux 6.12.94 schema, not the libc wrapper.

Returns a file descriptor that refers to a process by its pid.

Name Type Meaning
pid (arg0) pid_t Process or thread id.
flags (arg1) unsigned int Option flags that change the behavior of the call.

On success: A new file descriptor (a non-negative number).

In an Antinomie trace the Return column and the ret filter field show the raw kernel return value. On failure that is the negative errno, for example -2 for ENOENT, not the -1 plus errno that the libc wrapper gives. syscall.errno holds the positive errno and syscall.success is false.

Raw return Name Meaning
-22 EINVAL An argument is invalid.
-3 ESRCH No such process or thread.

pidfd_open(2) on man7.org

Coverage mark: Implemented. All arguments are plain values, recorded as the raw argument words at entry. There is no pointee to copy and no known gap.

Every call is recorded as an Entry record (the six argument words and the pointees copied at entry) and an Exit record (the return value and the pointees copied at exit).

Argument When How Recorded field key Condition
pid (arg0) Entry raw scalar word args.0, args.pid
flags (arg1) Entry raw scalar word; Syscall Trace also decodes it into flag names (pidfd_open group), listing unknown bits separately args.1, args.flags
  • Result: ret, syscall.errno, syscall.success, syscall.duration_ns.
  • Argument words: args.pid (arg0), args.flags (arg1); args.0 to args.5 by position.

See Syscall Trace filter for the full syntax.

For what the capture statuses mean, see Capture statuses. For what is never recorded, see Known gaps.