Skip to content

rt_sigaction

Implemented in Antinomie 0.7.0 · Syscall list

long rt_sigaction(int sig, const struct sigaction *act, struct sigaction *oact, size_t sigsetsize);
Number (x86-64) 13
ABI 64
Kernel entry point sys_rt_sigaction

This is the raw kernel prototype from the pinned Linux 6.12.94 schema, not the libc wrapper.

Installs or queries the handler, mask and flags for a signal.

Name Type Meaning
sig (arg0) int Signal number.
act (arg1) const struct sigaction * Pointer to the new action.
oact (arg2) struct sigaction * Pointer to a buffer for the old action.
sigsetsize (arg3) size_t Size in bytes of the signal set; must be sizeof(sigset_t), 8.

On success: 0.

In an Antinomie trace the Return column and the ret filter field show the raw kernel return value. On failure that is the negative errno, for example -2 for ENOENT, not the -1 plus errno that the libc wrapper gives. syscall.errno holds the positive errno and syscall.success is false.

Raw return Name Meaning
-14 EFAULT A pointer argument points outside the accessible address space.
-22 EINVAL An argument is invalid.

sigaction(2) on man7.org

Coverage mark: Implemented. Every pointer argument has a capture rule in the pinned kernel patch and none of them records a “no decoder”, “address only” or “not observed” gap on any code path. Individual values can still be incomplete on a particular call; see the capture statuses.

Every call is recorded as an Entry record (the six argument words and the pointees copied at entry) and an Exit record (the return value and the pointees copied at exit).

Argument When How Recorded field key Condition
sig (arg0) Entry raw scalar word args.0, args.sig
act (arg1) Entry the pointer itself, as a raw word args.1, args.raw[1]
↳ pointee Entry structure sigaction (32 bytes); “invalid extent” if sigsetsize is not 8 arg1.sigaction the pointer is not NULL
oact (arg2) Entry the pointer itself, as a raw word args.2, args.raw[2]
↳ pointee Exit structure sigaction (32 bytes), the previous action arg2.sigaction result is 0 and the pointer is not NULL
sigsetsize (arg3) Entry raw scalar word args.3, args.sigsetsize
  • Result: ret, syscall.errno, syscall.success, syscall.duration_ns.
  • Argument words: args.sig (arg0), args.act (arg1), args.oact (arg2), args.sigsetsize (arg3); args.0 to args.5 by position.
  • Structure sigaction behind act (arg1): args.act.<member> for sa_flags, sa_handler, sa_mask, sa_restorer.
  • Structure sigaction behind oact (arg2): args.oact.<member> for sa_flags, sa_handler, sa_mask, sa_restorer.

See Syscall Trace filter for the full syntax.

  • Handler and restorer addresses are recorded as values, not as code.

For what the capture statuses mean, see Capture statuses. For what is never recorded, see Known gaps.