Skip to content

splice

Implemented in Antinomie 0.7.0 · Syscall list

long splice(int fd_in, loff_t *off_in, int fd_out, loff_t *off_out, size_t len, unsigned int flags);
Number (x86-64) 275
ABI common
Kernel entry point sys_splice

This is the raw kernel prototype from the pinned Linux 6.12.94 schema, not the libc wrapper.

Moves data between a pipe and another file descriptor without copying through user space.

Name Type Meaning
fd_in (arg0) int Input file descriptor.
off_in (arg1) loff_t * Pointer to the input offset, or NULL.
fd_out (arg2) int Output file descriptor.
off_out (arg3) loff_t * Pointer to the output offset, or NULL.
len (arg4) size_t Length in bytes.
flags (arg5) unsigned int Option flags that change the behavior of the call.

On success: The number of bytes transferred (see the description for what 0 means).

In an Antinomie trace the Return column and the ret filter field show the raw kernel return value. On failure that is the negative errno, for example -2 for ENOENT, not the -1 plus errno that the libc wrapper gives. syscall.errno holds the positive errno and syscall.success is false.

Raw return Name Meaning
-9 EBADF A file descriptor is not valid for this operation.
-22 EINVAL An argument is invalid.

splice(2) on man7.org

Coverage mark: Implemented. Every pointer argument has a capture rule in the pinned kernel patch and none of them records a “no decoder”, “address only” or “not observed” gap on any code path. Individual values can still be incomplete on a particular call; see the capture statuses.

Every call is recorded as an Entry record (the six argument words and the pointees copied at entry) and an Exit record (the return value and the pointees copied at exit).

Argument When How Recorded field key Condition
fd_in (arg0) Entry raw scalar word args.0, args.fd_in
off_in (arg1) Entry the pointer itself, as a raw word args.1, args.raw[1]
↳ pointee Entry and exit structure loff_t (fixed size) arg1.data at exit only when the result is 0 or greater
fd_out (arg2) Entry raw scalar word args.2, args.fd_out
off_out (arg3) Entry the pointer itself, as a raw word args.3, args.raw[3]
↳ pointee Entry and exit structure loff_t (fixed size) arg3.data at exit only when the result is 0 or greater
len (arg4) Entry raw scalar word args.4, args.len
flags (arg5) Entry raw scalar word; Syscall Trace also decodes it into flag names (splice group), listing unknown bits separately args.5, args.flags
  • Result: ret, syscall.errno, syscall.success, syscall.duration_ns.
  • Argument words: args.fd_in (arg0), args.off_in (arg1), args.fd_out (arg2), args.off_out (arg3), args.len (arg4), args.flags (arg5); args.0 to args.5 by position.
  • Structure loff_t behind off_in (arg1): args.off_in.<member> for value.
  • Structure loff_t behind off_out (arg3): args.off_out.<member> for value.

See Syscall Trace filter for the full syntax.

For what the capture statuses mean, see Capture statuses. For what is never recorded, see Known gaps.