I wonder if there some syscall table for Linux ARM64 architecture? I found syscall table for Linux ARM32 and many other architectures, but the problem still exists.
Does anyone know where can I find a syscall table exactly for ARM64?
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.Sign up to join this community
arm64 syscall numbers are defined at: https://github.com/torvalds/linux/blob/v4.17/include/uapi/asm-generic/unistd.h
This is a bit confusing since it is quite different from x86 and x86_64 and arm 32-bit which define syscall numbers under
arch/arm/tools/syscall.tbl for arm 32-bit, but the arm64 file has a comment saying:
New architectures should use this file and implement the less feature-full calls in user space.
so I'm guessing that it is just because aarch64 is new and used a newer more arch agnostic mechanism, while the old ones can never break userland compatibility and thus cannot be updated to the new mechanism.
This is corroborated by the following minimal runnable aarch64 assembly Linux call example that works on QEMU and uses
.text .global _start _start: /* write */ mov x0, #1 ldr x1, =msg ldr x2, =len mov x8, #64 svc #0 /* exit */ mov x0, #0 mov x8, #93 svc #0 msg: .ascii "hello world\n" len = . - msg
Assemble and run:
aarch64-linux-gnu-as -o main.o main.S aarch64-linux-gnu-ld -o main.out main.o qemu-aarch64 main.out
Tested in Ubuntu 16.04 amd64.
strace source code
This is a good place to easily cheat to check the syscall numbers, see: https://unix.stackexchange.com/questions/421750/where-do-you-find-the-syscall-table-for-linux/499016#499016
It also confirms what I said about newer archs seeming to have unified call numbers.
Update: See this answer for up-to-date information on where ARM64 syscall definitions are found. Note that the information below may just be for backwards-compatibility.
... #define __NR_restart_syscall 0 __SYSCALL(__NR_restart_syscall, sys_restart_syscall) #define __NR_exit 1 __SYSCALL(__NR_exit, sys_exit) #define __NR_fork 2 __SYSCALL(__NR_fork, sys_fork) #define __NR_read 3 __SYSCALL(__NR_read, sys_read) #define __NR_write 4 __SYSCALL(__NR_write, sys_write) #define __NR_open 5 __SYSCALL(__NR_open, compat_sys_open) #define __NR_close 6 __SYSCALL(__NR_close, sys_close) /* 7 was sys_waitpid */ __SYSCALL(7, sys_ni_syscall) #define __NR_creat 8 __SYSCALL(__NR_creat, sys_creat) ...
You'll also find a few AArch64-specific syscalls in