---
title: "es_exec_fd(_:_:)"
framework: endpointsecurity
role: symbol
role_heading: Function
path: "endpointsecurity/es_exec_fd(_:_:)"
---

# es_exec_fd(_:_:)

Gets the file descriptor at the specified position from a process execution event.

## Declaration

```swift
func es_exec_fd(_ event: UnsafePointer<es_event_exec_t>, _ index: UInt32) -> UnsafePointer<es_fd_t>
```

## Parameters

- `event`: The process execution event.
- `index`: The zero-based index of the argument to return. Attempting to read an out-of-bounds index — where index >= es_fd_arg_count() — results in undefined behavior.

## Return Value

Return Value A pointer to an es_fd_t instance that describes the file descriptor.

## Discussion

Discussion This function doesn’t allocate memory for the returned file descriptor description; it points to an es_fd_t inside of event. Because you don’t own this memory, don’t try to free it. warning: The returned pointer must not outlive the event parameter passed to the function, because the pointer will likely be invalid after the function returns.

## See Also

### Process Event Helper Functions

- [es_exec_arg(_:_:)](endpointsecurity/es_exec_arg(_:_:).md)
- [es_exec_arg_count(_:)](endpointsecurity/es_exec_arg_count(_:).md)
- [es_exec_env(_:_:)](endpointsecurity/es_exec_env(_:_:).md)
- [es_exec_env_count(_:)](endpointsecurity/es_exec_env_count(_:).md)
- [es_exec_fd_count(_:)](endpointsecurity/es_exec_fd_count(_:).md)
- [es_fd_t](endpointsecurity/es_fd_t.md)