Viktor Malík
Viktor Malík
Optimise `len()` by calling the `bpf_map_sum_elem_count` kernel function if it is available. The function just reads and sums per-cpu counters so it's much faster than iterating through all map elements....
Originally, when bpftrace introduced support for BPF trampolines (called `fentry`/`fexit` in the kernel), these were called `kfunc`/`kretfunc` to make a connection to `kprobe`/`kretprobe`. Unfortunately later, kernel introduced [BPF Kernel Functions](https://docs.kernel.org/bpf/kfuncs.html)...
### Is your feature request related to a problem? Please describe. Kernel 6.10 has introduced so-called "kprobe session probes" ([patch series](https://lore.kernel.org/bpf/[email protected]/)) which are an extension of kprobe-multi that allow a...
Currently, code for probe expansion is scattered all over the place. The detection of whether (and what kind of) probe expansion is needed is in two places: - most of...
There's now quite a large number of [kfuncs](https://docs.ebpf.io/linux/kfuncs/) which return pointers to refcounted objects, such as `bpf_task_from_pid`, `bpf_cgroup_from_id`, etc. One common feature of these is that the returned pointer must...
The [cc_wrapper](https://github.com/diffkemp/diffkemp/tree/master/diffkemp/building/cc_wrapper) component is used for building generic projects into snapshots (using `diffkemp build`). It acts as a wrapper over a C compiler which hijacks each compile command of a...
When trying to compile DiffKemp in the Nix development environment on Fedora 41, I'm getting errors when I have Nix installed on my system. Reproducer: ``` $ nix develop .#diffkemp-llvm16...
Normally, when trying to attach to multiple attach points out of which some do not exist, the `missing_probes` config option is considered: ``` # bpftrace -e 'fentry:vfs_read,fentry:vfs_rea { exit() }'...
Using `target_compile_options` applies `-fsanitize=address` only to the sources of a specific target, not its dependencies. This caused the option to be missed during the compilation of most source files in...