Skip to content

Conversation

Officeyutong
Copy link
Contributor

uprobe_multi is a special type of uprobe, which allows hooking multiple userspace functions in a single attach. This PR adds uprobe_multi support for uprobe_attach_impl, the corresponding example, and update CI

Closes #214

See https://lore.kernel.org/bpf/[email protected]/ for details

Our design

In the kernel bpf, the attaching of uprobe_multi were implemented through creating a bpf link, and filling all information (such as pid, function offset, attach cookies) in the link opts. You may find it in bpf_program__attach_uprobe_multi

But in bpftime, all attaches are required to have an attach target (a.k.a perf event), so for uprobe_multi that doesn't give us a perf event, we have a slightly different implementation to the kernel: When creating a bpf link, we doesn't only record configurations from bpf_link_create_opts into the handler, but also do we create some perf events for the uprobe_multi links, and record them in the handler. In this way, we tear down a uprobe_multi into several simple uprobe attach targets, and with a total bpf link. This will not affect the hooking performance.

Main changes

  • Update bpf_link_handler to make it support multiple attach targets
  • Adapt for multiple attach targets in a single bpf_link

@yunwei37 yunwei37 force-pushed the master branch 3 times, most recently from 1354316 to a6a132b Compare September 11, 2024 18:08
@yunwei37 yunwei37 marked this pull request as ready for review April 10, 2025 17:57
@yunwei37 yunwei37 force-pushed the master branch 2 times, most recently from cbcb1e9 to 20acd88 Compare October 1, 2025 23:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[idea]: Support uprobe_multi for bpftime

1 participant