v0.21.2

[0.21.2] 2024-07-17

Fixed

• fix min/max map functions
• fix segfault for multi-tracepoint probes

Full Changelog: v0.21.1...v0.21.2

v0.21.1

[0.21.1] 2024-06-24

• Fix include path on loongarch, mips, riscv, and s390

v0.21.0

[0.21.0] 2024-06-21

Added

• Add lazy_symbolication config option
  • #2958
• Add ability to list all probes in a program
  • #2969
• Add ability to call print() with indexed maps to print single map values
  • #3027
• Add LLVM 18 support
  • #3051
• Add ability to call delete() with multiple arguments
  • #3046
• Add for-each loops for iterating over map elements
  • #3003
• Add optional systemd support
  • #3158
• Add ability to attach uprobes to inlined functions
  • #3095
• Enable count, sum, min, and max map reads in kernel space (implicit casting)
  • #3189
  • #3226
• Add config option for handling missing probes
  • #3246

Changed

• Better error message for args in mixed probes
  • #3047
• Reproducible Builds: Do not store timestamps in gzip header
  • #3096
• Improve DWARF support, using liblldb instead of libdw
  • #3042
• Use new hash function to reduce collisions when aggregating on stack traces
  • #3060
• Disable func builtin for kretprobes and uretprobes when get_func_ip feature is not available
  • #2645
• Move error printing from debug to verbose mode
  • #3202
• Better error message when libbpf is too old
  • #3212
• Allow trailing semicolons and empty blocks in config syntax
  • #3077
• Allow attaching to spin_lock functions with mitigations to prevent deadlocks
  • #3206
• Remove length limitations for strings coming out of str() and path()
  • #3228
  • #3237
  • #3245

Deprecated

• Deprecate sarg builtin
  • #3095

Removed

Fixed

• Fix ability to interrupt bpftrace during probe attach
  • #3053
• Fix field resolution on structs with anon union as first field
  • #2964
• Fix alignment of atomic map counter update
  • #3045
• Fix func builtin for kretprobes and uretprobes for kernels with working get_func_ip feature
  • #2645
• Fix ustack missing the second-from-top stack frame in uprobes
  • #3095
• Fix storing strings of differing lengths in a variable
  • #3178
• Fix field resolution for structs in arrays
  • #3024
• Fix error in dereferencing kernel double pointers
  • #3024
• Fix variable corruption when used as map key
  • #3195
• Fix crash when assigning a record type to a map
  • #3220
• Fix type resolution for pointers with BTF_KIND_TYPE_TAG
  • #3240
• Fix attachment of probes attaching to wildcarded and non-wildcarded kprobes
  • #3246

Security

• Don't unpack kernel headers or look in tmp
  • #3156

Docs

Tools

• Ignore warnings for missing probes
  • #3246

v0.20.4

[0.20.4] 2024-05-20

Don't unpack kernel headers or look in tmp

v0.20.3

[0.20.3] 2024-03-25

Fix build on pre-5.16 kernels.

v0.20.2

[0.20.2] 2024-03-07

Fix potential security issue with kheader unpacking.

v0.20.1

[0.20.1] 2024-1-29

Fix build on 32-bit systems.

v0.20.0

[0.20.0] 2024-01-22

Added

• Add log2 histograms with finer granularity
  • #2831
• Add a jiffies builtin for advanced usages
  • #2769
• Emit better errors messages for invalid attachpoints
  • #2781
• Add support for uprobe_multi link
  • #2810
• Attach BTF to generated BPF programs
  • #2804
• Add fentry/fexit aliases for kfunc/kretfunc
  • #2844
• Add support for uprobe pid targeting
  • #2830
• New builtin for getting the number of map elements
  • #2840
• Add more helpful error messages for map operations
  • #2905
• New config block syntax
  • #2815

Changed

• Standardize config and env var names
  • #2815

Deprecated

Removed

• Remove snapcraft support
  • #2832

Fixed

• Fix JSON output for cgroup_path
  • #2793
• Fix silent truncation of 64-bit values in hist()
  • #2822
• utils: use /data/local/tmp as temprary dir on Android
  • #2828
• Fix uprobe multi probe for targets with wildcards
  • #2851
• Fix symbolication on for 32-bit userspcae and 64-bit kernel
  • #2869
• Fix retval for kretfunc/fexit
  • #2864
• Fix attachment/listing of wildcarded module kfuncs
  • #2914
• Fix uprobe attachment across container boundary
  • #2662
• Fix generated BTF for older kernels
  • #2934

Docs

• Fix one-liner tutorial for systems with BTF
  • #2919
  • #2924

Tools

• Add PPID field to execsnoop.bt
  • #2876
• Use strftime instead of elapsed in execsnoop.bt
  • #2904
• Use strftime instead of elapsed in threadsnoop.bt
  • #2917
• Increase PID field width and align to the right in threadsnoop.bt
  • #2928
• Update runqlen.bt to remove runnable_weight field from cfs_rq struct.
  • #2790
• Update mdflush.bt to use blkdev.h instead of genhd.h for non-BTF builds.
  • #2849
• Add milliseconds to timestamp and align numbers to the right in killsnoop.bt
  • #2936

v0.19.1

[0.19.1] 2023-10-04

Adds support for LLVM 17.

v0.19.0

[0.19.0] 2023-09-19

Added

• Rawtracepoint support wildcards and list show
  • #2588
• Support all iterators
  • #2630
• Improve working with all probe params (kfunc, uprobe)
  • #2477
• Support func builtin for k(ret)func probes
  • #2692
• Support casting int <-> int array
  • #2686
• Support targeting all running processes for USDTs
  • #2734

Changed

• Make args a structure (instead of a pointer)
  • #2578
• Improve user symbol resolution
  • #2386
• uprobes: make C++ symbol demangling explicit
  • #2657
• uprobe: improve C++ probes listing
  • #2693

Fixed

• Fix resolving username for malformed /etc/passwd
  • #2631
• Fix crashes when maps are concurrently modified
  • #2623
• Fix alignment of byte arrays inside tuples
  • #2625
• cmake: fix linking libbfd
  • #2673
• Allow '+' in attach point path
  • #2696
• Improve listing and 'probe' builtin for several probe types
  • #2691
• Allow probe builtin with aliased software/hardware probes
  • #2711
• Support executing symlinked binaries with -c
  • #2708
• Add access to CLOCK_MONOTONIC with nsecs(monotonic)
  • #2718
• iter: Skip structures with '__safe_trusted' suffix
  • #2732
• Improve detection of unknown typedefs in ClangParser
  • #2763