Commit Graph

415 Commits (1df3b17d291f5a38de10280a7025f963dea18ee8)
 

Author SHA1 Message Date
Michal Rostecki 1df3b17d29 aya-bpf: Add bpf_probe_write_user helper
This helper allows to write to mutable pointers in the userspace, which
come from userspace functions that uprobes attach to.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
Michal Rostecki 54377b6140 aya-bpf: Allow to convert probe arguments to mutable pointers
Before this change, arguments fetched with `arg` from `ProbeContext`
could be only fetched as const pointers. This change allows to get mut
pointers as well.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
Michal Rostecki 5d8afc58f4 aya-bpf-macros: Fix LSM macro documentation
It was causing `cargo doc` inside bpf/ to fail.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
Alessandro Decina 3a4c84fe17
Merge pull request from aya-rs/codegen
Update libbpf to 19656636a9b9a2de1f71fa3135709295c16701cc
Dave Tucker 2b7dda766f btf: Fix for rename of BPF_ -> BPF_CORE_
Signed-off-by: Dave Tucker <dave@dtucker.co.uk>
dave-tucker 05d4bc39ea Update libbpf to 19656636a9b9a2de1f71fa3135709295c16701cc
Dave Tucker ef42739c65 .github: force push to codegen branch
Signed-off-by: Dave Tucker <dave@dtucker.co.uk>
Dave Tucker f8021c33fc codegen: Add bindings for BPF_F flags
Signed-off-by: Dave Tucker <dave@dtucker.co.uk>
Dave Tucker 23d1920854 codegen: add bindings for btf structs
This adds `bpf_btf_info` which can be used to get BPF information via a
syscall. It also adds `btf_line_info` and `btf_func_info` which are
required to parse the line and func info sections of BTF

Signed-off-by: Dave Tucker <dave@dtucker.co.uk>
Dave Tucker facb01f34b ci: Use crabby-the-crab
Signed-off-by: Dave Tucker <dave@dtucker.co.uk>
Michal Rostecki 7e2fcd1d6d Support for fentry and fexit programs
fentry and fexit programs are similar to kprobe and kretprobe, but they
are newer and they have practically zero overhead to call before or
after kernel function. Also, fexit programs are focused on access to
arguments rather than the return value.

Those kind of programs were introduced in the following patchset:

https://lwn.net/Articles/804112/

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
dependabot[bot] 54b0c67795 build(deps): update object requirement from 0.27 to 0.28
Updates the requirements on [object](https://github.com/gimli-rs/object) to permit the latest version.
- [Release notes](https://github.com/gimli-rs/object/releases)
- [Changelog](https://github.com/gimli-rs/object/blob/master/CHANGELOG.md)
- [Commits](https://github.com/gimli-rs/object/compare/0.27.0...0.28.1)

---
updated-dependencies:
- dependency-name: object
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Alessandro Decina 317fd576b4
Merge pull request from dave-tucker/nightly
github: Set toolchain override
Dave Tucker 7e7314ff2b github: Set toolchain override
This ensures that the cache action uses the correct Rust version

Signed-off-by: Dave Tucker <dave@dtucker.co.uk>
Alessandro Decina 6313ddfe0c
Merge pull request from nimrodshn/add_impl_pod_for_u128
Implement Pod for u128 and i128
Ubuntu 24a292f605 Implement Pod for u128
Alessandro Decina f34b76c8d3
Merge pull request from aya-rs/codegen
Update libbpf to 93e89b34740c509406e948c78a404dd2fba67b8b
dave-tucker 17d43cd6f8 Update libbpf to 93e89b34740c509406e948c78a404dd2fba67b8b
Alessandro Decina 26d188c659
Merge pull request from dave-tucker/btf
obj: Improve section detection
Alessandro Decina 32dc8a0d97
Merge pull request from eero-thia/thia/safe_map
aya-bpf: remove unnecessary unsafe markers on map functions.
Alessandro Decina 441a660b3e
Merge pull request from eero-thia/thia/safe_iter
aya: Remove unnecessary unsafe markers on map iteration.
Thia Wyrod b655cf973f
aya-bpf: remove unnecessary unsafe markers on map functions.
Map lookup and deletion can yield stale keys and values by virtue of
sharing a data structure with userspace programs and other BPF programs
which can modify it. However, all accesses remain perfectly safe and will
not cause memory corruption or data races.
Thia Wyrod 18970369e2
aya: Remove unnecessary unsafe markers on map iteration.
Map iteration can yield stale keys and values by virtue of sharing a
data structure with BPF programs which can modify it. However, all
accesses remain perfectly safe and will not cause memory corruption or
data races.
Alessandro Decina 07a6016ebb
Merge pull request from eero-thia/thia/dedup
aya: eliminate name duplication in maps and programs.
Thia Wyrod f56dd0a70b
aya: eliminate name duplication in maps and programs.
Map and ProgramData objects had unnecessarily cloned strings for their
names, despite them being just as easily available to external users via
bpf.maps() and bpf.programs().
Alessandro Decina 8043451973 bpf: re-export Lru hash maps from aya_bpf::maps
Alessandro Decina a340c2a9fa
Merge pull request from wg/main
aya: use correct program name when relocating
Will bb8a813eef aya: use correct program name when relocating
Dave Tucker e4d9774bf7 obj: Improve section detection
This commit improves section detection.
Previously, a section named "xdp_metadata" would be interpretted as a
program section, which is incorrect. This commit first attempts to
identify a BPF section by name, then by section.kind() ==
SectionKind::Text (executable code). The computed section kind is
stored in the Section so variants can be easily matched on later.

Signed-off-by: Dave Tucker <dave@dtucker.co.uk>
Alessandro Decina c0f695c4b6 bpf: Add LruHashMap and LruPerCpuHashMap
Alessandro Decina a03426f194
Merge pull request from eero-thia/thia/impl_trait
aya: remove unnecessary usage of &dyn trait in favor of impl trait.
Alessandro Decina 61299e128e
Merge pull request from eero-thia/thia/xdp_metadata
aya-bpf: expose xdp_md of XdpContext and add metadata functions.
Thia Wyrod d280b856bd
aya-bpf: expose xdp_md of XdpContext and add metadata functions.
Thia Wyrod daa7ea6d0d
aya: remove unnecessary usage of &dyn trait in favor of impl trait.
This should improve performance in most situations by eliminating
unnecessary fat pointer indirection.
Alessandro Decina 98b36b23bc
Merge pull request from eero-thia/thia/close
aya: close file descriptors on Map drop.
Alessandro Decina 2955ca1d1f
Merge pull request from eero-thia/thia/programs_mut
aya: programs_mut iterator to complement programs.
Thia Wyrod c7f8db9a0b
aya: programs_mut iterator to complement programs.
Alessandro Decina a6bf554a74
Merge pull request from eero-thia/thia/include_bytes_aligned
aya: expand include_bytes_aligned to accept expressions.
Thia Wyrod 1584bc47bd
aya: close file descriptors on Map drop.
Thia Wyrod f8f17a09fb
aya: expand include_bytes_aligned to accept expressions.
This allows one to this macro with literal expressions involving macros
such as concat! and env!.
Alessandro Decina df393690d3
Merge pull request from deverton/wrap-bpf_get_current_uid_gid
Add wrapper and docs for for bpf_get_current_uid_gid
Dan Everton fa23052e34
Add wrapper and docs for for bpf_get_current_uid_gid
Alessandro Decina 6db30fad9c
Merge pull request from deverton/kprobe-debugfs
Support k/uprobes on older kernels.
Dan Everton 0e84610976
Refactoring after feedback.
Alessandro Decina d983836959
Merge pull request from dave-tucker/fix_cgroup_skb_attach
bpf: Fix cgroup_skb macro
Dave Tucker eadba79deb bpf: Add tests for cgroup_skb macro
This checks that the expand function produces the expected link_section
given certain input

Signed-off-by: Dave Tucker <dave@dtucker.co.uk>
Dave Tucker fa037a88e2 bpf: Fix cgroup_skb macro
This commit ensures that if no attach type is provided, that we use the
cgroup/skb section. If an attach type is provided we use the
cgroup_skb/$attach_type section.

Signed-off-by: Dave Tucker <dave@dtucker.co.uk>
Rust Plumber 761cb79fe3
aya: fix test warnings ()
Dan Everton 606c3267c4
Support pid filtering in debugfs
Dan Everton 1dc75542b4
Handle probe entry offsets