[0.22.0] 2025-01-07

Breaking Changes

• Return uint32 instead of uint64 for pid and tid builtins
  • #3441
  • Migration guide
• Remove multi-map delete functionality
  • #3506
  • Migration guide
• Add lexical/block scoping for variables
  • #3367
  • Migration guide
• Replace default map printing on SIGUSR1 with custom signal handling probes
  • #3522
  • Migration guide

Added

• Bump max supported LLVM version to 19
  • #3433
• Add --dry-run CLI option
  • #3203
• Enable avg map reads in kernel space (implicit casting)
  • #3268
• Enable for-loops in multiple probes
  • #3285
• For-loops: Allow sharing variables between the main probe and the loop's body
  • #3014
• Parse C++ Class and Inheritance from Debug Info
  • #3094
• Add an optional size parameter to path
  • #3401
• Allow tuples to be used as map keys
  • #3390
• Add has_key function for maps
  • #3358
• Add ability to attach kprobes to inlined functions
  • #3301
• Variable declarations with let
  • #3461
• Support symbolizing enum values using %s specifier in printf()
  • #3515
• Configuration option to suppress printing maps by default at program exit
  • #3547
• Add symbol_source config to source uprobe locations from either DWARF or the Symbol Table
  • #3504
• Introduce builtin to access percpu kernel data
  • #3596

Changed

• Merge output into stdout when -lv
  • #3383
• Stream output when printing maps
  • #3264
• Only print kernel headers not found message if parsing fails
  • #3265
• Add mandatory "stage" argument to the -d CLI option
  • #3203
• Allow simultaneous use of -v and -d
  • #3203
• Remove length limitations for the buf builtin function
  • #3249
• Change delete API to accept a map and key as separate args
  • #3472
• Symbolize enums when used in maps
  • #3539

Removed

• Remove the -dd CLI option
  • #3203
• Drop support for LLVM 12 and below
  • #3325
• Remove ALLOW_UNSAFE_PROBE compiler flag
  • #3476

Fixed

• Fix verifier error when array indexing through pointer
  • #3465
• Fix segfault for multi-tracepoint probes
  • #3274
• Fix verifier error from misaligned stack access when using strings as map keys
  • #3294
• Fix min/max map functions
  • #3298
• Fix stack mode for stack builtin
  • #3322
• Fix lldb support in appimage builds
  • #3339
• Fix parsing large unsigned int strings as positional params
  • #3336
• Fix json formatting for strftime function
  • #3381
• Fix BTF/DWARF parsing for structs contained in arrays
  • #3422
• Fix integer comparisons and auto casting for scratch variables
  • #3416
• Fix tuple resizing
  • #3443
• Handle invalid BTF without crashing
  • #3453
• Fix json formatting for hex values
  • #3475
• Fix binary operations on integers always returning 64 bit values
  • #3517
• Fix verifier error when comparing result of len()
  • #3308
• Fix type back propagation for map keys
  • #3536
• Fix crash by adding checks for bad var/map assignments
  • #3542
• Fix field access and offsetof for strings that are builtin types
  • #3565
• Fix crash when using castable per-cpu map types as map keys
  • #3594
• Fix loop values with per-cpu aggregations
  • #3664

Docs

• Remove mention of unsupported character literals
  • #3283

Tools

• Fix bashreadline tool probe for dynamically linked readline
  • #3564

[0.21.3] 2024-12-16

Fixed

• Fix alignment issue for multi-key maps

Full Changelog: v0.21.2...v0.21.3

[0.21.2] 2024-07-17

Fixed

• fix min/max map functions
• fix segfault for multi-tracepoint probes

Full Changelog: v0.21.1...v0.21.2

[0.21.1] 2024-06-24

• Fix include path on loongarch, mips, riscv, and s390

[0.21.0] 2024-06-21

Added

• Add lazy_symbolication config option
  • #2958
• Add ability to list all probes in a program
  • #2969
• Add ability to call print() with indexed maps to print single map values
  • #3027
• Add LLVM 18 support
  • #3051
• Add ability to call delete() with multiple arguments
  • #3046
• Add for-each loops for iterating over map elements
  • #3003
• Add optional systemd support
  • #3158
• Add ability to attach uprobes to inlined functions
  • #3095
• Enable count, sum, min, and max map reads in kernel space (implicit casting)
  • #3189
  • #3226
• Add config option for handling missing probes
  • #3246

Changed

• Better error message for args in mixed probes
  • #3047
• Reproducible Builds: Do not store timestamps in gzip header
  • #3096
• Improve DWARF support, using liblldb instead of libdw
  • #3042
• Use new hash function to reduce collisions when aggregating on stack traces
  • #3060
• Disable func builtin for kretprobes and uretprobes when get_func_ip feature is not available
  • #2645
• Move error printing from debug to verbose mode
  • #3202
• Better error message when libbpf is too old
  • #3212
• Allow trailing semicolons and empty blocks in config syntax
  • #3077
• Allow attaching to spin_lock functions with mitigations to prevent deadlocks
  • #3206
• Remove length limitations for strings coming out of str() and path()
  • #3228
  • #3237
  • #3245

Deprecated

• Deprecate sarg builtin
  • #3095

Removed

Fixed

• Fix ability to interrupt bpftrace during probe attach
  • #3053
• Fix field resolution on structs with anon union as first field
  • #2964
• Fix alignment of atomic map counter update
  • #3045
• Fix func builtin for kretprobes and uretprobes for kernels with working get_func_ip feature
  • #2645
• Fix ustack missing the second-from-top stack frame in uprobes
  • #3095
• Fix storing strings of differing lengths in a variable
  • #3178
• Fix field resolution for structs in arrays
  • #3024
• Fix error in dereferencing kernel double pointers
  • #3024
• Fix variable corruption when used as map key
  • #3195
• Fix crash when assigning a record type to a map
  • #3220
• Fix type resolution for pointers with BTF_KIND_TYPE_TAG
  • #3240
• Fix attachment of probes attaching to wildcarded and non-wildcarded kprobes
  • #3246

Security

• Don't unpack kernel headers or look in tmp
  • #3156

Docs

Tools

• Ignore warnings for missing probes
  • #3246

[0.20.4] 2024-05-20

Don't unpack kernel headers or look in tmp

[0.20.3] 2024-03-25

Fix build on pre-5.16 kernels.

[0.20.2] 2024-03-07

Fix potential security issue with kheader unpacking.

[0.20.1] 2024-1-29

Fix build on 32-bit systems.

[0.20.0] 2024-01-22

Added

• Add log2 histograms with finer granularity
  • #2831
• Add a jiffies builtin for advanced usages
  • #2769
• Emit better errors messages for invalid attachpoints
  • #2781
• Add support for uprobe_multi link
  • #2810
• Attach BTF to generated BPF programs
  • #2804
• Add fentry/fexit aliases for kfunc/kretfunc
  • #2844
• Add support for uprobe pid targeting
  • #2830
• New builtin for getting the number of map elements
  • #2840
• Add more helpful error messages for map operations
  • #2905
• New config block syntax
  • #2815

Changed

• Standardize config and env var names
  • #2815

Deprecated

Removed

• Remove snapcraft support
  • #2832

Fixed

• Fix JSON output for cgroup_path
  • #2793
• Fix silent truncation of 64-bit values in hist()
  • #2822
• utils: use /data/local/tmp as temprary dir on Android
  • #2828
• Fix uprobe multi probe for targets with wildcards
  • #2851
• Fix symbolication on for 32-bit userspcae and 64-bit kernel
  • #2869
• Fix retval for kretfunc/fexit
  • #2864
• Fix attachment/listing of wildcarded module kfuncs
  • #2914
• Fix uprobe attachment across container boundary
  • #2662
• Fix generated BTF for older kernels
  • #2934

Docs

• Fix one-liner tutorial for systems with BTF
  • #2919
  • #2924

Tools

• Add PPID field to execsnoop.bt
  • #2876
• Use strftime instead of elapsed in execsnoop.bt
  • #2904
• Use strftime instead of elapsed in threadsnoop.bt
  • #2917
• Increase PID field width and align to the right in threadsnoop.bt
  • #2928
• Update runqlen.bt to remove runnable_weight field from cfs_rq struct.
  • #2790
• Update mdflush.bt to use blkdev.h instead of genhd.h for non-BTF builds.
  • #2849
• Add milliseconds to timestamp and align numbers to the right in killsnoop.bt
  • #2936