v0.20.3

[0.20.3] 2024-03-25

Fix build on pre-5.16 kernels.

v0.20.2

[0.20.2] 2024-03-07

Fix potential security issue with kheader unpacking.

v0.20.1

[0.20.1] 2024-1-29

Fix build on 32-bit systems.

v0.20.0

[0.20.0] 2024-01-22

Added

• Add log2 histograms with finer granularity
  • #2831
• Add a jiffies builtin for advanced usages
  • #2769
• Emit better errors messages for invalid attachpoints
  • #2781
• Add support for uprobe_multi link
  • #2810
• Attach BTF to generated BPF programs
  • #2804
• Add fentry/fexit aliases for kfunc/kretfunc
  • #2844
• Add support for uprobe pid targeting
  • #2830
• New builtin for getting the number of map elements
  • #2840
• Add more helpful error messages for map operations
  • #2905
• New config block syntax
  • #2815

Changed

• Standardize config and env var names
  • #2815

Deprecated

Removed

• Remove snapcraft support
  • #2832

Fixed

• Fix JSON output for cgroup_path
  • #2793
• Fix silent truncation of 64-bit values in hist()
  • #2822
• utils: use /data/local/tmp as temprary dir on Android
  • #2828
• Fix uprobe multi probe for targets with wildcards
  • #2851
• Fix symbolication on for 32-bit userspcae and 64-bit kernel
  • #2869
• Fix retval for kretfunc/fexit
  • #2864
• Fix attachment/listing of wildcarded module kfuncs
  • #2914
• Fix uprobe attachment across container boundary
  • #2662
• Fix generated BTF for older kernels
  • #2934

Docs

• Fix one-liner tutorial for systems with BTF
  • #2919
  • #2924

Tools

• Add PPID field to execsnoop.bt
  • #2876
• Use strftime instead of elapsed in execsnoop.bt
  • #2904
• Use strftime instead of elapsed in threadsnoop.bt
  • #2917
• Increase PID field width and align to the right in threadsnoop.bt
  • #2928
• Update runqlen.bt to remove runnable_weight field from cfs_rq struct.
  • #2790
• Update mdflush.bt to use blkdev.h instead of genhd.h for non-BTF builds.
  • #2849
• Add milliseconds to timestamp and align numbers to the right in killsnoop.bt
  • #2936

v0.19.1

[0.19.1] 2023-10-04

Adds support for LLVM 17.

v0.19.0

[0.19.0] 2023-09-19

Added

• Rawtracepoint support wildcards and list show
  • #2588
• Support all iterators
  • #2630
• Improve working with all probe params (kfunc, uprobe)
  • #2477
• Support func builtin for k(ret)func probes
  • #2692
• Support casting int <-> int array
  • #2686
• Support targeting all running processes for USDTs
  • #2734

Changed

• Make args a structure (instead of a pointer)
  • #2578
• Improve user symbol resolution
  • #2386
• uprobes: make C++ symbol demangling explicit
  • #2657
• uprobe: improve C++ probes listing
  • #2693

Fixed

• Fix resolving username for malformed /etc/passwd
  • #2631
• Fix crashes when maps are concurrently modified
  • #2623
• Fix alignment of byte arrays inside tuples
  • #2625
• cmake: fix linking libbfd
  • #2673
• Allow '+' in attach point path
  • #2696
• Improve listing and 'probe' builtin for several probe types
  • #2691
• Allow probe builtin with aliased software/hardware probes
  • #2711
• Support executing symlinked binaries with -c
  • #2708
• Add access to CLOCK_MONOTONIC with nsecs(monotonic)
  • #2718
• iter: Skip structures with '__safe_trusted' suffix
  • #2732
• Improve detection of unknown typedefs in ClangParser
  • #2763

v0.18.1

[0.18.1] 2023-08-31

Fixed

• Directly link bpftrace against zlib
  • #2600

v0.18.0

[0.18.0] 2023-05-15

Added

• Add iter:task_vma iterators detection
  • #2524
• Support parsing bitfields from BTF/DWARF
  • #2505
• Support printing entire structs
  • #2557
• BTF support for tracepoints defined in modules
  • #2479
• Add trailer to truncated strings
  • #2559
• Enable watchpoint support for PowerPC
  • #2577
• Add new function, offsetof, get the offset of the element in the struct
  • #2579
• Add 'StackMode::raw' for ustack and kstack formatting
  • #2581
• Add 'BPFTRACE_STACK_MODE' env variable
  • #2586

Changed

• Improve attaching to uprobes with size 0
  • #2562

Fixed

• Simplify and fix probe index assignment
  • #2482
• Handle colon in positional param used in attachpoint
  • #2514
• Handle BPF load errors for multi-attachpoints
  • #2521
• Respect BPFTRACE_STRLEN environment variable for all strings
  • #2545
• Treat str() builtin's len parameter as int64
  • #2546
• arm64: define the KASAN_SHADOW_SCALE_SHIFT macro
  • #2518
• Fix segfaults in dwarf_parser
  • #2587

Docs

Tools

Deprecated

Removed

v0.17.1

[0.17.1] 2023-04-20

Backport of #2527 to fix Fedora 37 build error, see #2567 for details

v0.17.0

[0.17.0] 2023-01-30

Added

• Support for 32-bit ARM systems
  • #2360
• Support BTF for kernel modules
  • #2315
• Add %rh option to print buffer as hex without \x
  • #2445
• Add stdbool.h to built-in headers
  • #2380
• Add strcontains builtin function, find a substring in a string
  • #2393

Changed

• Raise minimum versions for libbpf and bcc and vendor them for local builds
  • #2369
  • #2370
• Support comparison for integer arrays
  • #2387

Deprecated

Removed

• Drop Ubuntu 19.10 lockdown detection
  • #2467

Fixed

• Fix pointer/register loads on 32-bit architectures
  • #2361
• Fix kprobe multi-attachment
  • #2381
• Fix attaching to multiple USDT probes using the same wildcard
  • #2456
• Fix pointer arithmetics codegen
  • #2397
• Fix segfault for invalid AssignVarStatement visit
  • #2423
• Better handling of missing function trace support files
  • #2433
• Fix unroll ID reset
  • #2439
• Support profile and interval probes in probe matcher
  • #2443
• Fix BTF detection macro in tools/old/mdflush.bt
  • #2444