Re:Taming the BPF Superpowers
by davemarchevsky on Sunday October 10, 2021 @03:05PM
(#28821039)
What would you do with such a combination?
A specific example: At [NDA-ed work project] we compile a lot of templates in our D code. I was using a uProbe to hijack the semantic analysis in the D compiler to count how many and where the templates where from.
All good so far, but the moment I wanted to do a little bit of non-trivial work (collect some metadata which is not a memory access away) I would've had to switch to some other much more complicated system. I don't think Pin is that complicated but it's not really intended for "infra" programming like eBPF.
eBPF is great for tracing but there's only so much you can do without really injecting yourself into the target binary.