~/talk

Livepatch in Userspace Based on Uprobe

on YouTube 41m
Talkat LinuxCon Europe 2022 · 2022-09-13..09-16· [security]

speaker

name:Longjun Luo
links:none on file

resources

video:https://youtu.be/6TH7kh3pS0E
slides:none on file

summary

Builds relocatable patch objects by compiling twice with -ffunction-sections and -fdata-sections, correlating sections by symbol and including modified functions plus referenced sections into a relocatable patch; loads those patches per-process via code injection and ptrace-style steps; uses user-space tracing u-probe to replace instruction bytes with a soft interrupt 0xcc that routes to kernel handlers; maintains a per-thread count table to find safe switch moments and supports both atomic and staged consistency models. Prototype named upatch and demos on libc/nginx.

AI-written summary · about

chapters (13)

  1. 0:00Start
  2. 1:13Livepatch in Userspace Based on Uprobe
  3. 2:38ELF and binary relocations
  4. 20:56Differences for user-space
  5. 23:06Code injection is necessary - ptrace + proc
  6. 24:29Limited consistency model
  7. 28:37Hijack the compiler-Build the patch
  8. 31:09Recognize the target process - Load the patch
  9. 31:40Stack trace - Consistency model
  10. 33:30Stack trace - Code injection
  11. 35:33Per-task - Apply the patch
  12. 37:01Count once, update it in real-time - Apply the patch
  13. 38:55Pre-link for the Livepatch

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.