Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Optional jump table support #337

Open
Alan-Jowett opened this issue Aug 21, 2023 · 0 comments
Open

Optional jump table support #337

Alan-Jowett opened this issue Aug 21, 2023 · 0 comments

Comments

@Alan-Jowett
Copy link
Collaborator

eBPF for Windows requires support for updating the address of helper functions (when the module hosting them is reloaded).

This is currently implemented as a jump table in eBPF-for-Windows, but the performance is sub-part. A better solution would be to modify uBPF to emit rip indirect calling like this, with the jump table being embedded in the emitted machine code.

call   QWORD PTR [rip+0x2023]        # 0x2029

This might also eliminate the need to perform retpoline based calling.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant