Skip to content

support dump base64 from buf #84

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
anonymousException wants to merge 2 commits into
base: dev
Choose a base branch
from
Open

support dump base64 from buf #84

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5faee6b
support dump base64 from buf
anonymousException Jan 31, 2026
abac9dd
feat: 调整最大读取 utf16 的 buffer
anonymousException Feb 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions cli/cmd/root.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -665,6 +665,7 @@ func init() {
rootCmd.PersistentFlags().StringVar(&gconfig.RegName, "reg", "", "get the offset of reg")
rootCmd.PersistentFlags().BoolVarP(&gconfig.DumpRet, "dumpret", "", false, "dump ret offset for symbol")
rootCmd.PersistentFlags().BoolVarP(&gconfig.DumpHex, "dumphex", "", false, "dump buffer as hex")
rootCmd.PersistentFlags().BoolVarP(&gconfig.DumpBase64, "dumpbase64", "", false, "dump buffer as base64")
rootCmd.PersistentFlags().BoolVarP(&gconfig.ShowPC, "showpc", "", false, "show origin pc register value")
rootCmd.PersistentFlags().BoolVarP(&gconfig.ShowTime, "showtime", "", false, "show event boot time info")
rootCmd.PersistentFlags().BoolVarP(&gconfig.ShowUid, "showuid", "", false, "show process uid info")
Expand Down
2 changes: 1 addition & 1 deletion src/common/buffer.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -197,7 +197,7 @@ static __always_inline int save_str_to_buf(event_data_t *event, void *ptr, u8 in
static __always_inline int save_utf16_to_buf(event_data_t *event, void *ptr, u8 index)
{
// UTF16 最大字节数（必须是偶数）
int max_bytes = 512;
int max_bytes = MAX_BUF_READ_SIZE;
// 直接调用 save_bytes_to_buf
return save_bytes_to_buf(event, ptr, max_bytes, index);
}
Expand Down
18 changes: 18 additions & 0 deletions tests/config_uprobe_test_base64.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
{
"type": "uprobe",
"library": "libtest.so",
"points": [
{
"name": "testBytesBase64",
"params": [
{
"name": "buf_bytes",
"type": "buf",
"reg": "x0",
"size": "x1",
"format": "base64"
}
]
}
]
}
3 changes: 3 additions & 0 deletions user/argtype/argtype_base.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -587,6 +587,9 @@ func (this *ARG_BUFFER) ParseArg(ptr uint64, buf *bytes.Buffer, parse_more, fmt_
(this.ParseImpl).(IArgBuffer).SetArgPayload(payload)
}
if !fmt_json {
if this.DumpBase64 {
return fmt.Sprintf("0x%x%s", ptr, this.ParseImpl.HexToBase64Format())
}
if this.DumpHex {
return fmt.Sprintf("0x%x%s", ptr, this.ParseImpl.HexFormat(this.Color))
}
Expand Down
22 changes: 22 additions & 0 deletions user/argtype/config_struct.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ import (
"bytes"
"encoding/binary"
"encoding/json"
"encoding/base64"
"fmt"
"net"
"stackplz/user/util"
Expand Down Expand Up @@ -50,6 +51,7 @@ type IParseStruct interface {
GetArgStruct() *Arg_struct
Format() string
HexFormat(bool) string
HexToBase64Format() string
}

// 结构体类型
Expand Down Expand Up @@ -115,6 +117,10 @@ func (this *Arg_buffer) HexFormat(color bool) string {
return "()"
}

func (this *Arg_buffer) HexToBase64Format() string {
return fmt.Sprintf(" (base64:%s)", base64.StdEncoding.EncodeToString(this.ArgPayload))
}

func (this *Arg_buffer) MarshalJSON() ([]byte, error) {
type ArgStructAlias Arg_struct
return json.Marshal(&struct {
Expand Down Expand Up @@ -143,6 +149,10 @@ func (this *Arg_string) HexFormat(color bool) string {
return this.Format()
}

func (this *Arg_string) HexToBase64Format() string {
return this.Format()
}

func (this *Arg_string) Format() string {
return fmt.Sprintf("(%s)", util.B2STrim(this.ArgPayload))
}
Expand Down Expand Up @@ -190,6 +200,10 @@ func (this *Arg_string16) HexFormat(color bool) string {
return this.Format()
}

func (this *Arg_string16) HexToBase64Format() string {
return this.Format()
}

func (this *Arg_string16) Format() string {
// UTF‑16LE → UTF‑8
s := utf16leToUtf8(this.ArgPayload)
Expand Down Expand Up @@ -237,6 +251,10 @@ func (this *Arg_Sigaction) HexFormat(color bool) string {
return this.Format()
}

func (this *Arg_Sigaction) HexToBase64Format() string {
return this.Format()
}

func (this *Arg_Sigaction) Format() string {
var fields []string
fields = append(fields, fmt.Sprintf("sa_handler=0x%x", this.Sa_handler))
Expand Down Expand Up @@ -288,6 +306,10 @@ func (this *Arg_Timespec) HexFormat(color bool) string {
return this.Format()
}

func (this *Arg_Timespec) HexToBase64Format() string {
return this.Format()
}

func (this *Arg_Timespec) Format() string {
var fields []string
fields = append(fields, fmt.Sprintf("sec=%d", this.Sec))
Expand Down
12 changes: 12 additions & 0 deletions user/argtype/iargtype.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,8 +25,10 @@ type IArgType interface {
GetTypeIndex() uint32
SetParentIndex(uint32)
SetDumpHex(bool)
SetDumpBase64(bool)
SetColor(bool)
GetDumpHex() bool
GetDumpBase64() bool
GetColor() bool
GetParentIndex() uint32
GetSize() uint32
Expand Down Expand Up @@ -54,6 +56,7 @@ type ArgType struct {
ParseCB ParseFN
ParseImpl IParseStruct
DumpHex bool
DumpBase64 bool
Color bool
}

Expand All @@ -77,6 +80,7 @@ func (this *ArgType) Clone() IArgType {
at.ParseCB = this.ParseCB
at.ParseImpl = this.ParseImpl
at.DumpHex = this.DumpHex
at.DumpBase64 = this.DumpBase64
at.Color = this.Color
return &at
}
Expand Down Expand Up @@ -105,6 +109,10 @@ func (this *ArgType) SetDumpHex(dump_hex bool) {
this.DumpHex = dump_hex
}

func (this *ArgType) SetDumpBase64(dump_base64 bool) {
this.DumpBase64 = dump_base64
}

func (this *ArgType) SetColor(color bool) {
this.Color = color
}
Expand All @@ -113,6 +121,10 @@ func (this *ArgType) GetDumpHex() bool {
return this.DumpHex
}

func (this *ArgType) GetDumpBase64() bool {
return this.DumpBase64
}

func (this *ArgType) GetColor() bool {
return this.Color
}
Expand Down
2 changes: 2 additions & 0 deletions user/config/config_file.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -129,6 +129,8 @@ func (this *ParamConfig) GetPointArg(arg_index, point_type uint32) *PointArg {
}

switch this.Format {
case "base64":
point_arg.SetDumpBase64(true)
case "hex":
point_arg.SetHexFormat()
case "hexdump":
Expand Down
1 change: 1 addition & 0 deletions user/config/config_global.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,6 +58,7 @@ type GlobalConfig struct {
RegName string
DumpRet bool
DumpHex bool
DumpBase64 bool
ShowPC bool
ShowTime bool
ShowUid bool
Expand Down
16 changes: 16 additions & 0 deletions user/config/config_module.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,7 @@ type StackUprobeConfig struct {
NonElfOffset uint64
Points []*UprobeArgs
DumpHex bool
DumpBase64 bool
Color bool
}

Expand Down Expand Up @@ -177,6 +178,7 @@ func (this *StackUprobeConfig) ParseArgType(arg_str string, point_arg *PointArg)
}
}
at.SetDumpHex(this.DumpHex)
at.SetDumpBase64(this.DumpBase64)
at.SetColor(this.Color)
point_arg.SetTypeIndex(at.GetTypeIndex())
// 这个设定用于指示是否进一步读取和解析
Expand Down Expand Up @@ -266,6 +268,10 @@ func (this *StackUprobeConfig) SetDumpHex(dump_hex bool) {
this.DumpHex = dump_hex
}

func (this *StackUprobeConfig) SetDumpBase64(dump_base64 bool) {
this.DumpBase64 = dump_base64
}

func (this *StackUprobeConfig) SetColor(color bool) {
this.Color = color
}
Expand Down Expand Up @@ -443,6 +449,7 @@ type SyscallConfig struct {
SysWhitelist []uint32
SysBlacklist []uint32
DumpHex bool
DumpBase64 bool
Color bool
}

Expand All @@ -458,6 +465,10 @@ func (this *SyscallConfig) SetDumpHex(dump_hex bool) {
this.DumpHex = dump_hex
}

func (this *SyscallConfig) SetDumpBase64(dump_base64 bool) {
this.DumpBase64 = dump_base64
}

func (this *SyscallConfig) SetColor(color bool) {
this.Color = color
}
Expand Down Expand Up @@ -539,6 +550,7 @@ func (this *SyscallConfig) Parse_FileConfig(config *SyscallFileConfig) (err erro
point_arg := param.GetPointArg(uint32(arg_index), point_type)

point_arg.SetDumpHex(this.DumpHex)
point_arg.SetDumpBase64(this.DumpBase64)
point_arg.SetColor(this.Color)

a_p := point_arg.Clone()
Expand Down Expand Up @@ -789,6 +801,7 @@ type ModuleConfig struct {
DumpHandle *os.File
FmtJson bool
DumpHex bool
DumpBase64 bool
ShowPC bool
ShowTime bool
ShowUid bool
Expand Down Expand Up @@ -854,6 +867,7 @@ func (this *ModuleConfig) InitCommonConfig(gconfig *GlobalConfig) {
this.FmtJson = gconfig.FmtJson
this.RegName = gconfig.RegName
this.DumpHex = gconfig.DumpHex
this.DumpBase64 = gconfig.DumpBase64
this.ShowPC = gconfig.ShowPC
this.ShowTime = gconfig.ShowTime
this.ShowUid = gconfig.ShowUid
Expand All @@ -864,12 +878,14 @@ func (this *ModuleConfig) InitCommonConfig(gconfig *GlobalConfig) {

this.StackUprobeConf = &StackUprobeConfig{}
this.StackUprobeConf.SetDumpHex(this.DumpHex)
this.StackUprobeConf.SetDumpBase64((this.DumpBase64))
this.StackUprobeConf.SetColor(this.Color)

this.SysCallConf = &SyscallConfig{}
this.SysCallConf.SetDebug(this.Debug)
this.SysCallConf.SetLogger(this.logger)
this.SysCallConf.SetDumpHex(this.DumpHex)
this.SysCallConf.SetDumpBase64((this.DumpBase64))
this.SysCallConf.SetColor(this.Color)
}

Expand Down
4 changes: 4 additions & 0 deletions user/config/config_point_arg.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,10 @@ func (this *PointArg) SetDumpHex(dump_hex bool) {
argtype.GetArgType(this.TypeIndex).SetDumpHex(dump_hex)
}

func (this *PointArg) SetDumpBase64(dump_base64 bool) {
argtype.GetArgType(this.TypeIndex).SetDumpBase64(dump_base64)
}

func (this *PointArg) SetColor(color bool) {
argtype.GetArgType(this.TypeIndex).SetColor(color)
}
Expand Down
Loading