Reading these articles from lwn.net: Minimizing instrumentation impacts and Debugging the Kernel using Ftrace, reminded me of Microsoft detours and Linux injectso (updated to work with current glibc, kernels).