1 /***************************************************************************
2 * Copyright (C) 2005 by Dominic Rath *
3 * Dominic.Rath@gmx.de *
5 * Copyright (C) 2007,2008 Øyvind Harboe *
6 * oyvind.harboe@zylin.com *
8 * This program is free software; you can redistribute it and/or modify *
9 * it under the terms of the GNU General Public License as published by *
10 * the Free Software Foundation; either version 2 of the License, or *
11 * (at your option) any later version. *
13 * This program is distributed in the hope that it will be useful, *
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
16 * GNU General Public License for more details. *
18 * You should have received a copy of the GNU General Public License *
19 * along with this program; if not, write to the *
20 * Free Software Foundation, Inc., *
21 * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
22 ***************************************************************************/
26 #include "binarybuffer.h"
30 #ifdef _DEBUG_JTAG_IO_
31 #define DEBUG_JTAG_IO(expr ...) LOG_DEBUG(expr)
33 #define DEBUG_JTAG_IO(expr ...)
36 #ifndef DEBUG_JTAG_IOZ
37 #define DEBUG_JTAG_IOZ 64
40 /*-----<Macros>--------------------------------------------------*/
43 * When given an array, compute its DIMension; in other words, the
44 * number of elements in the array
46 #define DIM(x) (sizeof(x)/sizeof((x)[0]))
48 /** Calculate the number of bytes required to hold @a n TAP scan bits */
49 #define TAP_SCAN_BYTES(n) CEIL(n, 8)
51 /*-----</Macros>-------------------------------------------------*/
54 * Defines JTAG Test Access Port states.
56 * These definitions were gleaned from the ARM7TDMI-S Technical
57 * Reference Manual and validated against several other ARM core
58 * technical manuals. tap_get_tms_path() is sensitive to this numbering
59 * and ordering of the TAP states; furthermore, some interfaces require
60 * specific numbers be used, as they are handed-off directly to their
61 * hardware implementations.
63 typedef enum tap_state
66 /* These are the old numbers. Leave as-is for now... */
67 TAP_RESET
= 0, TAP_IDLE
= 8,
68 TAP_DRSELECT
= 1, TAP_DRCAPTURE
= 2, TAP_DRSHIFT
= 3, TAP_DREXIT1
= 4,
69 TAP_DRPAUSE
= 5, TAP_DREXIT2
= 6, TAP_DRUPDATE
= 7,
70 TAP_IRSELECT
= 9, TAP_IRCAPTURE
= 10, TAP_IRSHIFT
= 11, TAP_IREXIT1
= 12,
71 TAP_IRPAUSE
= 13, TAP_IREXIT2
= 14, TAP_IRUPDATE
= 15,
73 TAP_NUM_STATES
= 16, TAP_INVALID
= -1,
75 /* Proper ARM recommended numbers */
93 TAP_NUM_STATES
= 0x10,
100 * Function tap_state_name
101 * Returns a string suitable for display representing the JTAG tap_state
103 const char* tap_state_name(tap_state_t state
);
105 /// The current TAP state of the pending JTAG command queue.
106 extern tap_state_t cmd_queue_cur_state
;
107 /// The TAP state in which DR scans should end.
108 extern tap_state_t cmd_queue_end_state
;
111 * This structure defines a single scan field in the scan. It provides
112 * fields for the field's width and pointers to scan input and output
115 * In addition, this structure includes a value and mask that is used by
116 * jtag_add_dr_scan_check() to validate the value that was scanned out.
118 * The allocated, modified, and intmp fields are internal work space.
120 typedef struct scan_field_s
122 /// A pointer to the tap structure to which this field refers.
125 /// The number of bits this field specifies (up to 32)
127 /// A pointer to value to be scanned into the device
129 /// A pointer to a 32-bit memory location for data scanned out
132 /// The value used to check the data scanned out.
134 /// The mask to go with check_value
137 /// in_value has been allocated for the queue
139 /// Indicates we modified the in_value.
141 /// temporary storage for performing value checks synchronously
145 typedef struct jtag_tap_event_action_s jtag_tap_event_action_t
;
147 /* this is really: typedef jtag_tap_t */
148 /* But - the typedef is done in "types.h" */
149 /* due to "forward decloration reasons" */
154 const char* dotted_name
;
155 int abs_chain_position
;
156 /// Is this TAP enabled?
158 int ir_length
; /**< size of instruction register */
159 u32 ir_capture_value
;
160 u8
* expected
; /**< Capture-IR expected value */
162 u8
* expected_mask
; /**< Capture-IR expected mask */
164 /**< device identification code */
166 /// Array of expected identification codes */
168 /// Number of expected identification codes
171 /// current instruction
173 /// Bypass register selected
176 jtag_tap_event_action_t
*event_action
;
178 jtag_tap_t
* next_tap
;
180 extern jtag_tap_t
* jtag_AllTaps(void);
181 extern jtag_tap_t
* jtag_TapByPosition(int n
);
182 extern jtag_tap_t
* jtag_TapByString(const char* dotted_name
);
183 extern jtag_tap_t
* jtag_TapByJimObj(Jim_Interp
* interp
, Jim_Obj
* obj
);
184 extern jtag_tap_t
* jtag_TapByAbsPosition(int abs_position
);
185 extern int jtag_NumEnabledTaps(void);
186 extern int jtag_NumTotalTaps(void);
188 static __inline__ jtag_tap_t
* jtag_NextEnabledTap(jtag_tap_t
* p
)
192 /* start at the head of list */
197 /* start *after* this one */
216 enum reset_line_mode
{
217 LINE_OPEN_DRAIN
= 0x0,
218 LINE_PUSH_PULL
= 0x1,
225 extern char* jtag_event_strings
[];
227 enum jtag_tap_event
{
228 JTAG_TAP_EVENT_ENABLE
,
229 JTAG_TAP_EVENT_DISABLE
232 extern const Jim_Nvp nvp_jtag_tap_event
[];
234 struct jtag_tap_event_action_s
236 enum jtag_tap_event event
;
238 jtag_tap_event_action_t
* next
;
241 extern int jtag_trst
;
242 extern int jtag_srst
;
244 typedef struct jtag_event_callback_s
246 int (*callback
)(enum jtag_event event
, void* priv
);
248 struct jtag_event_callback_s
* next
;
249 } jtag_event_callback_t
;
251 extern jtag_event_callback_t
* jtag_event_callbacks
;
253 extern int jtag_speed
;
254 extern int jtag_speed_post_reset
;
258 RESET_HAS_TRST
= 0x1,
259 RESET_HAS_SRST
= 0x2,
260 RESET_TRST_AND_SRST
= 0x3,
261 RESET_SRST_PULLS_TRST
= 0x4,
262 RESET_TRST_PULLS_SRST
= 0x8,
263 RESET_TRST_OPEN_DRAIN
= 0x10,
264 RESET_SRST_PUSH_PULL
= 0x20,
267 extern enum reset_types jtag_reset_config
;
270 * Initialize interface upon startup. Return a successful no-op upon
271 * subsequent invocations.
273 extern int jtag_interface_init(struct command_context_s
* cmd_ctx
);
275 /// Shutdown the JTAG interface upon program exit.
276 extern int jtag_interface_quit(void);
279 * Initialize JTAG chain using only a RESET reset. If init fails,
282 extern int jtag_init(struct command_context_s
* cmd_ctx
);
284 /// reset, then initialize JTAG chain
285 extern int jtag_init_reset(struct command_context_s
* cmd_ctx
);
286 extern int jtag_register_commands(struct command_context_s
* cmd_ctx
);
290 * The JTAG interface can be implemented with a software or hardware fifo.
292 * TAP_DRSHIFT and TAP_IRSHIFT are illegal end states; however,
293 * TAP_DRSHIFT/IRSHIFT can be emulated as end states, by using longer
296 * Code that is relatively insensitive to the path taken through state
297 * machine (as long as it is JTAG compliant) can use @a endstate for
298 * jtag_add_xxx_scan(). Otherwise, the pause state must be specified as
299 * end state and a subsequent jtag_add_pathmove() must be issued.
302 extern void jtag_add_ir_scan(int num_fields
, scan_field_t
* fields
, tap_state_t endstate
);
304 * The same as jtag_add_ir_scan except no verification is performed out
307 extern void jtag_add_ir_scan_noverify(int num_fields
, const scan_field_t
*fields
, tap_state_t state
);
311 * Set in_value to point to 32 bits of memory to scan into. This
312 * function is a way to handle the case of synchronous and asynchronous
315 * In the event of an asynchronous queue execution the queue buffer
316 * allocation method is used, for the synchronous case the temporary 32
317 * bits come from the input field itself.
319 extern void jtag_alloc_in_value32(scan_field_t
*field
);
321 extern void jtag_add_dr_scan(int num_fields
, const scan_field_t
* fields
, tap_state_t endstate
);
322 /// A version of jtag_add_dr_scan() that uses the check_value/mask fields
323 extern void jtag_add_dr_scan_check(int num_fields
, scan_field_t
* fields
, tap_state_t endstate
);
324 extern void jtag_add_plain_ir_scan(int num_fields
, const scan_field_t
* fields
, tap_state_t endstate
);
325 extern void jtag_add_plain_dr_scan(int num_fields
, const scan_field_t
* fields
, tap_state_t endstate
);
329 * Defines a simple JTAG callback that can allow conversions on data
330 * scanned in from an interface.
332 * This callback should only be used for conversion that cannot fail.
333 * For conversion types or checks that can fail, use the more complete
334 * variant: jtag_callback_t.
336 typedef void (*jtag_callback1_t
)(u8
*in
);
338 /// A simpler version of jtag_add_callback4().
339 extern void jtag_add_callback(jtag_callback1_t
, u8
*in
);
343 * Defines the type of data passed to the jtag_callback_t interface.
344 * The underlying type must allow storing an @c int or pointer type.
346 typedef intptr_t jtag_callback_data_t
;
349 * Defines the interface of the JTAG callback mechanism.
351 * @param in the pointer to the data clocked in
352 * @param data1 An integer big enough to use as an @c int or a pointer.
353 * @param data2 An integer big enough to use as an @c int or a pointer.
354 * @param data3 An integer big enough to use as an @c int or a pointer.
355 * @returns an error code
357 typedef int (*jtag_callback_t
)(u8
*in
, jtag_callback_data_t data1
, jtag_callback_data_t data2
, jtag_callback_data_t data3
);
361 * This callback can be executed immediately the queue has been flushed.
363 * The JTAG queue can be executed synchronously or asynchronously.
364 * Typically for USB, the queue is executed asynchronously. For
365 * low-latency interfaces, the queue may be executed synchronously.
367 * The callback mechanism is very general and does not make many
368 * assumptions about what the callback does or what its arguments are.
369 * These callbacks are typically executed *after* the *entire* JTAG
370 * queue has been executed for e.g. USB interfaces, and they are
371 * guaranteeed to be invoked in the order that they were queued.
373 * If the execution of the queue fails before the callbacks, then --
374 * depending on driver implementation -- the callbacks may or may not be
375 * invoked. @todo Can we make this behavior consistent?
377 * The strange name is due to C's lack of overloading using function
380 * @param f The callback function to add.
381 * @param in Typically used to point to the data to operate on.
382 * Frequently this will be the data clocked in during a shift operation.
383 * @param data1 An integer big enough to use as an @c int or a pointer.
384 * @param data2 An integer big enough to use as an @c int or a pointer.
385 * @param data3 An integer big enough to use as an @c int or a pointer.
388 extern void jtag_add_callback4(jtag_callback_t f
, u8
*in
,
389 jtag_callback_data_t data1
, jtag_callback_data_t data2
,
390 jtag_callback_data_t data3
);
394 * Run a TAP_RESET reset where the end state is TAP_RESET,
395 * regardless of the start state.
397 extern void jtag_add_tlr(void);
400 * Application code *must* assume that interfaces will
401 * implement transitions between states with different
402 * paths and path lengths through the state diagram. The
403 * path will vary across interface and also across versions
404 * of the same interface over time. Even if the OpenOCD code
405 * is unchanged, the actual path taken may vary over time
406 * and versions of interface firmware or PCB revisions.
408 * Use jtag_add_pathmove() when specific transition sequences
411 * Do not use jtag_add_pathmove() unless you need to, but do use it
414 * DANGER! If the target is dependent upon a particular sequence
415 * of transitions for things to work correctly(e.g. as a workaround
416 * for an errata that contradicts the JTAG standard), then pathmove
417 * must be used, even if some jtag interfaces happen to use the
418 * desired path. Worse, the jtag interface used for testing a
419 * particular implementation, could happen to use the "desired"
420 * path when transitioning to/from end
423 * A list of unambigious single clock state transitions, not
424 * all drivers can support this, but it is required for e.g.
425 * XScale and Xilinx support
427 * Note! TAP_RESET must not be used in the path!
429 * Note that the first on the list must be reachable
430 * via a single transition from the current state.
432 * All drivers are required to implement jtag_add_pathmove().
433 * However, if the pathmove sequence can not be precisely
434 * executed, an interface_jtag_add_pathmove() or jtag_execute_queue()
435 * must return an error. It is legal, but not recommended, that
436 * a driver returns an error in all cases for a pathmove if it
437 * can only implement a few transitions and therefore
438 * a partial implementation of pathmove would have little practical
441 extern void jtag_add_pathmove(int num_states
, const tap_state_t
* path
);
444 * Goes to TAP_IDLE (if we're not already there), cycle
445 * precisely num_cycles in the TAP_IDLE state, after which move
446 * to @a endstate (unless it is also TAP_IDLE).
448 * @param num_cycles Number of cycles in TAP_IDLE state. This argument
449 * may be 0, in which case this routine will navigate to @a endstate
451 * @param endstate The final state.
453 extern void jtag_add_runtest(int num_cycles
, tap_state_t endstate
);
456 * A reset of the TAP state machine can be requested.
458 * Whether tms or trst reset is used depends on the capabilities of
459 * the target and jtag interface(reset_config command configures this).
461 * srst can driver a reset of the TAP state machine and vice
464 * Application code may need to examine value of jtag_reset_config
465 * to determine the proper codepath
467 * DANGER! Even though srst drives trst, trst might not be connected to
468 * the interface, and it might actually be *harmful* to assert trst in this case.
470 * This is why combinations such as "reset_config srst_only srst_pulls_trst"
473 * only req_tlr_or_trst and srst can have a transition for a
474 * call as the effects of transitioning both at the "same time"
475 * are undefined, but when srst_pulls_trst or vice versa,
476 * then trst & srst *must* be asserted together.
478 extern void jtag_add_reset(int req_tlr_or_trst
, int srst
);
480 extern void jtag_add_end_state(tap_state_t endstate
);
481 extern void jtag_add_sleep(u32 us
);
485 * Function jtag_add_stable_clocks
486 * first checks that the state in which the clocks are to be issued is
487 * stable, then queues up clock_count clocks for transmission.
489 void jtag_add_clocks(int num_cycles
);
493 * For software FIFO implementations, the queued commands can be executed
494 * during this call or earlier. A sw queue might decide to push out
495 * some of the jtag_add_xxx() operations once the queue is "big enough".
497 * This fn will return an error code if any of the prior jtag_add_xxx()
498 * calls caused a failure, e.g. check failure. Note that it does not
499 * matter if the operation was executed *before* jtag_execute_queue(),
500 * jtag_execute_queue() will still return an error code.
502 * All jtag_add_xxx() calls that have in_handler!=NULL will have been
503 * executed when this fn returns, but if what has been queued only
504 * clocks data out, without reading anything back, then JTAG could
505 * be running *after* jtag_execute_queue() returns. The API does
506 * not define a way to flush a hw FIFO that runs *after*
507 * jtag_execute_queue() returns.
509 * jtag_add_xxx() commands can either be executed immediately or
510 * at some time between the jtag_add_xxx() fn call and jtag_execute_queue().
512 extern int jtag_execute_queue(void);
514 /* same as jtag_execute_queue() but does not clear the error flag */
515 extern void jtag_execute_queue_noclear(void);
518 * The jtag_error variable is set when an error occurs while executing
521 * This flag can also be set from application code, if an error happens
522 * during processing that should be reported during jtag_execute_queue().
524 * It is cleared by jtag_execute_queue().
526 extern int jtag_error
;
528 static __inline__
void jtag_set_error(int error
)
530 if ((error
==ERROR_OK
)||(jtag_error
!=ERROR_OK
))
532 /* keep first error */
540 /* can be implemented by hw+sw */
541 extern int jtag_power_dropout(int* dropout
);
542 extern int jtag_srst_asserted(int* srst_asserted
);
544 /* JTAG support functions */
547 * Execute jtag queue and check value with an optional mask.
548 * @param field Pointer to scan field.
549 * @param value Pointer to scan value.
550 * @param mask Pointer to scan mask; may be NULL.
551 * @returns Nothing, but calls jtag_set_error() on any error.
553 extern void jtag_check_value_mask(scan_field_t
*field
, u8
*value
, u8
*mask
);
555 extern void jtag_sleep(u32 us
);
556 extern int jtag_call_event_callbacks(enum jtag_event event
);
557 extern int jtag_register_event_callback(int (* callback
)(enum jtag_event event
, void* priv
), void* priv
);
559 extern int jtag_verify_capture_ir
;
561 void jtag_tap_handle_event(jtag_tap_t
* tap
, enum jtag_tap_event e
);
564 * The JTAG subsystem defines a number of error codes,
565 * using codes between -100 and -199.
567 #define ERROR_JTAG_INIT_FAILED (-100)
568 #define ERROR_JTAG_INVALID_INTERFACE (-101)
569 #define ERROR_JTAG_NOT_IMPLEMENTED (-102)
570 #define ERROR_JTAG_TRST_ASSERTED (-103)
571 #define ERROR_JTAG_QUEUE_FAILED (-104)
572 #define ERROR_JTAG_NOT_STABLE_STATE (-105)
573 #define ERROR_JTAG_DEVICE_ERROR (-107)
576 * jtag_add_dr_out() is a version of jtag_add_dr_scan() which
577 * only scans data out. It operates on 32 bit integers instead
578 * of 8 bit, which makes it a better impedance match with
579 * the calling code which often operate on 32 bit integers.
581 * Current or end_state can not be TAP_RESET. end_state can be TAP_INVALID
583 * num_bits[i] is the number of bits to clock out from value[i] LSB first.
585 * If the device is in bypass, then that is an error condition in
586 * the caller code that is not detected by this fn, whereas
587 * jtag_add_dr_scan() does detect it. Similarly if the device is not in
588 * bypass, data must be passed to it.
590 * If anything fails, then jtag_error will be set and jtag_execute() will
591 * return an error. There is no way to determine if there was a failure
592 * during this function call.
594 * This is an inline fn to speed up embedded hosts. Also note that
595 * interface_jtag_add_dr_out() can be a *small* inline function for
598 * There is no jtag_add_dr_outin() version of this fn that also allows
599 * clocking data back in. Patches gladly accepted!
601 extern void jtag_add_dr_out(jtag_tap_t
* tap
,
602 int num_fields
, const int* num_bits
, const u32
* value
,
603 tap_state_t end_state
);
607 * jtag_add_statemove() moves from the current state to @a goal_state.
609 * This function was originally designed to handle the XSTATE command
610 * from the XSVF specification.
612 * @param goal_state The final TAP state.
613 * @return ERROR_OK on success, or an error code on failure.
615 extern int jtag_add_statemove(tap_state_t goal_state
);
Linking to existing account procedure
If you already have an account and want to add another login method
you
MUST first sign in with your existing account and
then change URL to read
https://review.openocd.org/login/?link
to get to this page again but this time it'll work for linking. Thank you.
SSH host keys fingerprints
1024 SHA256:YKx8b7u5ZWdcbp7/4AeXNaqElP49m6QrwfXaqQGJAOk gerrit-code-review@openocd.zylin.com (DSA)
384 SHA256:jHIbSQa4REvwCFG4cq5LBlBLxmxSqelQPem/EXIrxjk gerrit-code-review@openocd.org (ECDSA)
521 SHA256:UAOPYkU9Fjtcao0Ul/Rrlnj/OsQvt+pgdYSZ4jOYdgs gerrit-code-review@openocd.org (ECDSA)
256 SHA256:A13M5QlnozFOvTllybRZH6vm7iSt0XLxbA48yfc2yfY gerrit-code-review@openocd.org (ECDSA)
256 SHA256:spYMBqEYoAOtK7yZBrcwE8ZpYt6b68Cfh9yEVetvbXg gerrit-code-review@openocd.org (ED25519)
+--[ED25519 256]--+
|=.. |
|+o.. . |
|*.o . . |
|+B . . . |
|Bo. = o S |
|Oo.+ + = |
|oB=.* = . o |
| =+=.+ + E |
|. .=o . o |
+----[SHA256]-----+
2048 SHA256:0Onrb7/PHjpo6iVZ7xQX2riKN83FJ3KGU0TvI0TaFG4 gerrit-code-review@openocd.zylin.com (RSA)