1 /***************************************************************************
2 * Copyright (C) 2007 by Dominic Rath *
3 * Dominic.Rath@gmx.de *
5 * This program is free software; you can redistribute it and/or modify *
6 * it under the terms of the GNU General Public License as published by *
7 * the Free Software Foundation; either version 2 of the License, or *
8 * (at your option) any later version. *
10 * This program is distributed in the hope that it will be useful, *
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
13 * GNU General Public License for more details. *
15 * You should have received a copy of the GNU General Public License *
16 * along with this program; if not, write to the *
17 * Free Software Foundation, Inc., *
18 * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
19 ***************************************************************************/
24 #include "arm926ejs.h"
27 #include "time_support.h"
33 #define _DEBUG_INSTRUCTION_EXECUTION_
37 int arm926ejs_register_commands(struct command_context_s
*cmd_ctx
);
39 int arm926ejs_handle_cp15_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
);
40 int arm926ejs_handle_cp15i_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
);
41 int arm926ejs_handle_virt2phys_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
);
42 int arm926ejs_handle_cache_info_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
);
43 int arm926ejs_handle_md_phys_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
);
44 int arm926ejs_handle_mw_phys_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
);
46 int arm926ejs_handle_read_cache_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
);
47 int arm926ejs_handle_read_mmu_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
);
49 /* forward declarations */
50 int arm926ejs_target_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
, struct target_s
*target
);
51 int arm926ejs_init_target(struct command_context_s
*cmd_ctx
, struct target_s
*target
);
52 int arm926ejs_quit(void);
53 int arm926ejs_arch_state(struct target_s
*target
);
54 int arm926ejs_read_memory(struct target_s
*target
, u32 address
, u32 size
, u32 count
, u8
*buffer
);
55 int arm926ejs_write_memory(struct target_s
*target
, u32 address
, u32 size
, u32 count
, u8
*buffer
);
56 int arm926ejs_soft_reset_halt(struct target_s
*target
);
57 static int arm926ejs_virt2phys(struct target_s
*target
, u32
virtual, u32
*physical
);
58 static int arm926ejs_mmu(struct target_s
*target
, int *enabled
);
60 target_type_t arm926ejs_target
=
65 .arch_state
= arm926ejs_arch_state
,
67 .target_request_data
= arm7_9_target_request_data
,
70 .resume
= arm7_9_resume
,
73 .assert_reset
= arm7_9_assert_reset
,
74 .deassert_reset
= arm7_9_deassert_reset
,
75 .soft_reset_halt
= arm926ejs_soft_reset_halt
,
77 .get_gdb_reg_list
= armv4_5_get_gdb_reg_list
,
79 .read_memory
= arm7_9_read_memory
,
80 .write_memory
= arm926ejs_write_memory
,
81 .bulk_write_memory
= arm7_9_bulk_write_memory
,
82 .checksum_memory
= arm7_9_checksum_memory
,
83 .blank_check_memory
= arm7_9_blank_check_memory
,
85 .run_algorithm
= armv4_5_run_algorithm
,
87 .add_breakpoint
= arm7_9_add_breakpoint
,
88 .remove_breakpoint
= arm7_9_remove_breakpoint
,
89 .add_watchpoint
= arm7_9_add_watchpoint
,
90 .remove_watchpoint
= arm7_9_remove_watchpoint
,
92 .register_commands
= arm926ejs_register_commands
,
93 .target_command
= arm926ejs_target_command
,
94 .init_target
= arm926ejs_init_target
,
95 .examine
= arm9tdmi_examine
,
96 .quit
= arm926ejs_quit
,
97 .virt2phys
= arm926ejs_virt2phys
,
102 int arm926ejs_catch_broken_irscan(u8
*captured
, void *priv
, scan_field_t
*field
)
104 /* The ARM926EJ-S' instruction register is 4 bits wide */
105 u8 t
= *captured
& 0xf;
106 u8 t2
= *field
->in_check_value
& 0xf;
111 else if ((t
== 0x0f) || (t
== 0x00))
113 LOG_DEBUG("caught ARM926EJ-S invalid Capture-IR result after CP15 access");
116 return ERROR_JTAG_QUEUE_FAILED
;;
119 #define ARM926EJS_CP15_ADDR(opcode_1, opcode_2, CRn, CRm) ((opcode_1 << 11) | (opcode_2 << 8) | (CRn << 4) | (CRm << 0))
121 int arm926ejs_cp15_read(target_t
*target
, u32 op1
, u32 op2
, u32 CRn
, u32 CRm
, u32
*value
)
123 armv4_5_common_t
*armv4_5
= target
->arch_info
;
124 arm7_9_common_t
*arm7_9
= armv4_5
->arch_info
;
125 arm_jtag_t
*jtag_info
= &arm7_9
->jtag_info
;
126 u32 address
= ARM926EJS_CP15_ADDR(op1
, op2
, CRn
, CRm
);
127 scan_field_t fields
[4];
132 buf_set_u32(address_buf
, 0, 14, address
);
134 jtag_add_end_state(TAP_RTI
);
135 arm_jtag_scann(jtag_info
, 0xf);
136 arm_jtag_set_instr(jtag_info
, jtag_info
->intest_instr
, NULL
);
138 fields
[0].device
= jtag_info
->chain_pos
;
139 fields
[0].num_bits
= 32;
140 fields
[0].out_value
= NULL
;
141 fields
[0].out_mask
= NULL
;
142 fields
[0].in_value
= NULL
;
143 fields
[0].in_check_value
= NULL
;
144 fields
[0].in_check_mask
= NULL
;
145 fields
[0].in_handler
= NULL
;
146 fields
[0].in_handler_priv
= NULL
;
148 fields
[1].device
= jtag_info
->chain_pos
;
149 fields
[1].num_bits
= 1;
150 fields
[1].out_value
= &access
;
151 fields
[1].out_mask
= NULL
;
152 fields
[1].in_value
= &access
;
153 fields
[1].in_check_value
= NULL
;
154 fields
[1].in_check_mask
= NULL
;
155 fields
[1].in_handler
= NULL
;
156 fields
[1].in_handler_priv
= NULL
;
158 fields
[2].device
= jtag_info
->chain_pos
;
159 fields
[2].num_bits
= 14;
160 fields
[2].out_value
= address_buf
;
161 fields
[2].out_mask
= NULL
;
162 fields
[2].in_value
= NULL
;
163 fields
[2].in_check_value
= NULL
;
164 fields
[2].in_check_mask
= NULL
;
165 fields
[2].in_handler
= NULL
;
166 fields
[2].in_handler_priv
= NULL
;
168 fields
[3].device
= jtag_info
->chain_pos
;
169 fields
[3].num_bits
= 1;
170 fields
[3].out_value
= &nr_w_buf
;
171 fields
[3].out_mask
= NULL
;
172 fields
[3].in_value
= NULL
;
173 fields
[3].in_check_value
= NULL
;
174 fields
[3].in_check_mask
= NULL
;
175 fields
[3].in_handler
= NULL
;
176 fields
[3].in_handler_priv
= NULL
;
178 jtag_add_dr_scan(4, fields
, -1);
180 fields
[0].in_handler_priv
= value
;
181 fields
[0].in_handler
= arm_jtag_buf_to_u32
;
183 /*TODO: add timeout*/
186 /* rescan with NOP, to wait for the access to complete */
189 jtag_add_dr_scan(4, fields
, -1);
190 jtag_execute_queue();
191 } while (buf_get_u32(&access
, 0, 1) != 1);
193 #ifdef _DEBUG_INSTRUCTION_EXECUTION_
194 LOG_DEBUG("addr: 0x%x value: %8.8x", address
, *value
);
197 arm_jtag_set_instr(jtag_info
, 0xc, &arm926ejs_catch_broken_irscan
);
202 int arm926ejs_cp15_write(target_t
*target
, u32 op1
, u32 op2
, u32 CRn
, u32 CRm
, u32 value
)
204 armv4_5_common_t
*armv4_5
= target
->arch_info
;
205 arm7_9_common_t
*arm7_9
= armv4_5
->arch_info
;
206 arm_jtag_t
*jtag_info
= &arm7_9
->jtag_info
;
207 u32 address
= ARM926EJS_CP15_ADDR(op1
, op2
, CRn
, CRm
);
208 scan_field_t fields
[4];
214 buf_set_u32(address_buf
, 0, 14, address
);
215 buf_set_u32(value_buf
, 0, 32, value
);
217 jtag_add_end_state(TAP_RTI
);
218 arm_jtag_scann(jtag_info
, 0xf);
219 arm_jtag_set_instr(jtag_info
, jtag_info
->intest_instr
, NULL
);
221 fields
[0].device
= jtag_info
->chain_pos
;
222 fields
[0].num_bits
= 32;
223 fields
[0].out_value
= value_buf
;
224 fields
[0].out_mask
= NULL
;
225 fields
[0].in_value
= NULL
;
226 fields
[0].in_check_value
= NULL
;
227 fields
[0].in_check_mask
= NULL
;
228 fields
[0].in_handler
= NULL
;
229 fields
[0].in_handler_priv
= NULL
;
231 fields
[1].device
= jtag_info
->chain_pos
;
232 fields
[1].num_bits
= 1;
233 fields
[1].out_value
= &access
;
234 fields
[1].out_mask
= NULL
;
235 fields
[1].in_value
= &access
;
236 fields
[1].in_check_value
= NULL
;
237 fields
[1].in_check_mask
= NULL
;
238 fields
[1].in_handler
= NULL
;
239 fields
[1].in_handler_priv
= NULL
;
241 fields
[2].device
= jtag_info
->chain_pos
;
242 fields
[2].num_bits
= 14;
243 fields
[2].out_value
= address_buf
;
244 fields
[2].out_mask
= NULL
;
245 fields
[2].in_value
= NULL
;
246 fields
[2].in_check_value
= NULL
;
247 fields
[2].in_check_mask
= NULL
;
248 fields
[2].in_handler
= NULL
;
249 fields
[2].in_handler_priv
= NULL
;
251 fields
[3].device
= jtag_info
->chain_pos
;
252 fields
[3].num_bits
= 1;
253 fields
[3].out_value
= &nr_w_buf
;
254 fields
[3].out_mask
= NULL
;
255 fields
[3].in_value
= NULL
;
256 fields
[3].in_check_value
= NULL
;
257 fields
[3].in_check_mask
= NULL
;
258 fields
[3].in_handler
= NULL
;
259 fields
[3].in_handler_priv
= NULL
;
261 jtag_add_dr_scan(4, fields
, -1);
262 /*TODO: add timeout*/
265 /* rescan with NOP, to wait for the access to complete */
268 jtag_add_dr_scan(4, fields
, -1);
269 jtag_execute_queue();
270 } while (buf_get_u32(&access
, 0, 1) != 1);
272 #ifdef _DEBUG_INSTRUCTION_EXECUTION_
273 LOG_DEBUG("addr: 0x%x value: %8.8x", address
, value
);
276 arm_jtag_set_instr(jtag_info
, 0xf, &arm926ejs_catch_broken_irscan
);
281 int arm926ejs_examine_debug_reason(target_t
*target
)
283 armv4_5_common_t
*armv4_5
= target
->arch_info
;
284 arm7_9_common_t
*arm7_9
= armv4_5
->arch_info
;
285 reg_t
*dbg_stat
= &arm7_9
->eice_cache
->reg_list
[EICE_DBG_STAT
];
289 embeddedice_read_reg(dbg_stat
);
290 if ((retval
= jtag_execute_queue()) != ERROR_OK
)
293 debug_reason
= buf_get_u32(dbg_stat
->value
, 6, 4);
295 switch (debug_reason
)
298 LOG_DEBUG("breakpoint from EICE unit 0");
299 target
->debug_reason
= DBG_REASON_BREAKPOINT
;
302 LOG_DEBUG("breakpoint from EICE unit 1");
303 target
->debug_reason
= DBG_REASON_BREAKPOINT
;
306 LOG_DEBUG("soft breakpoint (BKPT instruction)");
307 target
->debug_reason
= DBG_REASON_BREAKPOINT
;
310 LOG_DEBUG("vector catch breakpoint");
311 target
->debug_reason
= DBG_REASON_BREAKPOINT
;
314 LOG_DEBUG("external breakpoint");
315 target
->debug_reason
= DBG_REASON_BREAKPOINT
;
318 LOG_DEBUG("watchpoint from EICE unit 0");
319 target
->debug_reason
= DBG_REASON_WATCHPOINT
;
322 LOG_DEBUG("watchpoint from EICE unit 1");
323 target
->debug_reason
= DBG_REASON_WATCHPOINT
;
326 LOG_DEBUG("external watchpoint");
327 target
->debug_reason
= DBG_REASON_WATCHPOINT
;
330 LOG_DEBUG("internal debug request");
331 target
->debug_reason
= DBG_REASON_DBGRQ
;
334 LOG_DEBUG("external debug request");
335 target
->debug_reason
= DBG_REASON_DBGRQ
;
338 LOG_ERROR("BUG: debug re-entry from system speed access shouldn't be handled here");
341 LOG_ERROR("BUG: unknown debug reason: 0x%x", debug_reason
);
342 target
->debug_reason
= DBG_REASON_DBGRQ
;
343 retval
= ERROR_TARGET_FAILURE
;
350 u32
arm926ejs_get_ttb(target_t
*target
)
352 armv4_5_common_t
*armv4_5
= target
->arch_info
;
353 arm7_9_common_t
*arm7_9
= armv4_5
->arch_info
;
354 arm9tdmi_common_t
*arm9tdmi
= arm7_9
->arch_info
;
355 arm926ejs_common_t
*arm926ejs
= arm9tdmi
->arch_info
;
359 if ((retval
= arm926ejs
->read_cp15(target
, 0, 0, 2, 0, &ttb
)) != ERROR_OK
)
365 void arm926ejs_disable_mmu_caches(target_t
*target
, int mmu
, int d_u_cache
, int i_cache
)
367 armv4_5_common_t
*armv4_5
= target
->arch_info
;
368 arm7_9_common_t
*arm7_9
= armv4_5
->arch_info
;
369 arm9tdmi_common_t
*arm9tdmi
= arm7_9
->arch_info
;
370 arm926ejs_common_t
*arm926ejs
= arm9tdmi
->arch_info
;
373 /* read cp15 control register */
374 arm926ejs
->read_cp15(target
, 0, 0, 1, 0, &cp15_control
);
375 jtag_execute_queue();
380 arm926ejs
->write_cp15(target
, 0, 0, 8, 7, 0x0);
382 cp15_control
&= ~0x1U
;
388 /* read-modify-write CP15 debug override register
389 * to enable "test and clean all" */
390 arm926ejs
->read_cp15(target
, 0, 0, 15, 0, &debug_override
);
391 debug_override
|= 0x80000;
392 arm926ejs
->write_cp15(target
, 0, 0, 15, 0, debug_override
);
394 /* clean and invalidate DCache */
395 arm926ejs
->write_cp15(target
, 0, 0, 7, 5, 0x0);
397 /* write CP15 debug override register
398 * to disable "test and clean all" */
399 debug_override
&= ~0x80000;
400 arm926ejs
->write_cp15(target
, 0, 0, 15, 0, debug_override
);
402 cp15_control
&= ~0x4U
;
407 /* invalidate ICache */
408 arm926ejs
->write_cp15(target
, 0, 0, 7, 5, 0x0);
410 cp15_control
&= ~0x1000U
;
413 arm926ejs
->write_cp15(target
, 0, 0, 1, 0, cp15_control
);
416 void arm926ejs_enable_mmu_caches(target_t
*target
, int mmu
, int d_u_cache
, int i_cache
)
418 armv4_5_common_t
*armv4_5
= target
->arch_info
;
419 arm7_9_common_t
*arm7_9
= armv4_5
->arch_info
;
420 arm9tdmi_common_t
*arm9tdmi
= arm7_9
->arch_info
;
421 arm926ejs_common_t
*arm926ejs
= arm9tdmi
->arch_info
;
424 /* read cp15 control register */
425 arm926ejs
->read_cp15(target
, 0, 0, 1, 0, &cp15_control
);
426 jtag_execute_queue();
429 cp15_control
|= 0x1U
;
432 cp15_control
|= 0x4U
;
435 cp15_control
|= 0x1000U
;
437 arm926ejs
->write_cp15(target
, 0, 0, 1, 0, cp15_control
);
440 void arm926ejs_post_debug_entry(target_t
*target
)
442 armv4_5_common_t
*armv4_5
= target
->arch_info
;
443 arm7_9_common_t
*arm7_9
= armv4_5
->arch_info
;
444 arm9tdmi_common_t
*arm9tdmi
= arm7_9
->arch_info
;
445 arm926ejs_common_t
*arm926ejs
= arm9tdmi
->arch_info
;
447 /* examine cp15 control reg */
448 arm926ejs
->read_cp15(target
, 0, 0, 1, 0, &arm926ejs
->cp15_control_reg
);
449 jtag_execute_queue();
450 LOG_DEBUG("cp15_control_reg: %8.8x", arm926ejs
->cp15_control_reg
);
452 if (arm926ejs
->armv4_5_mmu
.armv4_5_cache
.ctype
== -1)
455 /* identify caches */
456 arm926ejs
->read_cp15(target
, 0, 1, 0, 0, &cache_type_reg
);
457 jtag_execute_queue();
458 armv4_5_identify_cache(cache_type_reg
, &arm926ejs
->armv4_5_mmu
.armv4_5_cache
);
461 arm926ejs
->armv4_5_mmu
.mmu_enabled
= (arm926ejs
->cp15_control_reg
& 0x1U
) ? 1 : 0;
462 arm926ejs
->armv4_5_mmu
.armv4_5_cache
.d_u_cache_enabled
= (arm926ejs
->cp15_control_reg
& 0x4U
) ? 1 : 0;
463 arm926ejs
->armv4_5_mmu
.armv4_5_cache
.i_cache_enabled
= (arm926ejs
->cp15_control_reg
& 0x1000U
) ? 1 : 0;
465 /* save i/d fault status and address register */
466 arm926ejs
->read_cp15(target
, 0, 0, 5, 0, &arm926ejs
->d_fsr
);
467 arm926ejs
->read_cp15(target
, 0, 1, 5, 0, &arm926ejs
->i_fsr
);
468 arm926ejs
->read_cp15(target
, 0, 0, 6, 0, &arm926ejs
->d_far
);
470 LOG_DEBUG("D FSR: 0x%8.8x, D FAR: 0x%8.8x, I FSR: 0x%8.8x",
471 arm926ejs
->d_fsr
, arm926ejs
->d_far
, arm926ejs
->i_fsr
);
476 /* read-modify-write CP15 cache debug control register
477 * to disable I/D-cache linefills and force WT */
478 arm926ejs
->read_cp15(target
, 7, 0, 15, 0, &cache_dbg_ctrl
);
479 cache_dbg_ctrl
|= 0x7;
480 arm926ejs
->write_cp15(target
, 7, 0, 15, 0, cache_dbg_ctrl
);
483 void arm926ejs_pre_restore_context(target_t
*target
)
485 armv4_5_common_t
*armv4_5
= target
->arch_info
;
486 arm7_9_common_t
*arm7_9
= armv4_5
->arch_info
;
487 arm9tdmi_common_t
*arm9tdmi
= arm7_9
->arch_info
;
488 arm926ejs_common_t
*arm926ejs
= arm9tdmi
->arch_info
;
490 /* restore i/d fault status and address register */
491 arm926ejs
->write_cp15(target
, 0, 0, 5, 0, arm926ejs
->d_fsr
);
492 arm926ejs
->write_cp15(target
, 0, 1, 5, 0, arm926ejs
->i_fsr
);
493 arm926ejs
->write_cp15(target
, 0, 0, 6, 0, arm926ejs
->d_far
);
497 /* read-modify-write CP15 cache debug control register
498 * to reenable I/D-cache linefills and disable WT */
499 arm926ejs
->read_cp15(target
, 7, 0, 15, 0, &cache_dbg_ctrl
);
500 cache_dbg_ctrl
&= ~0x7;
501 arm926ejs
->write_cp15(target
, 7, 0, 15, 0, cache_dbg_ctrl
);
504 int arm926ejs_get_arch_pointers(target_t
*target
, armv4_5_common_t
**armv4_5_p
, arm7_9_common_t
**arm7_9_p
, arm9tdmi_common_t
**arm9tdmi_p
, arm926ejs_common_t
**arm926ejs_p
)
506 armv4_5_common_t
*armv4_5
= target
->arch_info
;
507 arm7_9_common_t
*arm7_9
;
508 arm9tdmi_common_t
*arm9tdmi
;
509 arm926ejs_common_t
*arm926ejs
;
511 if (armv4_5
->common_magic
!= ARMV4_5_COMMON_MAGIC
)
516 arm7_9
= armv4_5
->arch_info
;
517 if (arm7_9
->common_magic
!= ARM7_9_COMMON_MAGIC
)
522 arm9tdmi
= arm7_9
->arch_info
;
523 if (arm9tdmi
->common_magic
!= ARM9TDMI_COMMON_MAGIC
)
528 arm926ejs
= arm9tdmi
->arch_info
;
529 if (arm926ejs
->common_magic
!= ARM926EJS_COMMON_MAGIC
)
534 *armv4_5_p
= armv4_5
;
536 *arm9tdmi_p
= arm9tdmi
;
537 *arm926ejs_p
= arm926ejs
;
542 int arm926ejs_arch_state(struct target_s
*target
)
544 armv4_5_common_t
*armv4_5
= target
->arch_info
;
545 arm7_9_common_t
*arm7_9
= armv4_5
->arch_info
;
546 arm9tdmi_common_t
*arm9tdmi
= arm7_9
->arch_info
;
547 arm926ejs_common_t
*arm926ejs
= arm9tdmi
->arch_info
;
551 "disabled", "enabled"
554 if (armv4_5
->common_magic
!= ARMV4_5_COMMON_MAGIC
)
556 LOG_ERROR("BUG: called for a non-ARMv4/5 target");
561 "target halted in %s state due to %s, current mode: %s\n"
562 "cpsr: 0x%8.8x pc: 0x%8.8x\n"
563 "MMU: %s, D-Cache: %s, I-Cache: %s",
564 armv4_5_state_strings
[armv4_5
->core_state
],
565 Jim_Nvp_value2name_simple( nvp_target_debug_reason
,target
->debug_reason
)->name
,
566 armv4_5_mode_strings
[armv4_5_mode_to_number(armv4_5
->core_mode
)],
567 buf_get_u32(armv4_5
->core_cache
->reg_list
[ARMV4_5_CPSR
].value
, 0, 32),
568 buf_get_u32(armv4_5
->core_cache
->reg_list
[15].value
, 0, 32),
569 state
[arm926ejs
->armv4_5_mmu
.mmu_enabled
],
570 state
[arm926ejs
->armv4_5_mmu
.armv4_5_cache
.d_u_cache_enabled
],
571 state
[arm926ejs
->armv4_5_mmu
.armv4_5_cache
.i_cache_enabled
]);
576 int arm926ejs_soft_reset_halt(struct target_s
*target
)
578 armv4_5_common_t
*armv4_5
= target
->arch_info
;
579 arm7_9_common_t
*arm7_9
= armv4_5
->arch_info
;
580 arm9tdmi_common_t
*arm9tdmi
= arm7_9
->arch_info
;
581 arm926ejs_common_t
*arm926ejs
= arm9tdmi
->arch_info
;
582 reg_t
*dbg_stat
= &arm7_9
->eice_cache
->reg_list
[EICE_DBG_STAT
];
586 long long then
=timeval_ms();
588 while (!(timeout
=((timeval_ms()-then
)>1000)))
590 if (buf_get_u32(dbg_stat
->value
, EICE_DBG_STATUS_DBGACK
, 1) == 0)
592 embeddedice_read_reg(dbg_stat
);
593 jtag_execute_queue();
600 /* do not eat all CPU, time out after 1 se*/
609 LOG_ERROR("Failed to halt CPU after 1 sec");
610 return ERROR_TARGET_TIMEOUT
;
613 target
->state
= TARGET_HALTED
;
615 /* SVC, ARM state, IRQ and FIQ disabled */
616 buf_set_u32(armv4_5
->core_cache
->reg_list
[ARMV4_5_CPSR
].value
, 0, 8, 0xd3);
617 armv4_5
->core_cache
->reg_list
[ARMV4_5_CPSR
].dirty
= 1;
618 armv4_5
->core_cache
->reg_list
[ARMV4_5_CPSR
].valid
= 1;
620 /* start fetching from 0x0 */
621 buf_set_u32(armv4_5
->core_cache
->reg_list
[15].value
, 0, 32, 0x0);
622 armv4_5
->core_cache
->reg_list
[15].dirty
= 1;
623 armv4_5
->core_cache
->reg_list
[15].valid
= 1;
625 armv4_5
->core_mode
= ARMV4_5_MODE_SVC
;
626 armv4_5
->core_state
= ARMV4_5_STATE_ARM
;
628 arm926ejs_disable_mmu_caches(target
, 1, 1, 1);
629 arm926ejs
->armv4_5_mmu
.mmu_enabled
= 0;
630 arm926ejs
->armv4_5_mmu
.armv4_5_cache
.d_u_cache_enabled
= 0;
631 arm926ejs
->armv4_5_mmu
.armv4_5_cache
.i_cache_enabled
= 0;
633 target_call_event_callbacks(target
, TARGET_EVENT_HALTED
);
638 int arm926ejs_write_memory(struct target_s
*target
, u32 address
, u32 size
, u32 count
, u8
*buffer
)
641 armv4_5_common_t
*armv4_5
= target
->arch_info
;
642 arm7_9_common_t
*arm7_9
= armv4_5
->arch_info
;
643 arm9tdmi_common_t
*arm9tdmi
= arm7_9
->arch_info
;
644 arm926ejs_common_t
*arm926ejs
= arm9tdmi
->arch_info
;
646 if ((retval
= arm7_9_write_memory(target
, address
, size
, count
, buffer
)) != ERROR_OK
)
649 /* If ICache is enabled, we have to invalidate affected ICache lines
650 * the DCache is forced to write-through, so we don't have to clean it here
652 if (arm926ejs
->armv4_5_mmu
.armv4_5_cache
.i_cache_enabled
)
656 /* invalidate ICache single entry with MVA */
657 arm926ejs
->write_cp15(target
, 0, 1, 7, 5, address
);
661 /* invalidate ICache */
662 arm926ejs
->write_cp15(target
, 0, 0, 7, 5, address
);
669 int arm926ejs_init_target(struct command_context_s
*cmd_ctx
, struct target_s
*target
)
671 arm9tdmi_init_target(cmd_ctx
, target
);
677 int arm926ejs_quit(void)
683 int arm926ejs_init_arch_info(target_t
*target
, arm926ejs_common_t
*arm926ejs
, int chain_pos
, char *variant
)
685 arm9tdmi_common_t
*arm9tdmi
= &arm926ejs
->arm9tdmi_common
;
686 arm7_9_common_t
*arm7_9
= &arm9tdmi
->arm7_9_common
;
688 /* initialize arm9tdmi specific info (including arm7_9 and armv4_5)
690 arm9tdmi_init_arch_info(target
, arm9tdmi
, chain_pos
, variant
);
692 arm9tdmi
->arch_info
= arm926ejs
;
693 arm926ejs
->common_magic
= ARM926EJS_COMMON_MAGIC
;
695 arm7_9
->post_debug_entry
= arm926ejs_post_debug_entry
;
696 arm7_9
->pre_restore_context
= arm926ejs_pre_restore_context
;
698 arm926ejs
->read_cp15
= arm926ejs_cp15_read
;
699 arm926ejs
->write_cp15
= arm926ejs_cp15_write
;
700 arm926ejs
->armv4_5_mmu
.armv4_5_cache
.ctype
= -1;
701 arm926ejs
->armv4_5_mmu
.get_ttb
= arm926ejs_get_ttb
;
702 arm926ejs
->armv4_5_mmu
.read_memory
= arm7_9_read_memory
;
703 arm926ejs
->armv4_5_mmu
.write_memory
= arm7_9_write_memory
;
704 arm926ejs
->armv4_5_mmu
.disable_mmu_caches
= arm926ejs_disable_mmu_caches
;
705 arm926ejs
->armv4_5_mmu
.enable_mmu_caches
= arm926ejs_enable_mmu_caches
;
706 arm926ejs
->armv4_5_mmu
.has_tiny_pages
= 1;
707 arm926ejs
->armv4_5_mmu
.mmu_enabled
= 0;
709 arm7_9
->examine_debug_reason
= arm926ejs_examine_debug_reason
;
711 /* The ARM926EJ-S implements the ARMv5TE architecture which
712 * has the BKPT instruction, so we don't have to use a watchpoint comparator
714 arm7_9
->arm_bkpt
= ARMV5_BKPT(0x0);
715 arm7_9
->thumb_bkpt
= ARMV5_T_BKPT(0x0) & 0xffff;
720 int arm926ejs_target_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
, struct target_s
*target
)
723 char *variant
= NULL
;
724 arm926ejs_common_t
*arm926ejs
= malloc(sizeof(arm926ejs_common_t
));
725 memset(arm926ejs
, 0, sizeof(*arm926ejs
));
729 LOG_ERROR("'target arm926ejs' requires at least one additional argument");
733 chain_pos
= strtoul(args
[3], NULL
, 0);
738 LOG_DEBUG("chain_pos: %i, variant: %s", chain_pos
, variant
);
740 arm926ejs_init_arch_info(target
, arm926ejs
, chain_pos
, variant
);
745 int arm926ejs_register_commands(struct command_context_s
*cmd_ctx
)
748 command_t
*arm926ejs_cmd
;
751 retval
= arm9tdmi_register_commands(cmd_ctx
);
753 arm926ejs_cmd
= register_command(cmd_ctx
, NULL
, "arm926ejs", NULL
, COMMAND_ANY
, "arm926ejs specific commands");
755 register_command(cmd_ctx
, arm926ejs_cmd
, "cp15", arm926ejs_handle_cp15_command
, COMMAND_EXEC
, "display/modify cp15 register <opcode_1> <opcode_2> <CRn> <CRm> [value]");
757 register_command(cmd_ctx
, arm926ejs_cmd
, "cache_info", arm926ejs_handle_cache_info_command
, COMMAND_EXEC
, "display information about target caches");
758 register_command(cmd_ctx
, arm926ejs_cmd
, "virt2phys", arm926ejs_handle_virt2phys_command
, COMMAND_EXEC
, "translate va to pa <va>");
760 register_command(cmd_ctx
, arm926ejs_cmd
, "mdw_phys", arm926ejs_handle_md_phys_command
, COMMAND_EXEC
, "display memory words <physical addr> [count]");
761 register_command(cmd_ctx
, arm926ejs_cmd
, "mdh_phys", arm926ejs_handle_md_phys_command
, COMMAND_EXEC
, "display memory half-words <physical addr> [count]");
762 register_command(cmd_ctx
, arm926ejs_cmd
, "mdb_phys", arm926ejs_handle_md_phys_command
, COMMAND_EXEC
, "display memory bytes <physical addr> [count]");
764 register_command(cmd_ctx
, arm926ejs_cmd
, "mww_phys", arm926ejs_handle_mw_phys_command
, COMMAND_EXEC
, "write memory word <physical addr> <value>");
765 register_command(cmd_ctx
, arm926ejs_cmd
, "mwh_phys", arm926ejs_handle_mw_phys_command
, COMMAND_EXEC
, "write memory half-word <physical addr> <value>");
766 register_command(cmd_ctx
, arm926ejs_cmd
, "mwb_phys", arm926ejs_handle_mw_phys_command
, COMMAND_EXEC
, "write memory byte <physical addr> <value>");
771 int arm926ejs_handle_cp15_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
)
774 target_t
*target
= get_current_target(cmd_ctx
);
775 armv4_5_common_t
*armv4_5
;
776 arm7_9_common_t
*arm7_9
;
777 arm9tdmi_common_t
*arm9tdmi
;
778 arm926ejs_common_t
*arm926ejs
;
784 if ((argc
< 4) || (argc
> 5))
786 command_print(cmd_ctx
, "usage: arm926ejs cp15 <opcode_1> <opcode_2> <CRn> <CRm> [value]");
790 opcode_1
= strtoul(args
[0], NULL
, 0);
791 opcode_2
= strtoul(args
[1], NULL
, 0);
792 CRn
= strtoul(args
[2], NULL
, 0);
793 CRm
= strtoul(args
[3], NULL
, 0);
795 if (arm926ejs_get_arch_pointers(target
, &armv4_5
, &arm7_9
, &arm9tdmi
, &arm926ejs
) != ERROR_OK
)
797 command_print(cmd_ctx
, "current target isn't an ARM926EJ-S target");
801 if (target
->state
!= TARGET_HALTED
)
803 command_print(cmd_ctx
, "target must be stopped for \"%s\" command", cmd
);
810 if ((retval
= arm926ejs
->read_cp15(target
, opcode_1
, opcode_2
, CRn
, CRm
, &value
)) != ERROR_OK
)
812 command_print(cmd_ctx
, "couldn't access register");
815 jtag_execute_queue();
817 command_print(cmd_ctx
, "%i %i %i %i: %8.8x", opcode_1
, opcode_2
, CRn
, CRm
, value
);
821 u32 value
= strtoul(args
[4], NULL
, 0);
822 if ((retval
= arm926ejs
->write_cp15(target
, opcode_1
, opcode_2
, CRn
, CRm
, value
)) != ERROR_OK
)
824 command_print(cmd_ctx
, "couldn't access register");
827 command_print(cmd_ctx
, "%i %i %i %i: %8.8x", opcode_1
, opcode_2
, CRn
, CRm
, value
);
833 int arm926ejs_handle_cache_info_command(struct command_context_s
*cmd_ctx
, char *cmd
, char **args
, int argc
)
835 target_t
*target
= get_current_target(cmd_ctx
);
836 armv4_5_common_t
*armv4_5
;
837 arm7_9_common_t
*arm7_9
;
838 arm9tdmi_common_t
*arm9tdmi
;
839 arm926ejs_common_t
*arm926ejs
;
841 if (arm926ejs_get_arch_pointers(target
, &armv4_5
, &arm7_9
, &arm9tdmi
, &arm926ejs
) != ERROR_OK
)
843 command_print(cmd_ctx
, "current target isn't an ARM926EJ-S target");
847 return armv4_5_handle_cache_info_command(cmd_ctx
, &arm926ejs
->armv4_5_mmu
.armv4_5_cache
);
850 int arm926ejs_handle_virt2phys_command(command_context_t
*cmd_ctx
, char *cmd
, char **args
, int argc
)
852 target_t
*target
= get_current_target(cmd_ctx
);
853 armv4_5_common_t
*armv4_5
;
854 arm7_9_common_t
*arm7_9
;
855 arm9tdmi_common_t
*arm9tdmi
;
856 arm926ejs_common_t
*arm926ejs
;
857 arm_jtag_t
*jtag_info
;
859 if (arm926ejs_get_arch_pointers(target
, &armv4_5
, &arm7_9
, &arm9tdmi
, &arm926ejs
) != ERROR_OK
)
861 command_print(cmd_ctx
, "current target isn't an ARM926EJ-S target");
865 jtag_info
= &arm7_9
->jtag_info
;
867 if (target
->state
!= TARGET_HALTED
)
869 command_print(cmd_ctx
, "target must be stopped for \"%s\" command", cmd
);
873 return armv4_5_mmu_handle_virt2phys_command(cmd_ctx
, cmd
, args
, argc
, target
, &arm926ejs
->armv4_5_mmu
);
876 int arm926ejs_handle_md_phys_command(command_context_t
*cmd_ctx
, char *cmd
, char **args
, int argc
)
878 target_t
*target
= get_current_target(cmd_ctx
);
879 armv4_5_common_t
*armv4_5
;
880 arm7_9_common_t
*arm7_9
;
881 arm9tdmi_common_t
*arm9tdmi
;
882 arm926ejs_common_t
*arm926ejs
;
883 arm_jtag_t
*jtag_info
;
885 if (arm926ejs_get_arch_pointers(target
, &armv4_5
, &arm7_9
, &arm9tdmi
, &arm926ejs
) != ERROR_OK
)
887 command_print(cmd_ctx
, "current target isn't an ARM926EJ-S target");
891 jtag_info
= &arm7_9
->jtag_info
;
893 if (target
->state
!= TARGET_HALTED
)
895 command_print(cmd_ctx
, "target must be stopped for \"%s\" command", cmd
);
899 return armv4_5_mmu_handle_md_phys_command(cmd_ctx
, cmd
, args
, argc
, target
, &arm926ejs
->armv4_5_mmu
);
902 int arm926ejs_handle_mw_phys_command(command_context_t
*cmd_ctx
, char *cmd
, char **args
, int argc
)
904 target_t
*target
= get_current_target(cmd_ctx
);
905 armv4_5_common_t
*armv4_5
;
906 arm7_9_common_t
*arm7_9
;
907 arm9tdmi_common_t
*arm9tdmi
;
908 arm926ejs_common_t
*arm926ejs
;
909 arm_jtag_t
*jtag_info
;
911 if (arm926ejs_get_arch_pointers(target
, &armv4_5
, &arm7_9
, &arm9tdmi
, &arm926ejs
) != ERROR_OK
)
913 command_print(cmd_ctx
, "current target isn't an ARM926EJ-S target");
917 jtag_info
= &arm7_9
->jtag_info
;
919 if (target
->state
!= TARGET_HALTED
)
921 command_print(cmd_ctx
, "target must be stopped for \"%s\" command", cmd
);
925 return armv4_5_mmu_handle_mw_phys_command(cmd_ctx
, cmd
, args
, argc
, target
, &arm926ejs
->armv4_5_mmu
);
927 static int arm926ejs_virt2phys(struct target_s
*target
, u32
virtual, u32
*physical
)
935 armv4_5_common_t
*armv4_5
;
936 arm7_9_common_t
*arm7_9
;
937 arm9tdmi_common_t
*arm9tdmi
;
938 arm926ejs_common_t
*arm926ejs
;
939 retval
= arm926ejs_get_arch_pointers(target
, &armv4_5
, &arm7_9
, &arm9tdmi
, &arm926ejs
);
940 if (retval
!= ERROR_OK
)
944 u32 ret
= armv4_5_mmu_translate_va(target
, &arm926ejs
->armv4_5_mmu
, virtual, &type
, &cb
, &domain
, &ap
);
953 static int arm926ejs_mmu(struct target_s
*target
, int *enabled
)
955 armv4_5_common_t
*armv4_5
= target
->arch_info
;
956 arm926ejs_common_t
*arm926ejs
= armv4_5
->arch_info
;
958 if (target
->state
!= TARGET_HALTED
)
960 LOG_ERROR("Target not halted");
961 return ERROR_TARGET_INVALID
;
963 *enabled
= arm926ejs
->armv4_5_mmu
.mmu_enabled
;
Linking to existing account procedure
If you already have an account and want to add another login method
you
MUST first sign in with your existing account and
then change URL to read
https://review.openocd.org/login/?link
to get to this page again but this time it'll work for linking. Thank you.
SSH host keys fingerprints
1024 SHA256:YKx8b7u5ZWdcbp7/4AeXNaqElP49m6QrwfXaqQGJAOk gerrit-code-review@openocd.zylin.com (DSA)
384 SHA256:jHIbSQa4REvwCFG4cq5LBlBLxmxSqelQPem/EXIrxjk gerrit-code-review@openocd.org (ECDSA)
521 SHA256:UAOPYkU9Fjtcao0Ul/Rrlnj/OsQvt+pgdYSZ4jOYdgs gerrit-code-review@openocd.org (ECDSA)
256 SHA256:A13M5QlnozFOvTllybRZH6vm7iSt0XLxbA48yfc2yfY gerrit-code-review@openocd.org (ECDSA)
256 SHA256:spYMBqEYoAOtK7yZBrcwE8ZpYt6b68Cfh9yEVetvbXg gerrit-code-review@openocd.org (ED25519)
+--[ED25519 256]--+
|=.. |
|+o.. . |
|*.o . . |
|+B . . . |
|Bo. = o S |
|Oo.+ + = |
|oB=.* = . o |
| =+=.+ + E |
|. .=o . o |
+----[SHA256]-----+
2048 SHA256:0Onrb7/PHjpo6iVZ7xQX2riKN83FJ3KGU0TvI0TaFG4 gerrit-code-review@openocd.zylin.com (RSA)