2ddb6b5f8e35384e94406563717e0fab95b28b04
[openocd.git] / src / target / arm_adi_v5.c
1 /***************************************************************************
2 * Copyright (C) 2006 by Magnus Lundin *
3 * lundin@mlu.mine.nu *
4 * *
5 * Copyright (C) 2008 by Spencer Oliver *
6 * spen@spen-soft.co.uk *
7 * *
8 * Copyright (C) 2009-2010 by Oyvind Harboe *
9 * oyvind.harboe@zylin.com *
10 * *
11 * Copyright (C) 2009-2010 by David Brownell *
12 * *
13 * Copyright (C) 2013 by Andreas Fritiofson *
14 * andreas.fritiofson@gmail.com *
15 * *
16 * This program is free software; you can redistribute it and/or modify *
17 * it under the terms of the GNU General Public License as published by *
18 * the Free Software Foundation; either version 2 of the License, or *
19 * (at your option) any later version. *
20 * *
21 * This program is distributed in the hope that it will be useful, *
22 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
23 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
24 * GNU General Public License for more details. *
25 * *
26 * You should have received a copy of the GNU General Public License *
27 * along with this program; if not, write to the *
28 * Free Software Foundation, Inc., *
29 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. *
30 ***************************************************************************/
31
32 /**
33 * @file
34 * This file implements support for the ARM Debug Interface version 5 (ADIv5)
35 * debugging architecture. Compared with previous versions, this includes
36 * a low pin-count Serial Wire Debug (SWD) alternative to JTAG for message
37 * transport, and focusses on memory mapped resources as defined by the
38 * CoreSight architecture.
39 *
40 * A key concept in ADIv5 is the Debug Access Port, or DAP. A DAP has two
41 * basic components: a Debug Port (DP) transporting messages to and from a
42 * debugger, and an Access Port (AP) accessing resources. Three types of DP
43 * are defined. One uses only JTAG for communication, and is called JTAG-DP.
44 * One uses only SWD for communication, and is called SW-DP. The third can
45 * use either SWD or JTAG, and is called SWJ-DP. The most common type of AP
46 * is used to access memory mapped resources and is called a MEM-AP. Also a
47 * JTAG-AP is also defined, bridging to JTAG resources; those are uncommon.
48 *
49 * This programming interface allows DAP pipelined operations through a
50 * transaction queue. This primarily affects AP operations (such as using
51 * a MEM-AP to access memory or registers). If the current transaction has
52 * not finished by the time the next one must begin, and the ORUNDETECT bit
53 * is set in the DP_CTRL_STAT register, the SSTICKYORUN status is set and
54 * further AP operations will fail. There are two basic methods to avoid
55 * such overrun errors. One involves polling for status instead of using
56 * transaction piplining. The other involves adding delays to ensure the
57 * AP has enough time to complete one operation before starting the next
58 * one. (For JTAG these delays are controlled by memaccess_tck.)
59 */
60
61 /*
62 * Relevant specifications from ARM include:
63 *
64 * ARM(tm) Debug Interface v5 Architecture Specification ARM IHI 0031A
65 * CoreSight(tm) v1.0 Architecture Specification ARM IHI 0029B
66 *
67 * CoreSight(tm) DAP-Lite TRM, ARM DDI 0316D
68 * Cortex-M3(tm) TRM, ARM DDI 0337G
69 */
70
71 #ifdef HAVE_CONFIG_H
72 #include "config.h"
73 #endif
74
75 #include "jtag/interface.h"
76 #include "arm.h"
77 #include "arm_adi_v5.h"
78 #include <helper/time_support.h>
79
80 /* ARM ADI Specification requires at least 10 bits used for TAR autoincrement */
81
82 /*
83 uint32_t tar_block_size(uint32_t address)
84 Return the largest block starting at address that does not cross a tar block size alignment boundary
85 */
86 static uint32_t max_tar_block_size(uint32_t tar_autoincr_block, uint32_t address)
87 {
88 return tar_autoincr_block - ((tar_autoincr_block - 1) & address);
89 }
90
91 /***************************************************************************
92 * *
93 * DP and MEM-AP register access through APACC and DPACC *
94 * *
95 ***************************************************************************/
96
97 /**
98 * Select one of the APs connected to the specified DAP. The
99 * selection is implicitly used with future AP transactions.
100 * This is a NOP if the specified AP is already selected.
101 *
102 * @param dap The DAP
103 * @param apsel Number of the AP to (implicitly) use with further
104 * transactions. This normally identifies a MEM-AP.
105 */
106 void dap_ap_select(struct adiv5_dap *dap, uint8_t ap)
107 {
108 uint32_t new_ap = (ap << 24) & 0xFF000000;
109
110 if (new_ap != dap->ap_current) {
111 dap->ap_current = new_ap;
112 /* Switching AP invalidates cached values.
113 * Values MUST BE UPDATED BEFORE AP ACCESS.
114 */
115 dap->ap_bank_value = -1;
116 }
117 }
118
119 static int mem_ap_setup_csw(struct adiv5_ap *ap, uint32_t csw)
120 {
121 csw = csw | CSW_DBGSWENABLE | CSW_MASTER_DEBUG | CSW_HPROT |
122 ap->csw_default;
123
124 if (csw != ap->csw_value) {
125 /* LOG_DEBUG("DAP: Set CSW %x",csw); */
126 int retval = dap_queue_ap_write(ap->dap, MEM_AP_REG_CSW, csw);
127 if (retval != ERROR_OK)
128 return retval;
129 ap->csw_value = csw;
130 }
131 return ERROR_OK;
132 }
133
134 static int mem_ap_setup_tar(struct adiv5_ap *ap, uint32_t tar)
135 {
136 if (tar != ap->tar_value ||
137 (ap->csw_value & CSW_ADDRINC_MASK)) {
138 /* LOG_DEBUG("DAP: Set TAR %x",tar); */
139 int retval = dap_queue_ap_write(ap->dap, MEM_AP_REG_TAR, tar);
140 if (retval != ERROR_OK)
141 return retval;
142 ap->tar_value = tar;
143 }
144 return ERROR_OK;
145 }
146
147 /**
148 * Queue transactions setting up transfer parameters for the
149 * currently selected MEM-AP.
150 *
151 * Subsequent transfers using registers like MEM_AP_REG_DRW or MEM_AP_REG_BD2
152 * initiate data reads or writes using memory or peripheral addresses.
153 * If the CSW is configured for it, the TAR may be automatically
154 * incremented after each transfer.
155 *
156 * @param ap The MEM-AP.
157 * @param csw MEM-AP Control/Status Word (CSW) register to assign. If this
158 * matches the cached value, the register is not changed.
159 * @param tar MEM-AP Transfer Address Register (TAR) to assign. If this
160 * matches the cached address, the register is not changed.
161 *
162 * @return ERROR_OK if the transaction was properly queued, else a fault code.
163 */
164 static int mem_ap_setup_transfer(struct adiv5_ap *ap, uint32_t csw, uint32_t tar)
165 {
166 int retval;
167 retval = mem_ap_setup_csw(ap, csw);
168 if (retval != ERROR_OK)
169 return retval;
170 retval = mem_ap_setup_tar(ap, tar);
171 if (retval != ERROR_OK)
172 return retval;
173 return ERROR_OK;
174 }
175
176 /**
177 * Asynchronous (queued) read of a word from memory or a system register.
178 *
179 * @param ap The MEM-AP to access.
180 * @param address Address of the 32-bit word to read; it must be
181 * readable by the currently selected MEM-AP.
182 * @param value points to where the word will be stored when the
183 * transaction queue is flushed (assuming no errors).
184 *
185 * @return ERROR_OK for success. Otherwise a fault code.
186 */
187 int mem_ap_read_u32(struct adiv5_ap *ap, uint32_t address,
188 uint32_t *value)
189 {
190 int retval;
191
192 dap_ap_select(ap->dap, ap->ap_num);
193
194 /* Use banked addressing (REG_BDx) to avoid some link traffic
195 * (updating TAR) when reading several consecutive addresses.
196 */
197 retval = mem_ap_setup_transfer(ap, CSW_32BIT | CSW_ADDRINC_OFF,
198 address & 0xFFFFFFF0);
199 if (retval != ERROR_OK)
200 return retval;
201
202 return dap_queue_ap_read(ap->dap, MEM_AP_REG_BD0 | (address & 0xC), value);
203 }
204
205 /**
206 * Synchronous read of a word from memory or a system register.
207 * As a side effect, this flushes any queued transactions.
208 *
209 * @param ap The MEM-AP to access.
210 * @param address Address of the 32-bit word to read; it must be
211 * readable by the currently selected MEM-AP.
212 * @param value points to where the result will be stored.
213 *
214 * @return ERROR_OK for success; *value holds the result.
215 * Otherwise a fault code.
216 */
217 int mem_ap_read_atomic_u32(struct adiv5_ap *ap, uint32_t address,
218 uint32_t *value)
219 {
220 int retval;
221
222 retval = mem_ap_read_u32(ap, address, value);
223 if (retval != ERROR_OK)
224 return retval;
225
226 return dap_run(ap->dap);
227 }
228
229 /**
230 * Asynchronous (queued) write of a word to memory or a system register.
231 *
232 * @param ap The MEM-AP to access.
233 * @param address Address to be written; it must be writable by
234 * the currently selected MEM-AP.
235 * @param value Word that will be written to the address when transaction
236 * queue is flushed (assuming no errors).
237 *
238 * @return ERROR_OK for success. Otherwise a fault code.
239 */
240 int mem_ap_write_u32(struct adiv5_ap *ap, uint32_t address,
241 uint32_t value)
242 {
243 int retval;
244
245 dap_ap_select(ap->dap, ap->ap_num);
246
247 /* Use banked addressing (REG_BDx) to avoid some link traffic
248 * (updating TAR) when writing several consecutive addresses.
249 */
250 retval = mem_ap_setup_transfer(ap, CSW_32BIT | CSW_ADDRINC_OFF,
251 address & 0xFFFFFFF0);
252 if (retval != ERROR_OK)
253 return retval;
254
255 return dap_queue_ap_write(ap->dap, MEM_AP_REG_BD0 | (address & 0xC),
256 value);
257 }
258
259 /**
260 * Synchronous write of a word to memory or a system register.
261 * As a side effect, this flushes any queued transactions.
262 *
263 * @param ap The MEM-AP to access.
264 * @param address Address to be written; it must be writable by
265 * the currently selected MEM-AP.
266 * @param value Word that will be written.
267 *
268 * @return ERROR_OK for success; the data was written. Otherwise a fault code.
269 */
270 int mem_ap_write_atomic_u32(struct adiv5_ap *ap, uint32_t address,
271 uint32_t value)
272 {
273 int retval = mem_ap_write_u32(ap, address, value);
274
275 if (retval != ERROR_OK)
276 return retval;
277
278 return dap_run(ap->dap);
279 }
280
281 /**
282 * Synchronous write of a block of memory, using a specific access size.
283 *
284 * @param ap The MEM-AP to access.
285 * @param buffer The data buffer to write. No particular alignment is assumed.
286 * @param size Which access size to use, in bytes. 1, 2 or 4.
287 * @param count The number of writes to do (in size units, not bytes).
288 * @param address Address to be written; it must be writable by the currently selected MEM-AP.
289 * @param addrinc Whether the target address should be increased for each write or not. This
290 * should normally be true, except when writing to e.g. a FIFO.
291 * @return ERROR_OK on success, otherwise an error code.
292 */
293 static int mem_ap_write(struct adiv5_ap *ap, const uint8_t *buffer, uint32_t size, uint32_t count,
294 uint32_t address, bool addrinc)
295 {
296 struct adiv5_dap *dap = ap->dap;
297 size_t nbytes = size * count;
298 const uint32_t csw_addrincr = addrinc ? CSW_ADDRINC_SINGLE : CSW_ADDRINC_OFF;
299 uint32_t csw_size;
300 uint32_t addr_xor;
301 int retval;
302
303 /* TI BE-32 Quirks mode:
304 * Writes on big-endian TMS570 behave very strangely. Observed behavior:
305 * size write address bytes written in order
306 * 4 TAR ^ 0 (val >> 24), (val >> 16), (val >> 8), (val)
307 * 2 TAR ^ 2 (val >> 8), (val)
308 * 1 TAR ^ 3 (val)
309 * For example, if you attempt to write a single byte to address 0, the processor
310 * will actually write a byte to address 3.
311 *
312 * To make writes of size < 4 work as expected, we xor a value with the address before
313 * setting the TAP, and we set the TAP after every transfer rather then relying on
314 * address increment. */
315
316 if (size == 4) {
317 csw_size = CSW_32BIT;
318 addr_xor = 0;
319 } else if (size == 2) {
320 csw_size = CSW_16BIT;
321 addr_xor = dap->ti_be_32_quirks ? 2 : 0;
322 } else if (size == 1) {
323 csw_size = CSW_8BIT;
324 addr_xor = dap->ti_be_32_quirks ? 3 : 0;
325 } else {
326 return ERROR_TARGET_UNALIGNED_ACCESS;
327 }
328
329 if (ap->unaligned_access_bad && (address % size != 0))
330 return ERROR_TARGET_UNALIGNED_ACCESS;
331
332 dap_ap_select(ap->dap, ap->ap_num);
333
334 retval = mem_ap_setup_tar(ap, address ^ addr_xor);
335 if (retval != ERROR_OK)
336 return retval;
337
338 while (nbytes > 0) {
339 uint32_t this_size = size;
340
341 /* Select packed transfer if possible */
342 if (addrinc && ap->packed_transfers && nbytes >= 4
343 && max_tar_block_size(ap->tar_autoincr_block, address) >= 4) {
344 this_size = 4;
345 retval = mem_ap_setup_csw(ap, csw_size | CSW_ADDRINC_PACKED);
346 } else {
347 retval = mem_ap_setup_csw(ap, csw_size | csw_addrincr);
348 }
349
350 if (retval != ERROR_OK)
351 break;
352
353 /* How many source bytes each transfer will consume, and their location in the DRW,
354 * depends on the type of transfer and alignment. See ARM document IHI0031C. */
355 uint32_t outvalue = 0;
356 if (dap->ti_be_32_quirks) {
357 switch (this_size) {
358 case 4:
359 outvalue |= (uint32_t)*buffer++ << 8 * (3 ^ (address++ & 3) ^ addr_xor);
360 outvalue |= (uint32_t)*buffer++ << 8 * (3 ^ (address++ & 3) ^ addr_xor);
361 outvalue |= (uint32_t)*buffer++ << 8 * (3 ^ (address++ & 3) ^ addr_xor);
362 outvalue |= (uint32_t)*buffer++ << 8 * (3 ^ (address++ & 3) ^ addr_xor);
363 break;
364 case 2:
365 outvalue |= (uint32_t)*buffer++ << 8 * (1 ^ (address++ & 3) ^ addr_xor);
366 outvalue |= (uint32_t)*buffer++ << 8 * (1 ^ (address++ & 3) ^ addr_xor);
367 break;
368 case 1:
369 outvalue |= (uint32_t)*buffer++ << 8 * (0 ^ (address++ & 3) ^ addr_xor);
370 break;
371 }
372 } else {
373 switch (this_size) {
374 case 4:
375 outvalue |= (uint32_t)*buffer++ << 8 * (address++ & 3);
376 outvalue |= (uint32_t)*buffer++ << 8 * (address++ & 3);
377 case 2:
378 outvalue |= (uint32_t)*buffer++ << 8 * (address++ & 3);
379 case 1:
380 outvalue |= (uint32_t)*buffer++ << 8 * (address++ & 3);
381 }
382 }
383
384 nbytes -= this_size;
385
386 retval = dap_queue_ap_write(dap, MEM_AP_REG_DRW, outvalue);
387 if (retval != ERROR_OK)
388 break;
389
390 /* Rewrite TAR if it wrapped or we're xoring addresses */
391 if (addrinc && (addr_xor || (address % ap->tar_autoincr_block < size && nbytes > 0))) {
392 retval = mem_ap_setup_tar(ap, address ^ addr_xor);
393 if (retval != ERROR_OK)
394 break;
395 }
396 }
397
398 /* REVISIT: Might want to have a queued version of this function that does not run. */
399 if (retval == ERROR_OK)
400 retval = dap_run(dap);
401
402 if (retval != ERROR_OK) {
403 uint32_t tar;
404 if (dap_queue_ap_read(dap, MEM_AP_REG_TAR, &tar) == ERROR_OK
405 && dap_run(dap) == ERROR_OK)
406 LOG_ERROR("Failed to write memory at 0x%08"PRIx32, tar);
407 else
408 LOG_ERROR("Failed to write memory and, additionally, failed to find out where");
409 }
410
411 return retval;
412 }
413
414 /**
415 * Synchronous read of a block of memory, using a specific access size.
416 *
417 * @param ap The MEM-AP to access.
418 * @param buffer The data buffer to receive the data. No particular alignment is assumed.
419 * @param size Which access size to use, in bytes. 1, 2 or 4.
420 * @param count The number of reads to do (in size units, not bytes).
421 * @param address Address to be read; it must be readable by the currently selected MEM-AP.
422 * @param addrinc Whether the target address should be increased after each read or not. This
423 * should normally be true, except when reading from e.g. a FIFO.
424 * @return ERROR_OK on success, otherwise an error code.
425 */
426 static int mem_ap_read(struct adiv5_ap *ap, uint8_t *buffer, uint32_t size, uint32_t count,
427 uint32_t adr, bool addrinc)
428 {
429 struct adiv5_dap *dap = ap->dap;
430 size_t nbytes = size * count;
431 const uint32_t csw_addrincr = addrinc ? CSW_ADDRINC_SINGLE : CSW_ADDRINC_OFF;
432 uint32_t csw_size;
433 uint32_t address = adr;
434 int retval;
435
436 /* TI BE-32 Quirks mode:
437 * Reads on big-endian TMS570 behave strangely differently than writes.
438 * They read from the physical address requested, but with DRW byte-reversed.
439 * For example, a byte read from address 0 will place the result in the high bytes of DRW.
440 * Also, packed 8-bit and 16-bit transfers seem to sometimes return garbage in some bytes,
441 * so avoid them. */
442
443 if (size == 4)
444 csw_size = CSW_32BIT;
445 else if (size == 2)
446 csw_size = CSW_16BIT;
447 else if (size == 1)
448 csw_size = CSW_8BIT;
449 else
450 return ERROR_TARGET_UNALIGNED_ACCESS;
451
452 if (ap->unaligned_access_bad && (adr % size != 0))
453 return ERROR_TARGET_UNALIGNED_ACCESS;
454
455 /* Allocate buffer to hold the sequence of DRW reads that will be made. This is a significant
456 * over-allocation if packed transfers are going to be used, but determining the real need at
457 * this point would be messy. */
458 uint32_t *read_buf = malloc(count * sizeof(uint32_t));
459 uint32_t *read_ptr = read_buf;
460 if (read_buf == NULL) {
461 LOG_ERROR("Failed to allocate read buffer");
462 return ERROR_FAIL;
463 }
464
465 dap_ap_select(ap->dap, ap->ap_num);
466
467 retval = mem_ap_setup_tar(ap, address);
468 if (retval != ERROR_OK) {
469 free(read_buf);
470 return retval;
471 }
472
473 /* Queue up all reads. Each read will store the entire DRW word in the read buffer. How many
474 * useful bytes it contains, and their location in the word, depends on the type of transfer
475 * and alignment. */
476 while (nbytes > 0) {
477 uint32_t this_size = size;
478
479 /* Select packed transfer if possible */
480 if (addrinc && ap->packed_transfers && nbytes >= 4
481 && max_tar_block_size(ap->tar_autoincr_block, address) >= 4) {
482 this_size = 4;
483 retval = mem_ap_setup_csw(ap, csw_size | CSW_ADDRINC_PACKED);
484 } else {
485 retval = mem_ap_setup_csw(ap, csw_size | csw_addrincr);
486 }
487 if (retval != ERROR_OK)
488 break;
489
490 retval = dap_queue_ap_read(dap, MEM_AP_REG_DRW, read_ptr++);
491 if (retval != ERROR_OK)
492 break;
493
494 nbytes -= this_size;
495 address += this_size;
496
497 /* Rewrite TAR if it wrapped */
498 if (addrinc && address % ap->tar_autoincr_block < size && nbytes > 0) {
499 retval = mem_ap_setup_tar(ap, address);
500 if (retval != ERROR_OK)
501 break;
502 }
503 }
504
505 if (retval == ERROR_OK)
506 retval = dap_run(dap);
507
508 /* Restore state */
509 address = adr;
510 nbytes = size * count;
511 read_ptr = read_buf;
512
513 /* If something failed, read TAR to find out how much data was successfully read, so we can
514 * at least give the caller what we have. */
515 if (retval != ERROR_OK) {
516 uint32_t tar;
517 if (dap_queue_ap_read(dap, MEM_AP_REG_TAR, &tar) == ERROR_OK
518 && dap_run(dap) == ERROR_OK) {
519 LOG_ERROR("Failed to read memory at 0x%08"PRIx32, tar);
520 if (nbytes > tar - address)
521 nbytes = tar - address;
522 } else {
523 LOG_ERROR("Failed to read memory and, additionally, failed to find out where");
524 nbytes = 0;
525 }
526 }
527
528 /* Replay loop to populate caller's buffer from the correct word and byte lane */
529 while (nbytes > 0) {
530 uint32_t this_size = size;
531
532 if (addrinc && ap->packed_transfers && nbytes >= 4
533 && max_tar_block_size(ap->tar_autoincr_block, address) >= 4) {
534 this_size = 4;
535 }
536
537 if (dap->ti_be_32_quirks) {
538 switch (this_size) {
539 case 4:
540 *buffer++ = *read_ptr >> 8 * (3 - (address++ & 3));
541 *buffer++ = *read_ptr >> 8 * (3 - (address++ & 3));
542 case 2:
543 *buffer++ = *read_ptr >> 8 * (3 - (address++ & 3));
544 case 1:
545 *buffer++ = *read_ptr >> 8 * (3 - (address++ & 3));
546 }
547 } else {
548 switch (this_size) {
549 case 4:
550 *buffer++ = *read_ptr >> 8 * (address++ & 3);
551 *buffer++ = *read_ptr >> 8 * (address++ & 3);
552 case 2:
553 *buffer++ = *read_ptr >> 8 * (address++ & 3);
554 case 1:
555 *buffer++ = *read_ptr >> 8 * (address++ & 3);
556 }
557 }
558
559 read_ptr++;
560 nbytes -= this_size;
561 }
562
563 free(read_buf);
564 return retval;
565 }
566
567 int mem_ap_read_buf(struct adiv5_ap *ap,
568 uint8_t *buffer, uint32_t size, uint32_t count, uint32_t address)
569 {
570 return mem_ap_read(ap, buffer, size, count, address, true);
571 }
572
573 int mem_ap_write_buf(struct adiv5_ap *ap,
574 const uint8_t *buffer, uint32_t size, uint32_t count, uint32_t address)
575 {
576 return mem_ap_write(ap, buffer, size, count, address, true);
577 }
578
579 int mem_ap_read_buf_noincr(struct adiv5_ap *ap,
580 uint8_t *buffer, uint32_t size, uint32_t count, uint32_t address)
581 {
582 return mem_ap_read(ap, buffer, size, count, address, false);
583 }
584
585 int mem_ap_write_buf_noincr(struct adiv5_ap *ap,
586 const uint8_t *buffer, uint32_t size, uint32_t count, uint32_t address)
587 {
588 return mem_ap_write(ap, buffer, size, count, address, false);
589 }
590
591 /*--------------------------------------------------------------------------*/
592
593
594 #define DAP_POWER_DOMAIN_TIMEOUT (10)
595
596 /* FIXME don't import ... just initialize as
597 * part of DAP transport setup
598 */
599 extern const struct dap_ops jtag_dp_ops;
600
601 /*--------------------------------------------------------------------------*/
602
603 /**
604 * Create a new DAP
605 */
606 struct adiv5_dap *dap_init(void)
607 {
608 struct adiv5_dap *dap = calloc(1, sizeof(struct adiv5_dap));
609 int i;
610 /* Set up with safe defaults */
611 for (i = 0; i <= 255; i++) {
612 dap->ap[i].dap = dap;
613 dap->ap[i].ap_num = i;
614 /* memaccess_tck max is 255 */
615 dap->ap[i].memaccess_tck = 255;
616 /* Number of bits for tar autoincrement, impl. dep. at least 10 */
617 dap->ap[i].tar_autoincr_block = (1<<10);
618 }
619 dap->ap_current = -1;
620 dap->ap_bank_value = -1;
621 dap->dp_bank_value = -1;
622 return dap;
623 }
624
625 /**
626 * Initialize a DAP. This sets up the power domains, prepares the DP
627 * for further use and activates overrun checking.
628 *
629 * @param dap The DAP being initialized.
630 */
631 int dap_dp_init(struct adiv5_dap *dap)
632 {
633 int retval;
634
635 LOG_DEBUG(" ");
636 /* JTAG-DP or SWJ-DP, in JTAG mode
637 * ... for SWD mode this is patched as part
638 * of link switchover
639 * FIXME: This should already be setup by the respective transport specific DAP creation.
640 */
641 if (!dap->ops)
642 dap->ops = &jtag_dp_ops;
643
644 dap->ap_current = -1;
645 dap->ap_bank_value = -1;
646 dap->last_read = NULL;
647
648 for (size_t i = 0; i < 10; i++) {
649 /* DP initialization */
650
651 dap->dp_bank_value = 0;
652
653 retval = dap_queue_dp_read(dap, DP_CTRL_STAT, NULL);
654 if (retval != ERROR_OK)
655 continue;
656
657 retval = dap_queue_dp_write(dap, DP_CTRL_STAT, SSTICKYERR);
658 if (retval != ERROR_OK)
659 continue;
660
661 retval = dap_queue_dp_read(dap, DP_CTRL_STAT, NULL);
662 if (retval != ERROR_OK)
663 continue;
664
665 dap->dp_ctrl_stat = CDBGPWRUPREQ | CSYSPWRUPREQ;
666 retval = dap_queue_dp_write(dap, DP_CTRL_STAT, dap->dp_ctrl_stat);
667 if (retval != ERROR_OK)
668 continue;
669
670 /* Check that we have debug power domains activated */
671 LOG_DEBUG("DAP: wait CDBGPWRUPACK");
672 retval = dap_dp_poll_register(dap, DP_CTRL_STAT,
673 CDBGPWRUPACK, CDBGPWRUPACK,
674 DAP_POWER_DOMAIN_TIMEOUT);
675 if (retval != ERROR_OK)
676 continue;
677
678 LOG_DEBUG("DAP: wait CSYSPWRUPACK");
679 retval = dap_dp_poll_register(dap, DP_CTRL_STAT,
680 CSYSPWRUPACK, CSYSPWRUPACK,
681 DAP_POWER_DOMAIN_TIMEOUT);
682 if (retval != ERROR_OK)
683 continue;
684
685 retval = dap_queue_dp_read(dap, DP_CTRL_STAT, NULL);
686 if (retval != ERROR_OK)
687 continue;
688
689 /* With debug power on we can activate OVERRUN checking */
690 dap->dp_ctrl_stat = CDBGPWRUPREQ | CSYSPWRUPREQ | CORUNDETECT;
691 retval = dap_queue_dp_write(dap, DP_CTRL_STAT, dap->dp_ctrl_stat);
692 if (retval != ERROR_OK)
693 continue;
694 retval = dap_queue_dp_read(dap, DP_CTRL_STAT, NULL);
695 if (retval != ERROR_OK)
696 continue;
697
698 retval = dap_run(dap);
699 if (retval != ERROR_OK)
700 continue;
701
702 break;
703 }
704
705 return retval;
706 }
707
708 /**
709 * Initialize a DAP. This sets up the power domains, prepares the DP
710 * for further use, and arranges to use AP #0 for all AP operations
711 * until dap_ap-select() changes that policy.
712 *
713 * @param ap The MEM-AP being initialized.
714 */
715 int mem_ap_init(struct adiv5_ap *ap)
716 {
717 /* check that we support packed transfers */
718 uint32_t csw, cfg;
719 int retval;
720 struct adiv5_dap *dap = ap->dap;
721
722 dap_ap_select(dap, ap->ap_num);
723
724 retval = mem_ap_setup_transfer(ap, CSW_8BIT | CSW_ADDRINC_PACKED, 0);
725 if (retval != ERROR_OK)
726 return retval;
727
728 retval = dap_queue_ap_read(dap, MEM_AP_REG_CSW, &csw);
729 if (retval != ERROR_OK)
730 return retval;
731
732 retval = dap_queue_ap_read(dap, MEM_AP_REG_CFG, &cfg);
733 if (retval != ERROR_OK)
734 return retval;
735
736 retval = dap_run(dap);
737 if (retval != ERROR_OK)
738 return retval;
739
740 if (csw & CSW_ADDRINC_PACKED)
741 ap->packed_transfers = true;
742 else
743 ap->packed_transfers = false;
744
745 /* Packed transfers on TI BE-32 processors do not work correctly in
746 * many cases. */
747 if (dap->ti_be_32_quirks)
748 ap->packed_transfers = false;
749
750 LOG_DEBUG("MEM_AP Packed Transfers: %s",
751 ap->packed_transfers ? "enabled" : "disabled");
752
753 /* The ARM ADI spec leaves implementation-defined whether unaligned
754 * memory accesses work, only work partially, or cause a sticky error.
755 * On TI BE-32 processors, reads seem to return garbage in some bytes
756 * and unaligned writes seem to cause a sticky error.
757 * TODO: it would be nice to have a way to detect whether unaligned
758 * operations are supported on other processors. */
759 ap->unaligned_access_bad = dap->ti_be_32_quirks;
760
761 LOG_DEBUG("MEM_AP CFG: large data %d, long address %d, big-endian %d",
762 !!(cfg & 0x04), !!(cfg & 0x02), !!(cfg & 0x01));
763
764 return ERROR_OK;
765 }
766
767 /* CID interpretation -- see ARM IHI 0029B section 3
768 * and ARM IHI 0031A table 13-3.
769 */
770 static const char *class_description[16] = {
771 "Reserved", "ROM table", "Reserved", "Reserved",
772 "Reserved", "Reserved", "Reserved", "Reserved",
773 "Reserved", "CoreSight component", "Reserved", "Peripheral Test Block",
774 "Reserved", "OptimoDE DESS",
775 "Generic IP component", "PrimeCell or System component"
776 };
777
778 static bool is_dap_cid_ok(uint32_t cid3, uint32_t cid2, uint32_t cid1, uint32_t cid0)
779 {
780 return cid3 == 0xb1 && cid2 == 0x05
781 && ((cid1 & 0x0f) == 0) && cid0 == 0x0d;
782 }
783
784 /*
785 * This function checks the ID for each access port to find the requested Access Port type
786 */
787 int dap_find_ap(struct adiv5_dap *dap, enum ap_type type_to_find, struct adiv5_ap **ap_out)
788 {
789 int ap_num;
790
791 /* Maximum AP number is 255 since the SELECT register is 8 bits */
792 for (ap_num = 0; ap_num <= 255; ap_num++) {
793
794 /* read the IDR register of the Access Port */
795 uint32_t id_val = 0;
796 dap_ap_select(dap, ap_num);
797
798 int retval = dap_queue_ap_read(dap, AP_REG_IDR, &id_val);
799 if (retval != ERROR_OK)
800 return retval;
801
802 retval = dap_run(dap);
803
804 /* IDR bits:
805 * 31-28 : Revision
806 * 27-24 : JEDEC bank (0x4 for ARM)
807 * 23-17 : JEDEC code (0x3B for ARM)
808 * 16-13 : Class (0b1000=Mem-AP)
809 * 12-8 : Reserved
810 * 7-4 : AP Variant (non-zero for JTAG-AP)
811 * 3-0 : AP Type (0=JTAG-AP 1=AHB-AP 2=APB-AP 4=AXI-AP)
812 */
813
814 /* Reading register for a non-existant AP should not cause an error,
815 * but just to be sure, try to continue searching if an error does happen.
816 */
817 if ((retval == ERROR_OK) && /* Register read success */
818 ((id_val & IDR_JEP106) == IDR_JEP106_ARM) && /* Jedec codes match */
819 ((id_val & IDR_TYPE) == type_to_find)) { /* type matches*/
820
821 LOG_DEBUG("Found %s at AP index: %d (IDR=0x%08" PRIX32 ")",
822 (type_to_find == AP_TYPE_AHB_AP) ? "AHB-AP" :
823 (type_to_find == AP_TYPE_APB_AP) ? "APB-AP" :
824 (type_to_find == AP_TYPE_AXI_AP) ? "AXI-AP" :
825 (type_to_find == AP_TYPE_JTAG_AP) ? "JTAG-AP" : "Unknown",
826 ap_num, id_val);
827
828 *ap_out = &dap->ap[ap_num];
829 return ERROR_OK;
830 }
831 }
832
833 LOG_DEBUG("No %s found",
834 (type_to_find == AP_TYPE_AHB_AP) ? "AHB-AP" :
835 (type_to_find == AP_TYPE_APB_AP) ? "APB-AP" :
836 (type_to_find == AP_TYPE_AXI_AP) ? "AXI-AP" :
837 (type_to_find == AP_TYPE_JTAG_AP) ? "JTAG-AP" : "Unknown");
838 return ERROR_FAIL;
839 }
840
841 int dap_get_debugbase(struct adiv5_ap *ap,
842 uint32_t *dbgbase, uint32_t *apid)
843 {
844 struct adiv5_dap *dap = ap->dap;
845 uint32_t ap_old;
846 int retval;
847
848 ap_old = dap_ap_get_select(dap);
849 dap_ap_select(dap, ap->ap_num);
850
851 retval = dap_queue_ap_read(dap, MEM_AP_REG_BASE, dbgbase);
852 if (retval != ERROR_OK)
853 return retval;
854 retval = dap_queue_ap_read(dap, AP_REG_IDR, apid);
855 if (retval != ERROR_OK)
856 return retval;
857 retval = dap_run(dap);
858 if (retval != ERROR_OK)
859 return retval;
860
861 dap_ap_select(dap, ap_old);
862
863 return ERROR_OK;
864 }
865
866 int dap_lookup_cs_component(struct adiv5_ap *ap,
867 uint32_t dbgbase, uint8_t type, uint32_t *addr, int32_t *idx)
868 {
869 struct adiv5_dap *dap = ap->dap;
870 uint32_t ap_old;
871 uint32_t romentry, entry_offset = 0, component_base, devtype;
872 int retval;
873
874 *addr = 0;
875 ap_old = dap_ap_get_select(dap);
876
877 do {
878 retval = mem_ap_read_atomic_u32(ap, (dbgbase&0xFFFFF000) |
879 entry_offset, &romentry);
880 if (retval != ERROR_OK)
881 return retval;
882
883 component_base = (dbgbase & 0xFFFFF000)
884 + (romentry & 0xFFFFF000);
885
886 if (romentry & 0x1) {
887 uint32_t c_cid1;
888 retval = mem_ap_read_atomic_u32(ap, component_base | 0xff4, &c_cid1);
889 if (retval != ERROR_OK) {
890 LOG_ERROR("Can't read component with base address 0x%" PRIx32
891 ", the corresponding core might be turned off", component_base);
892 return retval;
893 }
894 if (((c_cid1 >> 4) & 0x0f) == 1) {
895 retval = dap_lookup_cs_component(ap, component_base,
896 type, addr, idx);
897 if (retval == ERROR_OK)
898 break;
899 if (retval != ERROR_TARGET_RESOURCE_NOT_AVAILABLE)
900 return retval;
901 }
902
903 retval = mem_ap_read_atomic_u32(ap,
904 (component_base & 0xfffff000) | 0xfcc,
905 &devtype);
906 if (retval != ERROR_OK)
907 return retval;
908 if ((devtype & 0xff) == type) {
909 if (!*idx) {
910 *addr = component_base;
911 break;
912 } else
913 (*idx)--;
914 }
915 }
916 entry_offset += 4;
917 } while (romentry > 0);
918
919 dap_ap_select(dap, ap_old);
920
921 if (!*addr)
922 return ERROR_TARGET_RESOURCE_NOT_AVAILABLE;
923
924 return ERROR_OK;
925 }
926
927 static int dap_rom_display(struct command_context *cmd_ctx,
928 struct adiv5_ap *ap, uint32_t dbgbase, int depth)
929 {
930 struct adiv5_dap *dap = ap->dap;
931 int retval;
932 uint32_t cid0, cid1, cid2, cid3, memtype, romentry;
933 uint16_t entry_offset;
934 char tabs[7] = "";
935
936 if (depth > 16) {
937 command_print(cmd_ctx, "\tTables too deep");
938 return ERROR_FAIL;
939 }
940
941 if (depth)
942 snprintf(tabs, sizeof(tabs), "[L%02d] ", depth);
943
944 /* bit 16 of apid indicates a memory access port */
945 if (dbgbase & 0x02)
946 command_print(cmd_ctx, "\t%sValid ROM table present", tabs);
947 else
948 command_print(cmd_ctx, "\t%sROM table in legacy format", tabs);
949
950 /* Now we read ROM table ID registers, ref. ARM IHI 0029B sec */
951 retval = mem_ap_read_u32(ap, (dbgbase&0xFFFFF000) | 0xFF0, &cid0);
952 if (retval != ERROR_OK)
953 return retval;
954 retval = mem_ap_read_u32(ap, (dbgbase&0xFFFFF000) | 0xFF4, &cid1);
955 if (retval != ERROR_OK)
956 return retval;
957 retval = mem_ap_read_u32(ap, (dbgbase&0xFFFFF000) | 0xFF8, &cid2);
958 if (retval != ERROR_OK)
959 return retval;
960 retval = mem_ap_read_u32(ap, (dbgbase&0xFFFFF000) | 0xFFC, &cid3);
961 if (retval != ERROR_OK)
962 return retval;
963 retval = mem_ap_read_u32(ap, (dbgbase&0xFFFFF000) | 0xFCC, &memtype);
964 if (retval != ERROR_OK)
965 return retval;
966 retval = dap_run(dap);
967 if (retval != ERROR_OK)
968 return retval;
969
970 if (!is_dap_cid_ok(cid3, cid2, cid1, cid0))
971 command_print(cmd_ctx, "\t%sCID3 0x%02x"
972 ", CID2 0x%02x"
973 ", CID1 0x%02x"
974 ", CID0 0x%02x",
975 tabs,
976 (unsigned)cid3, (unsigned)cid2,
977 (unsigned)cid1, (unsigned)cid0);
978 if (memtype & 0x01)
979 command_print(cmd_ctx, "\t%sMEMTYPE system memory present on bus", tabs);
980 else
981 command_print(cmd_ctx, "\t%sMEMTYPE system memory not present: dedicated debug bus", tabs);
982
983 /* Now we read ROM table entries from dbgbase&0xFFFFF000) | 0x000 until we get 0x00000000 */
984 for (entry_offset = 0; ; entry_offset += 4) {
985 retval = mem_ap_read_atomic_u32(ap, (dbgbase&0xFFFFF000) | entry_offset, &romentry);
986 if (retval != ERROR_OK)
987 return retval;
988 command_print(cmd_ctx, "\t%sROMTABLE[0x%x] = 0x%" PRIx32 "",
989 tabs, entry_offset, romentry);
990 if (romentry & 0x01) {
991 uint32_t c_cid0, c_cid1, c_cid2, c_cid3;
992 uint32_t c_pid0, c_pid1, c_pid2, c_pid3, c_pid4;
993 uint32_t component_base;
994 uint32_t part_num;
995 const char *type, *full;
996
997 component_base = (dbgbase & 0xFFFFF000) + (romentry & 0xFFFFF000);
998
999 /* IDs are in last 4K section */
1000 retval = mem_ap_read_atomic_u32(ap, component_base + 0xFE0, &c_pid0);
1001 if (retval != ERROR_OK) {
1002 command_print(cmd_ctx, "\t%s\tCan't read component with base address 0x%" PRIx32
1003 ", the corresponding core might be turned off", tabs, component_base);
1004 continue;
1005 }
1006 c_pid0 &= 0xff;
1007 retval = mem_ap_read_atomic_u32(ap, component_base + 0xFE4, &c_pid1);
1008 if (retval != ERROR_OK)
1009 return retval;
1010 c_pid1 &= 0xff;
1011 retval = mem_ap_read_atomic_u32(ap, component_base + 0xFE8, &c_pid2);
1012 if (retval != ERROR_OK)
1013 return retval;
1014 c_pid2 &= 0xff;
1015 retval = mem_ap_read_atomic_u32(ap, component_base + 0xFEC, &c_pid3);
1016 if (retval != ERROR_OK)
1017 return retval;
1018 c_pid3 &= 0xff;
1019 retval = mem_ap_read_atomic_u32(ap, component_base + 0xFD0, &c_pid4);
1020 if (retval != ERROR_OK)
1021 return retval;
1022 c_pid4 &= 0xff;
1023
1024 retval = mem_ap_read_atomic_u32(ap, component_base + 0xFF0, &c_cid0);
1025 if (retval != ERROR_OK)
1026 return retval;
1027 c_cid0 &= 0xff;
1028 retval = mem_ap_read_atomic_u32(ap, component_base + 0xFF4, &c_cid1);
1029 if (retval != ERROR_OK)
1030 return retval;
1031 c_cid1 &= 0xff;
1032 retval = mem_ap_read_atomic_u32(ap, component_base + 0xFF8, &c_cid2);
1033 if (retval != ERROR_OK)
1034 return retval;
1035 c_cid2 &= 0xff;
1036 retval = mem_ap_read_atomic_u32(ap, component_base + 0xFFC, &c_cid3);
1037 if (retval != ERROR_OK)
1038 return retval;
1039 c_cid3 &= 0xff;
1040
1041 command_print(cmd_ctx, "\t\tComponent base address 0x%" PRIx32 ", "
1042 "start address 0x%" PRIx32, component_base,
1043 /* component may take multiple 4K pages */
1044 (uint32_t)(component_base - 0x1000*(c_pid4 >> 4)));
1045 command_print(cmd_ctx, "\t\tComponent class is 0x%" PRIx8 ", %s",
1046 (uint8_t)((c_cid1 >> 4) & 0xf),
1047 /* See ARM IHI 0029B Table 3-3 */
1048 class_description[(c_cid1 >> 4) & 0xf]);
1049
1050 /* CoreSight component? */
1051 if (((c_cid1 >> 4) & 0x0f) == 9) {
1052 uint32_t devtype;
1053 unsigned minor;
1054 const char *major = "Reserved", *subtype = "Reserved";
1055
1056 retval = mem_ap_read_atomic_u32(ap,
1057 (component_base & 0xfffff000) | 0xfcc,
1058 &devtype);
1059 if (retval != ERROR_OK)
1060 return retval;
1061 minor = (devtype >> 4) & 0x0f;
1062 switch (devtype & 0x0f) {
1063 case 0:
1064 major = "Miscellaneous";
1065 switch (minor) {
1066 case 0:
1067 subtype = "other";
1068 break;
1069 case 4:
1070 subtype = "Validation component";
1071 break;
1072 }
1073 break;
1074 case 1:
1075 major = "Trace Sink";
1076 switch (minor) {
1077 case 0:
1078 subtype = "other";
1079 break;
1080 case 1:
1081 subtype = "Port";
1082 break;
1083 case 2:
1084 subtype = "Buffer";
1085 break;
1086 case 3:
1087 subtype = "Router";
1088 break;
1089 }
1090 break;
1091 case 2:
1092 major = "Trace Link";
1093 switch (minor) {
1094 case 0:
1095 subtype = "other";
1096 break;
1097 case 1:
1098 subtype = "Funnel, router";
1099 break;
1100 case 2:
1101 subtype = "Filter";
1102 break;
1103 case 3:
1104 subtype = "FIFO, buffer";
1105 break;
1106 }
1107 break;
1108 case 3:
1109 major = "Trace Source";
1110 switch (minor) {
1111 case 0:
1112 subtype = "other";
1113 break;
1114 case 1:
1115 subtype = "Processor";
1116 break;
1117 case 2:
1118 subtype = "DSP";
1119 break;
1120 case 3:
1121 subtype = "Engine/Coprocessor";
1122 break;
1123 case 4:
1124 subtype = "Bus";
1125 break;
1126 case 6:
1127 subtype = "Software";
1128 break;
1129 }
1130 break;
1131 case 4:
1132 major = "Debug Control";
1133 switch (minor) {
1134 case 0:
1135 subtype = "other";
1136 break;
1137 case 1:
1138 subtype = "Trigger Matrix";
1139 break;
1140 case 2:
1141 subtype = "Debug Auth";
1142 break;
1143 case 3:
1144 subtype = "Power Requestor";
1145 break;
1146 }
1147 break;
1148 case 5:
1149 major = "Debug Logic";
1150 switch (minor) {
1151 case 0:
1152 subtype = "other";
1153 break;
1154 case 1:
1155 subtype = "Processor";
1156 break;
1157 case 2:
1158 subtype = "DSP";
1159 break;
1160 case 3:
1161 subtype = "Engine/Coprocessor";
1162 break;
1163 case 4:
1164 subtype = "Bus";
1165 break;
1166 case 5:
1167 subtype = "Memory";
1168 break;
1169 }
1170 break;
1171 case 6:
1172 major = "Perfomance Monitor";
1173 switch (minor) {
1174 case 0:
1175 subtype = "other";
1176 break;
1177 case 1:
1178 subtype = "Processor";
1179 break;
1180 case 2:
1181 subtype = "DSP";
1182 break;
1183 case 3:
1184 subtype = "Engine/Coprocessor";
1185 break;
1186 case 4:
1187 subtype = "Bus";
1188 break;
1189 case 5:
1190 subtype = "Memory";
1191 break;
1192 }
1193 break;
1194 }
1195 command_print(cmd_ctx, "\t\tType is 0x%02" PRIx8 ", %s, %s",
1196 (uint8_t)(devtype & 0xff),
1197 major, subtype);
1198 /* REVISIT also show 0xfc8 DevId */
1199 }
1200
1201 if (!is_dap_cid_ok(cid3, cid2, cid1, cid0))
1202 command_print(cmd_ctx,
1203 "\t\tCID3 0%02x"
1204 ", CID2 0%02x"
1205 ", CID1 0%02x"
1206 ", CID0 0%02x",
1207 (int)c_cid3,
1208 (int)c_cid2,
1209 (int)c_cid1,
1210 (int)c_cid0);
1211 command_print(cmd_ctx,
1212 "\t\tPeripheral ID[4..0] = hex "
1213 "%02x %02x %02x %02x %02x",
1214 (int)c_pid4, (int)c_pid3, (int)c_pid2,
1215 (int)c_pid1, (int)c_pid0);
1216
1217 /* Part number interpretations are from Cortex
1218 * core specs, the CoreSight components TRM
1219 * (ARM DDI 0314H), CoreSight System Design
1220 * Guide (ARM DGI 0012D) and ETM specs; also
1221 * from chip observation (e.g. TI SDTI).
1222 */
1223 part_num = (c_pid0 & 0xff);
1224 part_num |= (c_pid1 & 0x0f) << 8;
1225 switch (part_num) {
1226 case 0x000:
1227 type = "Cortex-M3 NVIC";
1228 full = "(Interrupt Controller)";
1229 break;
1230 case 0x001:
1231 type = "Cortex-M3 ITM";
1232 full = "(Instrumentation Trace Module)";
1233 break;
1234 case 0x002:
1235 type = "Cortex-M3 DWT";
1236 full = "(Data Watchpoint and Trace)";
1237 break;
1238 case 0x003:
1239 type = "Cortex-M3 FBP";
1240 full = "(Flash Patch and Breakpoint)";
1241 break;
1242 case 0x008:
1243 type = "Cortex-M0 SCS";
1244 full = "(System Control Space)";
1245 break;
1246 case 0x00a:
1247 type = "Cortex-M0 DWT";
1248 full = "(Data Watchpoint and Trace)";
1249 break;
1250 case 0x00b:
1251 type = "Cortex-M0 BPU";
1252 full = "(Breakpoint Unit)";
1253 break;
1254 case 0x00c:
1255 type = "Cortex-M4 SCS";
1256 full = "(System Control Space)";
1257 break;
1258 case 0x00d:
1259 type = "CoreSight ETM11";
1260 full = "(Embedded Trace)";
1261 break;
1262 /* case 0x113: what? */
1263 case 0x120: /* from OMAP3 memmap */
1264 type = "TI SDTI";
1265 full = "(System Debug Trace Interface)";
1266 break;
1267 case 0x343: /* from OMAP3 memmap */
1268 type = "TI DAPCTL";
1269 full = "";
1270 break;
1271 case 0x906:
1272 type = "Coresight CTI";
1273 full = "(Cross Trigger)";
1274 break;
1275 case 0x907:
1276 type = "Coresight ETB";
1277 full = "(Trace Buffer)";
1278 break;
1279 case 0x908:
1280 type = "Coresight CSTF";
1281 full = "(Trace Funnel)";
1282 break;
1283 case 0x910:
1284 type = "CoreSight ETM9";
1285 full = "(Embedded Trace)";
1286 break;
1287 case 0x912:
1288 type = "Coresight TPIU";
1289 full = "(Trace Port Interface Unit)";
1290 break;
1291 case 0x913:
1292 type = "Coresight ITM";
1293 full = "(Instrumentation Trace Macrocell)";
1294 break;
1295 case 0x914:
1296 type = "Coresight SWO";
1297 full = "(Single Wire Output)";
1298 break;
1299 case 0x917:
1300 type = "Coresight HTM";
1301 full = "(AHB Trace Macrocell)";
1302 break;
1303 case 0x920:
1304 type = "CoreSight ETM11";
1305 full = "(Embedded Trace)";
1306 break;
1307 case 0x921:
1308 type = "Cortex-A8 ETM";
1309 full = "(Embedded Trace)";
1310 break;
1311 case 0x922:
1312 type = "Cortex-A8 CTI";
1313 full = "(Cross Trigger)";
1314 break;
1315 case 0x923:
1316 type = "Cortex-M3 TPIU";
1317 full = "(Trace Port Interface Unit)";
1318 break;
1319 case 0x924:
1320 type = "Cortex-M3 ETM";
1321 full = "(Embedded Trace)";
1322 break;
1323 case 0x925:
1324 type = "Cortex-M4 ETM";
1325 full = "(Embedded Trace)";
1326 break;
1327 case 0x930:
1328 type = "Cortex-R4 ETM";
1329 full = "(Embedded Trace)";
1330 break;
1331 case 0x950:
1332 type = "CoreSight Component";
1333 full = "(unidentified Cortex-A9 component)";
1334 break;
1335 case 0x961:
1336 type = "CoreSight TMC";
1337 full = "(Trace Memory Controller)";
1338 break;
1339 case 0x962:
1340 type = "CoreSight STM";
1341 full = "(System Trace Macrocell)";
1342 break;
1343 case 0x9a0:
1344 type = "CoreSight PMU";
1345 full = "(Performance Monitoring Unit)";
1346 break;
1347 case 0x9a1:
1348 type = "Cortex-M4 TPUI";
1349 full = "(Trace Port Interface Unit)";
1350 break;
1351 case 0x9a5:
1352 type = "Cortex-A5 ETM";
1353 full = "(Embedded Trace)";
1354 break;
1355 case 0xc05:
1356 type = "Cortex-A5 Debug";
1357 full = "(Debug Unit)";
1358 break;
1359 case 0xc08:
1360 type = "Cortex-A8 Debug";
1361 full = "(Debug Unit)";
1362 break;
1363 case 0xc09:
1364 type = "Cortex-A9 Debug";
1365 full = "(Debug Unit)";
1366 break;
1367 case 0x4af:
1368 type = "Cortex-A15 Debug";
1369 full = "(Debug Unit)";
1370 break;
1371 default:
1372 LOG_DEBUG("Unrecognized Part number 0x%" PRIx32, part_num);
1373 type = "-*- unrecognized -*-";
1374 full = "";
1375 break;
1376 }
1377 command_print(cmd_ctx, "\t\tPart is %s %s",
1378 type, full);
1379
1380 /* ROM Table? */
1381 if (((c_cid1 >> 4) & 0x0f) == 1) {
1382 retval = dap_rom_display(cmd_ctx, ap, component_base, depth + 1);
1383 if (retval != ERROR_OK)
1384 return retval;
1385 }
1386 } else {
1387 if (romentry)
1388 command_print(cmd_ctx, "\t\tComponent not present");
1389 else
1390 break;
1391 }
1392 }
1393 command_print(cmd_ctx, "\t%s\tEnd of ROM table", tabs);
1394 return ERROR_OK;
1395 }
1396
1397 static int dap_info_command(struct command_context *cmd_ctx,
1398 struct adiv5_ap *ap)
1399 {
1400 int retval;
1401 uint32_t dbgbase, apid;
1402 int romtable_present = 0;
1403 uint8_t mem_ap;
1404
1405 /* Now we read ROM table ID registers, ref. ARM IHI 0029B sec */
1406 retval = dap_get_debugbase(ap, &dbgbase, &apid);
1407 if (retval != ERROR_OK)
1408 return retval;
1409
1410 command_print(cmd_ctx, "AP ID register 0x%8.8" PRIx32, apid);
1411 if (apid == 0) {
1412 command_print(cmd_ctx, "No AP found at this ap 0x%x", ap->ap_num);
1413 return ERROR_FAIL;
1414 }
1415
1416 switch (apid & (IDR_JEP106 | IDR_TYPE)) {
1417 case IDR_JEP106_ARM | AP_TYPE_JTAG_AP:
1418 command_print(cmd_ctx, "\tType is JTAG-AP");
1419 break;
1420 case IDR_JEP106_ARM | AP_TYPE_AHB_AP:
1421 command_print(cmd_ctx, "\tType is MEM-AP AHB");
1422 break;
1423 case IDR_JEP106_ARM | AP_TYPE_APB_AP:
1424 command_print(cmd_ctx, "\tType is MEM-AP APB");
1425 break;
1426 case IDR_JEP106_ARM | AP_TYPE_AXI_AP:
1427 command_print(cmd_ctx, "\tType is MEM-AP AXI");
1428 break;
1429 default:
1430 command_print(cmd_ctx, "\tUnknown AP type");
1431 break;
1432 }
1433
1434 /* NOTE: a MEM-AP may have a single CoreSight component that's
1435 * not a ROM table ... or have no such components at all.
1436 */
1437 mem_ap = (apid & IDR_CLASS) == AP_CLASS_MEM_AP;
1438 if (mem_ap) {
1439 command_print(cmd_ctx, "MEM-AP BASE 0x%8.8" PRIx32, dbgbase);
1440
1441 romtable_present = dbgbase != 0xFFFFFFFF;
1442 if (romtable_present)
1443 dap_rom_display(cmd_ctx, ap, dbgbase, 0);
1444 else
1445 command_print(cmd_ctx, "\tNo ROM table present");
1446 }
1447
1448 return ERROR_OK;
1449 }
1450
1451 COMMAND_HANDLER(handle_dap_info_command)
1452 {
1453 struct target *target = get_current_target(CMD_CTX);
1454 struct arm *arm = target_to_arm(target);
1455 struct adiv5_dap *dap = arm->dap;
1456 uint32_t apsel;
1457
1458 switch (CMD_ARGC) {
1459 case 0:
1460 apsel = dap->apsel;
1461 break;
1462 case 1:
1463 COMMAND_PARSE_NUMBER(u32, CMD_ARGV[0], apsel);
1464 if (apsel >= 256)
1465 return ERROR_COMMAND_SYNTAX_ERROR;
1466 break;
1467 default:
1468 return ERROR_COMMAND_SYNTAX_ERROR;
1469 }
1470
1471 return dap_info_command(CMD_CTX, &dap->ap[apsel]);
1472 }
1473
1474 COMMAND_HANDLER(dap_baseaddr_command)
1475 {
1476 struct target *target = get_current_target(CMD_CTX);
1477 struct arm *arm = target_to_arm(target);
1478 struct adiv5_dap *dap = arm->dap;
1479
1480 uint32_t apsel, baseaddr;
1481 int retval;
1482
1483 switch (CMD_ARGC) {
1484 case 0:
1485 apsel = dap->apsel;
1486 break;
1487 case 1:
1488 COMMAND_PARSE_NUMBER(u32, CMD_ARGV[0], apsel);
1489 /* AP address is in bits 31:24 of DP_SELECT */
1490 if (apsel >= 256)
1491 return ERROR_COMMAND_SYNTAX_ERROR;
1492 break;
1493 default:
1494 return ERROR_COMMAND_SYNTAX_ERROR;
1495 }
1496
1497 dap_ap_select(dap, apsel);
1498
1499 /* NOTE: assumes we're talking to a MEM-AP, which
1500 * has a base address. There are other kinds of AP,
1501 * though they're not common for now. This should
1502 * use the ID register to verify it's a MEM-AP.
1503 */
1504 retval = dap_queue_ap_read(dap, MEM_AP_REG_BASE, &baseaddr);
1505 if (retval != ERROR_OK)
1506 return retval;
1507 retval = dap_run(dap);
1508 if (retval != ERROR_OK)
1509 return retval;
1510
1511 command_print(CMD_CTX, "0x%8.8" PRIx32, baseaddr);
1512
1513 return retval;
1514 }
1515
1516 COMMAND_HANDLER(dap_memaccess_command)
1517 {
1518 struct target *target = get_current_target(CMD_CTX);
1519 struct arm *arm = target_to_arm(target);
1520 struct adiv5_dap *dap = arm->dap;
1521
1522 uint32_t memaccess_tck;
1523
1524 switch (CMD_ARGC) {
1525 case 0:
1526 memaccess_tck = dap->ap[dap->apsel].memaccess_tck;
1527 break;
1528 case 1:
1529 COMMAND_PARSE_NUMBER(u32, CMD_ARGV[0], memaccess_tck);
1530 break;
1531 default:
1532 return ERROR_COMMAND_SYNTAX_ERROR;
1533 }
1534 dap->ap[dap->apsel].memaccess_tck = memaccess_tck;
1535
1536 command_print(CMD_CTX, "memory bus access delay set to %" PRIi32 " tck",
1537 dap->ap[dap->apsel].memaccess_tck);
1538
1539 return ERROR_OK;
1540 }
1541
1542 COMMAND_HANDLER(dap_apsel_command)
1543 {
1544 struct target *target = get_current_target(CMD_CTX);
1545 struct arm *arm = target_to_arm(target);
1546 struct adiv5_dap *dap = arm->dap;
1547
1548 uint32_t apsel, apid;
1549 int retval;
1550
1551 switch (CMD_ARGC) {
1552 case 0:
1553 apsel = 0;
1554 break;
1555 case 1:
1556 COMMAND_PARSE_NUMBER(u32, CMD_ARGV[0], apsel);
1557 /* AP address is in bits 31:24 of DP_SELECT */
1558 if (apsel >= 256)
1559 return ERROR_COMMAND_SYNTAX_ERROR;
1560 break;
1561 default:
1562 return ERROR_COMMAND_SYNTAX_ERROR;
1563 }
1564
1565 dap->apsel = apsel;
1566 dap_ap_select(dap, apsel);
1567
1568 retval = dap_queue_ap_read(dap, AP_REG_IDR, &apid);
1569 if (retval != ERROR_OK)
1570 return retval;
1571 retval = dap_run(dap);
1572 if (retval != ERROR_OK)
1573 return retval;
1574
1575 command_print(CMD_CTX, "ap %" PRIi32 " selected, identification register 0x%8.8" PRIx32,
1576 apsel, apid);
1577
1578 return retval;
1579 }
1580
1581 COMMAND_HANDLER(dap_apcsw_command)
1582 {
1583 struct target *target = get_current_target(CMD_CTX);
1584 struct arm *arm = target_to_arm(target);
1585 struct adiv5_dap *dap = arm->dap;
1586
1587 uint32_t apcsw = dap->ap[dap->apsel].csw_default, sprot = 0;
1588
1589 switch (CMD_ARGC) {
1590 case 0:
1591 command_print(CMD_CTX, "apsel %" PRIi32 " selected, csw 0x%8.8" PRIx32,
1592 (dap->apsel), apcsw);
1593 break;
1594 case 1:
1595 COMMAND_PARSE_NUMBER(u32, CMD_ARGV[0], sprot);
1596 /* AP address is in bits 31:24 of DP_SELECT */
1597 if (sprot > 1)
1598 return ERROR_COMMAND_SYNTAX_ERROR;
1599 if (sprot)
1600 apcsw |= CSW_SPROT;
1601 else
1602 apcsw &= ~CSW_SPROT;
1603 break;
1604 default:
1605 return ERROR_COMMAND_SYNTAX_ERROR;
1606 }
1607 dap->ap[dap->apsel].csw_default = apcsw;
1608
1609 return 0;
1610 }
1611
1612
1613
1614 COMMAND_HANDLER(dap_apid_command)
1615 {
1616 struct target *target = get_current_target(CMD_CTX);
1617 struct arm *arm = target_to_arm(target);
1618 struct adiv5_dap *dap = arm->dap;
1619
1620 uint32_t apsel, apid;
1621 int retval;
1622
1623 switch (CMD_ARGC) {
1624 case 0:
1625 apsel = dap->apsel;
1626 break;
1627 case 1:
1628 COMMAND_PARSE_NUMBER(u32, CMD_ARGV[0], apsel);
1629 /* AP address is in bits 31:24 of DP_SELECT */
1630 if (apsel >= 256)
1631 return ERROR_COMMAND_SYNTAX_ERROR;
1632 break;
1633 default:
1634 return ERROR_COMMAND_SYNTAX_ERROR;
1635 }
1636
1637 dap_ap_select(dap, apsel);
1638
1639 retval = dap_queue_ap_read(dap, AP_REG_IDR, &apid);
1640 if (retval != ERROR_OK)
1641 return retval;
1642 retval = dap_run(dap);
1643 if (retval != ERROR_OK)
1644 return retval;
1645
1646 command_print(CMD_CTX, "0x%8.8" PRIx32, apid);
1647
1648 return retval;
1649 }
1650
1651 COMMAND_HANDLER(dap_ti_be_32_quirks_command)
1652 {
1653 struct target *target = get_current_target(CMD_CTX);
1654 struct arm *arm = target_to_arm(target);
1655 struct adiv5_dap *dap = arm->dap;
1656
1657 uint32_t enable = dap->ti_be_32_quirks;
1658
1659 switch (CMD_ARGC) {
1660 case 0:
1661 break;
1662 case 1:
1663 COMMAND_PARSE_NUMBER(u32, CMD_ARGV[0], enable);
1664 if (enable > 1)
1665 return ERROR_COMMAND_SYNTAX_ERROR;
1666 break;
1667 default:
1668 return ERROR_COMMAND_SYNTAX_ERROR;
1669 }
1670 dap->ti_be_32_quirks = enable;
1671 command_print(CMD_CTX, "TI BE-32 quirks mode %s",
1672 enable ? "enabled" : "disabled");
1673
1674 return 0;
1675 }
1676
1677 static const struct command_registration dap_commands[] = {
1678 {
1679 .name = "info",
1680 .handler = handle_dap_info_command,
1681 .mode = COMMAND_EXEC,
1682 .help = "display ROM table for MEM-AP "
1683 "(default currently selected AP)",
1684 .usage = "[ap_num]",
1685 },
1686 {
1687 .name = "apsel",
1688 .handler = dap_apsel_command,
1689 .mode = COMMAND_EXEC,
1690 .help = "Set the currently selected AP (default 0) "
1691 "and display the result",
1692 .usage = "[ap_num]",
1693 },
1694 {
1695 .name = "apcsw",
1696 .handler = dap_apcsw_command,
1697 .mode = COMMAND_EXEC,
1698 .help = "Set csw access bit ",
1699 .usage = "[sprot]",
1700 },
1701
1702 {
1703 .name = "apid",
1704 .handler = dap_apid_command,
1705 .mode = COMMAND_EXEC,
1706 .help = "return ID register from AP "
1707 "(default currently selected AP)",
1708 .usage = "[ap_num]",
1709 },
1710 {
1711 .name = "baseaddr",
1712 .handler = dap_baseaddr_command,
1713 .mode = COMMAND_EXEC,
1714 .help = "return debug base address from MEM-AP "
1715 "(default currently selected AP)",
1716 .usage = "[ap_num]",
1717 },
1718 {
1719 .name = "memaccess",
1720 .handler = dap_memaccess_command,
1721 .mode = COMMAND_EXEC,
1722 .help = "set/get number of extra tck for MEM-AP memory "
1723 "bus access [0-255]",
1724 .usage = "[cycles]",
1725 },
1726 {
1727 .name = "ti_be_32_quirks",
1728 .handler = dap_ti_be_32_quirks_command,
1729 .mode = COMMAND_CONFIG,
1730 .help = "set/get quirks mode for TI TMS450/TMS570 processors",
1731 .usage = "[enable]",
1732 },
1733 COMMAND_REGISTRATION_DONE
1734 };
1735
1736 const struct command_registration dap_command_handlers[] = {
1737 {
1738 .name = "dap",
1739 .mode = COMMAND_EXEC,
1740 .help = "DAP command group",
1741 .usage = "",
1742 .chain = dap_commands,
1743 },
1744 COMMAND_REGISTRATION_DONE
1745 };

Linking to existing account procedure

If you already have an account and want to add another login method you MUST first sign in with your existing account and then change URL to read https://review.openocd.org/login/?link to get to this page again but this time it'll work for linking. Thank you.

SSH host keys fingerprints

1024 SHA256:YKx8b7u5ZWdcbp7/4AeXNaqElP49m6QrwfXaqQGJAOk gerrit-code-review@openocd.zylin.com (DSA)
384 SHA256:jHIbSQa4REvwCFG4cq5LBlBLxmxSqelQPem/EXIrxjk gerrit-code-review@openocd.org (ECDSA)
521 SHA256:UAOPYkU9Fjtcao0Ul/Rrlnj/OsQvt+pgdYSZ4jOYdgs gerrit-code-review@openocd.org (ECDSA)
256 SHA256:A13M5QlnozFOvTllybRZH6vm7iSt0XLxbA48yfc2yfY gerrit-code-review@openocd.org (ECDSA)
256 SHA256:spYMBqEYoAOtK7yZBrcwE8ZpYt6b68Cfh9yEVetvbXg gerrit-code-review@openocd.org (ED25519)
+--[ED25519 256]--+
|=..              |
|+o..   .         |
|*.o   . .        |
|+B . . .         |
|Bo. = o S        |
|Oo.+ + =         |
|oB=.* = . o      |
| =+=.+   + E     |
|. .=o   . o      |
+----[SHA256]-----+
2048 SHA256:0Onrb7/PHjpo6iVZ7xQX2riKN83FJ3KGU0TvI0TaFG4 gerrit-code-review@openocd.zylin.com (RSA)