1 /***************************************************************************
2 * Copyright (C) 2006 by Magnus Lundin *
5 * Copyright (C) 2008 by Spencer Oliver *
6 * spen@spen-soft.co.uk *
8 * Copyright (C) 2009-2010 by Oyvind Harboe *
9 * oyvind.harboe@zylin.com *
11 * Copyright (C) 2009-2010 by David Brownell *
13 * Copyright (C) 2013 by Andreas Fritiofson *
14 * andreas.fritiofson@gmail.com *
16 * This program is free software; you can redistribute it and/or modify *
17 * it under the terms of the GNU General Public License as published by *
18 * the Free Software Foundation; either version 2 of the License, or *
19 * (at your option) any later version. *
21 * This program is distributed in the hope that it will be useful, *
22 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
23 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
24 * GNU General Public License for more details. *
26 * You should have received a copy of the GNU General Public License *
27 * along with this program. If not, see <http://www.gnu.org/licenses/>. *
28 ***************************************************************************/
32 * This file implements support for the ARM Debug Interface version 5 (ADIv5)
33 * debugging architecture. Compared with previous versions, this includes
34 * a low pin-count Serial Wire Debug (SWD) alternative to JTAG for message
35 * transport, and focusses on memory mapped resources as defined by the
36 * CoreSight architecture.
38 * A key concept in ADIv5 is the Debug Access Port, or DAP. A DAP has two
39 * basic components: a Debug Port (DP) transporting messages to and from a
40 * debugger, and an Access Port (AP) accessing resources. Three types of DP
41 * are defined. One uses only JTAG for communication, and is called JTAG-DP.
42 * One uses only SWD for communication, and is called SW-DP. The third can
43 * use either SWD or JTAG, and is called SWJ-DP. The most common type of AP
44 * is used to access memory mapped resources and is called a MEM-AP. Also a
45 * JTAG-AP is also defined, bridging to JTAG resources; those are uncommon.
47 * This programming interface allows DAP pipelined operations through a
48 * transaction queue. This primarily affects AP operations (such as using
49 * a MEM-AP to access memory or registers). If the current transaction has
50 * not finished by the time the next one must begin, and the ORUNDETECT bit
51 * is set in the DP_CTRL_STAT register, the SSTICKYORUN status is set and
52 * further AP operations will fail. There are two basic methods to avoid
53 * such overrun errors. One involves polling for status instead of using
54 * transaction piplining. The other involves adding delays to ensure the
55 * AP has enough time to complete one operation before starting the next
56 * one. (For JTAG these delays are controlled by memaccess_tck.)
60 * Relevant specifications from ARM include:
62 * ARM(tm) Debug Interface v5 Architecture Specification ARM IHI 0031A
63 * CoreSight(tm) v1.0 Architecture Specification ARM IHI 0029B
65 * CoreSight(tm) DAP-Lite TRM, ARM DDI 0316D
66 * Cortex-M3(tm) TRM, ARM DDI 0337G
73 #include "jtag/interface.h"
75 #include "arm_adi_v5.h"
76 #include <helper/jep106.h>
77 #include <helper/time_support.h>
78 #include <helper/list.h>
79 #include <helper/jim-nvp.h>
81 /* ARM ADI Specification requires at least 10 bits used for TAR autoincrement */
84 uint32_t tar_block_size(uint32_t address)
85 Return the largest block starting at address that does not cross a tar block size alignment boundary
87 static uint32_t max_tar_block_size(uint32_t tar_autoincr_block
, uint32_t address
)
89 return tar_autoincr_block
- ((tar_autoincr_block
- 1) & address
);
92 /***************************************************************************
94 * DP and MEM-AP register access through APACC and DPACC *
96 ***************************************************************************/
98 static int mem_ap_setup_csw(struct adiv5_ap
*ap
, uint32_t csw
)
100 csw
= csw
| CSW_DBGSWENABLE
| CSW_MASTER_DEBUG
| CSW_HPROT
|
103 if (csw
!= ap
->csw_value
) {
104 /* LOG_DEBUG("DAP: Set CSW %x",csw); */
105 int retval
= dap_queue_ap_write(ap
, MEM_AP_REG_CSW
, csw
);
106 if (retval
!= ERROR_OK
)
113 static int mem_ap_setup_tar(struct adiv5_ap
*ap
, uint32_t tar
)
115 if (!ap
->tar_valid
|| tar
!= ap
->tar_value
) {
116 /* LOG_DEBUG("DAP: Set TAR %x",tar); */
117 int retval
= dap_queue_ap_write(ap
, MEM_AP_REG_TAR
, tar
);
118 if (retval
!= ERROR_OK
)
121 ap
->tar_valid
= true;
126 static int mem_ap_read_tar(struct adiv5_ap
*ap
, uint32_t *tar
)
128 int retval
= dap_queue_ap_read(ap
, MEM_AP_REG_TAR
, tar
);
129 if (retval
!= ERROR_OK
) {
130 ap
->tar_valid
= false;
134 retval
= dap_run(ap
->dap
);
135 if (retval
!= ERROR_OK
) {
136 ap
->tar_valid
= false;
140 ap
->tar_value
= *tar
;
141 ap
->tar_valid
= true;
145 static uint32_t mem_ap_get_tar_increment(struct adiv5_ap
*ap
)
147 switch (ap
->csw_value
& CSW_ADDRINC_MASK
) {
148 case CSW_ADDRINC_SINGLE
:
149 switch (ap
->csw_value
& CSW_SIZE_MASK
) {
157 case CSW_ADDRINC_PACKED
:
163 /* mem_ap_update_tar_cache is called after an access to MEM_AP_REG_DRW
165 static void mem_ap_update_tar_cache(struct adiv5_ap
*ap
)
170 uint32_t inc
= mem_ap_get_tar_increment(ap
);
171 if (inc
>= max_tar_block_size(ap
->tar_autoincr_block
, ap
->tar_value
))
172 ap
->tar_valid
= false;
174 ap
->tar_value
+= inc
;
178 * Queue transactions setting up transfer parameters for the
179 * currently selected MEM-AP.
181 * Subsequent transfers using registers like MEM_AP_REG_DRW or MEM_AP_REG_BD2
182 * initiate data reads or writes using memory or peripheral addresses.
183 * If the CSW is configured for it, the TAR may be automatically
184 * incremented after each transfer.
186 * @param ap The MEM-AP.
187 * @param csw MEM-AP Control/Status Word (CSW) register to assign. If this
188 * matches the cached value, the register is not changed.
189 * @param tar MEM-AP Transfer Address Register (TAR) to assign. If this
190 * matches the cached address, the register is not changed.
192 * @return ERROR_OK if the transaction was properly queued, else a fault code.
194 static int mem_ap_setup_transfer(struct adiv5_ap
*ap
, uint32_t csw
, uint32_t tar
)
197 retval
= mem_ap_setup_csw(ap
, csw
);
198 if (retval
!= ERROR_OK
)
200 retval
= mem_ap_setup_tar(ap
, tar
);
201 if (retval
!= ERROR_OK
)
207 * Asynchronous (queued) read of a word from memory or a system register.
209 * @param ap The MEM-AP to access.
210 * @param address Address of the 32-bit word to read; it must be
211 * readable by the currently selected MEM-AP.
212 * @param value points to where the word will be stored when the
213 * transaction queue is flushed (assuming no errors).
215 * @return ERROR_OK for success. Otherwise a fault code.
217 int mem_ap_read_u32(struct adiv5_ap
*ap
, uint32_t address
,
222 /* Use banked addressing (REG_BDx) to avoid some link traffic
223 * (updating TAR) when reading several consecutive addresses.
225 retval
= mem_ap_setup_transfer(ap
,
226 CSW_32BIT
| (ap
->csw_value
& CSW_ADDRINC_MASK
),
227 address
& 0xFFFFFFF0);
228 if (retval
!= ERROR_OK
)
231 return dap_queue_ap_read(ap
, MEM_AP_REG_BD0
| (address
& 0xC), value
);
235 * Synchronous read of a word from memory or a system register.
236 * As a side effect, this flushes any queued transactions.
238 * @param ap The MEM-AP to access.
239 * @param address Address of the 32-bit word to read; it must be
240 * readable by the currently selected MEM-AP.
241 * @param value points to where the result will be stored.
243 * @return ERROR_OK for success; *value holds the result.
244 * Otherwise a fault code.
246 int mem_ap_read_atomic_u32(struct adiv5_ap
*ap
, uint32_t address
,
251 retval
= mem_ap_read_u32(ap
, address
, value
);
252 if (retval
!= ERROR_OK
)
255 return dap_run(ap
->dap
);
259 * Asynchronous (queued) write of a word to memory or a system register.
261 * @param ap The MEM-AP to access.
262 * @param address Address to be written; it must be writable by
263 * the currently selected MEM-AP.
264 * @param value Word that will be written to the address when transaction
265 * queue is flushed (assuming no errors).
267 * @return ERROR_OK for success. Otherwise a fault code.
269 int mem_ap_write_u32(struct adiv5_ap
*ap
, uint32_t address
,
274 /* Use banked addressing (REG_BDx) to avoid some link traffic
275 * (updating TAR) when writing several consecutive addresses.
277 retval
= mem_ap_setup_transfer(ap
,
278 CSW_32BIT
| (ap
->csw_value
& CSW_ADDRINC_MASK
),
279 address
& 0xFFFFFFF0);
280 if (retval
!= ERROR_OK
)
283 return dap_queue_ap_write(ap
, MEM_AP_REG_BD0
| (address
& 0xC),
288 * Synchronous write of a word to memory or a system register.
289 * As a side effect, this flushes any queued transactions.
291 * @param ap The MEM-AP to access.
292 * @param address Address to be written; it must be writable by
293 * the currently selected MEM-AP.
294 * @param value Word that will be written.
296 * @return ERROR_OK for success; the data was written. Otherwise a fault code.
298 int mem_ap_write_atomic_u32(struct adiv5_ap
*ap
, uint32_t address
,
301 int retval
= mem_ap_write_u32(ap
, address
, value
);
303 if (retval
!= ERROR_OK
)
306 return dap_run(ap
->dap
);
310 * Synchronous write of a block of memory, using a specific access size.
312 * @param ap The MEM-AP to access.
313 * @param buffer The data buffer to write. No particular alignment is assumed.
314 * @param size Which access size to use, in bytes. 1, 2 or 4.
315 * @param count The number of writes to do (in size units, not bytes).
316 * @param address Address to be written; it must be writable by the currently selected MEM-AP.
317 * @param addrinc Whether the target address should be increased for each write or not. This
318 * should normally be true, except when writing to e.g. a FIFO.
319 * @return ERROR_OK on success, otherwise an error code.
321 static int mem_ap_write(struct adiv5_ap
*ap
, const uint8_t *buffer
, uint32_t size
, uint32_t count
,
322 uint32_t address
, bool addrinc
)
324 struct adiv5_dap
*dap
= ap
->dap
;
325 size_t nbytes
= size
* count
;
326 const uint32_t csw_addrincr
= addrinc
? CSW_ADDRINC_SINGLE
: CSW_ADDRINC_OFF
;
329 int retval
= ERROR_OK
;
331 /* TI BE-32 Quirks mode:
332 * Writes on big-endian TMS570 behave very strangely. Observed behavior:
333 * size write address bytes written in order
334 * 4 TAR ^ 0 (val >> 24), (val >> 16), (val >> 8), (val)
335 * 2 TAR ^ 2 (val >> 8), (val)
337 * For example, if you attempt to write a single byte to address 0, the processor
338 * will actually write a byte to address 3.
340 * To make writes of size < 4 work as expected, we xor a value with the address before
341 * setting the TAP, and we set the TAP after every transfer rather then relying on
342 * address increment. */
345 csw_size
= CSW_32BIT
;
347 } else if (size
== 2) {
348 csw_size
= CSW_16BIT
;
349 addr_xor
= dap
->ti_be_32_quirks
? 2 : 0;
350 } else if (size
== 1) {
352 addr_xor
= dap
->ti_be_32_quirks
? 3 : 0;
354 return ERROR_TARGET_UNALIGNED_ACCESS
;
357 if (ap
->unaligned_access_bad
&& (address
% size
!= 0))
358 return ERROR_TARGET_UNALIGNED_ACCESS
;
361 uint32_t this_size
= size
;
363 /* Select packed transfer if possible */
364 if (addrinc
&& ap
->packed_transfers
&& nbytes
>= 4
365 && max_tar_block_size(ap
->tar_autoincr_block
, address
) >= 4) {
367 retval
= mem_ap_setup_csw(ap
, csw_size
| CSW_ADDRINC_PACKED
);
369 retval
= mem_ap_setup_csw(ap
, csw_size
| csw_addrincr
);
372 if (retval
!= ERROR_OK
)
375 retval
= mem_ap_setup_tar(ap
, address
^ addr_xor
);
376 if (retval
!= ERROR_OK
)
379 /* How many source bytes each transfer will consume, and their location in the DRW,
380 * depends on the type of transfer and alignment. See ARM document IHI0031C. */
381 uint32_t outvalue
= 0;
382 uint32_t drw_byte_idx
= address
;
383 if (dap
->ti_be_32_quirks
) {
386 outvalue
|= (uint32_t)*buffer
++ << 8 * (3 ^ (drw_byte_idx
++ & 3) ^ addr_xor
);
387 outvalue
|= (uint32_t)*buffer
++ << 8 * (3 ^ (drw_byte_idx
++ & 3) ^ addr_xor
);
388 outvalue
|= (uint32_t)*buffer
++ << 8 * (3 ^ (drw_byte_idx
++ & 3) ^ addr_xor
);
389 outvalue
|= (uint32_t)*buffer
++ << 8 * (3 ^ (drw_byte_idx
& 3) ^ addr_xor
);
392 outvalue
|= (uint32_t)*buffer
++ << 8 * (1 ^ (drw_byte_idx
++ & 3) ^ addr_xor
);
393 outvalue
|= (uint32_t)*buffer
++ << 8 * (1 ^ (drw_byte_idx
& 3) ^ addr_xor
);
396 outvalue
|= (uint32_t)*buffer
++ << 8 * (0 ^ (drw_byte_idx
& 3) ^ addr_xor
);
402 outvalue
|= (uint32_t)*buffer
++ << 8 * (drw_byte_idx
++ & 3);
403 outvalue
|= (uint32_t)*buffer
++ << 8 * (drw_byte_idx
++ & 3);
406 outvalue
|= (uint32_t)*buffer
++ << 8 * (drw_byte_idx
++ & 3);
409 outvalue
|= (uint32_t)*buffer
++ << 8 * (drw_byte_idx
& 3);
415 retval
= dap_queue_ap_write(ap
, MEM_AP_REG_DRW
, outvalue
);
416 if (retval
!= ERROR_OK
)
419 mem_ap_update_tar_cache(ap
);
421 address
+= this_size
;
424 /* REVISIT: Might want to have a queued version of this function that does not run. */
425 if (retval
== ERROR_OK
)
426 retval
= dap_run(dap
);
428 if (retval
!= ERROR_OK
) {
430 if (mem_ap_read_tar(ap
, &tar
) == ERROR_OK
)
431 LOG_ERROR("Failed to write memory at 0x%08"PRIx32
, tar
);
433 LOG_ERROR("Failed to write memory and, additionally, failed to find out where");
440 * Synchronous read of a block of memory, using a specific access size.
442 * @param ap The MEM-AP to access.
443 * @param buffer The data buffer to receive the data. No particular alignment is assumed.
444 * @param size Which access size to use, in bytes. 1, 2 or 4.
445 * @param count The number of reads to do (in size units, not bytes).
446 * @param address Address to be read; it must be readable by the currently selected MEM-AP.
447 * @param addrinc Whether the target address should be increased after each read or not. This
448 * should normally be true, except when reading from e.g. a FIFO.
449 * @return ERROR_OK on success, otherwise an error code.
451 static int mem_ap_read(struct adiv5_ap
*ap
, uint8_t *buffer
, uint32_t size
, uint32_t count
,
452 uint32_t adr
, bool addrinc
)
454 struct adiv5_dap
*dap
= ap
->dap
;
455 size_t nbytes
= size
* count
;
456 const uint32_t csw_addrincr
= addrinc
? CSW_ADDRINC_SINGLE
: CSW_ADDRINC_OFF
;
458 uint32_t address
= adr
;
459 int retval
= ERROR_OK
;
461 /* TI BE-32 Quirks mode:
462 * Reads on big-endian TMS570 behave strangely differently than writes.
463 * They read from the physical address requested, but with DRW byte-reversed.
464 * For example, a byte read from address 0 will place the result in the high bytes of DRW.
465 * Also, packed 8-bit and 16-bit transfers seem to sometimes return garbage in some bytes,
469 csw_size
= CSW_32BIT
;
471 csw_size
= CSW_16BIT
;
475 return ERROR_TARGET_UNALIGNED_ACCESS
;
477 if (ap
->unaligned_access_bad
&& (adr
% size
!= 0))
478 return ERROR_TARGET_UNALIGNED_ACCESS
;
480 /* Allocate buffer to hold the sequence of DRW reads that will be made. This is a significant
481 * over-allocation if packed transfers are going to be used, but determining the real need at
482 * this point would be messy. */
483 uint32_t *read_buf
= calloc(count
, sizeof(uint32_t));
484 /* Multiplication count * sizeof(uint32_t) may overflow, calloc() is safe */
485 uint32_t *read_ptr
= read_buf
;
486 if (read_buf
== NULL
) {
487 LOG_ERROR("Failed to allocate read buffer");
491 /* Queue up all reads. Each read will store the entire DRW word in the read buffer. How many
492 * useful bytes it contains, and their location in the word, depends on the type of transfer
495 uint32_t this_size
= size
;
497 /* Select packed transfer if possible */
498 if (addrinc
&& ap
->packed_transfers
&& nbytes
>= 4
499 && max_tar_block_size(ap
->tar_autoincr_block
, address
) >= 4) {
501 retval
= mem_ap_setup_csw(ap
, csw_size
| CSW_ADDRINC_PACKED
);
503 retval
= mem_ap_setup_csw(ap
, csw_size
| csw_addrincr
);
505 if (retval
!= ERROR_OK
)
508 retval
= mem_ap_setup_tar(ap
, address
);
509 if (retval
!= ERROR_OK
)
512 retval
= dap_queue_ap_read(ap
, MEM_AP_REG_DRW
, read_ptr
++);
513 if (retval
!= ERROR_OK
)
518 address
+= this_size
;
520 mem_ap_update_tar_cache(ap
);
523 if (retval
== ERROR_OK
)
524 retval
= dap_run(dap
);
528 nbytes
= size
* count
;
531 /* If something failed, read TAR to find out how much data was successfully read, so we can
532 * at least give the caller what we have. */
533 if (retval
!= ERROR_OK
) {
535 if (mem_ap_read_tar(ap
, &tar
) == ERROR_OK
) {
536 /* TAR is incremented after failed transfer on some devices (eg Cortex-M4) */
537 LOG_ERROR("Failed to read memory at 0x%08"PRIx32
, tar
);
538 if (nbytes
> tar
- address
)
539 nbytes
= tar
- address
;
541 LOG_ERROR("Failed to read memory and, additionally, failed to find out where");
546 /* Replay loop to populate caller's buffer from the correct word and byte lane */
548 uint32_t this_size
= size
;
550 if (addrinc
&& ap
->packed_transfers
&& nbytes
>= 4
551 && max_tar_block_size(ap
->tar_autoincr_block
, address
) >= 4) {
555 if (dap
->ti_be_32_quirks
) {
558 *buffer
++ = *read_ptr
>> 8 * (3 - (address
++ & 3));
559 *buffer
++ = *read_ptr
>> 8 * (3 - (address
++ & 3));
562 *buffer
++ = *read_ptr
>> 8 * (3 - (address
++ & 3));
565 *buffer
++ = *read_ptr
>> 8 * (3 - (address
++ & 3));
570 *buffer
++ = *read_ptr
>> 8 * (address
++ & 3);
571 *buffer
++ = *read_ptr
>> 8 * (address
++ & 3);
574 *buffer
++ = *read_ptr
>> 8 * (address
++ & 3);
577 *buffer
++ = *read_ptr
>> 8 * (address
++ & 3);
589 int mem_ap_read_buf(struct adiv5_ap
*ap
,
590 uint8_t *buffer
, uint32_t size
, uint32_t count
, uint32_t address
)
592 return mem_ap_read(ap
, buffer
, size
, count
, address
, true);
595 int mem_ap_write_buf(struct adiv5_ap
*ap
,
596 const uint8_t *buffer
, uint32_t size
, uint32_t count
, uint32_t address
)
598 return mem_ap_write(ap
, buffer
, size
, count
, address
, true);
601 int mem_ap_read_buf_noincr(struct adiv5_ap
*ap
,
602 uint8_t *buffer
, uint32_t size
, uint32_t count
, uint32_t address
)
604 return mem_ap_read(ap
, buffer
, size
, count
, address
, false);
607 int mem_ap_write_buf_noincr(struct adiv5_ap
*ap
,
608 const uint8_t *buffer
, uint32_t size
, uint32_t count
, uint32_t address
)
610 return mem_ap_write(ap
, buffer
, size
, count
, address
, false);
613 /*--------------------------------------------------------------------------*/
616 #define DAP_POWER_DOMAIN_TIMEOUT (10)
618 /*--------------------------------------------------------------------------*/
621 * Invalidate cached DP select and cached TAR and CSW of all APs
623 void dap_invalidate_cache(struct adiv5_dap
*dap
)
625 dap
->select
= DP_SELECT_INVALID
;
626 dap
->last_read
= NULL
;
629 for (i
= 0; i
<= 255; i
++) {
630 /* force csw and tar write on the next mem-ap access */
631 dap
->ap
[i
].tar_valid
= false;
632 dap
->ap
[i
].csw_value
= 0;
637 * Initialize a DAP. This sets up the power domains, prepares the DP
638 * for further use and activates overrun checking.
640 * @param dap The DAP being initialized.
642 int dap_dp_init(struct adiv5_dap
*dap
)
646 LOG_DEBUG("%s", adiv5_dap_name(dap
));
648 dap_invalidate_cache(dap
);
650 for (size_t i
= 0; i
< 30; i
++) {
651 /* DP initialization */
653 retval
= dap_dp_read_atomic(dap
, DP_CTRL_STAT
, NULL
);
654 if (retval
== ERROR_OK
)
658 retval
= dap_queue_dp_write(dap
, DP_CTRL_STAT
, SSTICKYERR
);
659 if (retval
!= ERROR_OK
)
662 retval
= dap_queue_dp_read(dap
, DP_CTRL_STAT
, NULL
);
663 if (retval
!= ERROR_OK
)
666 dap
->dp_ctrl_stat
= CDBGPWRUPREQ
| CSYSPWRUPREQ
;
667 retval
= dap_queue_dp_write(dap
, DP_CTRL_STAT
, dap
->dp_ctrl_stat
);
668 if (retval
!= ERROR_OK
)
671 /* Check that we have debug power domains activated */
672 LOG_DEBUG("DAP: wait CDBGPWRUPACK");
673 retval
= dap_dp_poll_register(dap
, DP_CTRL_STAT
,
674 CDBGPWRUPACK
, CDBGPWRUPACK
,
675 DAP_POWER_DOMAIN_TIMEOUT
);
676 if (retval
!= ERROR_OK
)
679 if (!dap
->ignore_syspwrupack
) {
680 LOG_DEBUG("DAP: wait CSYSPWRUPACK");
681 retval
= dap_dp_poll_register(dap
, DP_CTRL_STAT
,
682 CSYSPWRUPACK
, CSYSPWRUPACK
,
683 DAP_POWER_DOMAIN_TIMEOUT
);
684 if (retval
!= ERROR_OK
)
688 retval
= dap_queue_dp_read(dap
, DP_CTRL_STAT
, NULL
);
689 if (retval
!= ERROR_OK
)
692 /* With debug power on we can activate OVERRUN checking */
693 dap
->dp_ctrl_stat
= CDBGPWRUPREQ
| CSYSPWRUPREQ
| CORUNDETECT
;
694 retval
= dap_queue_dp_write(dap
, DP_CTRL_STAT
, dap
->dp_ctrl_stat
);
695 if (retval
!= ERROR_OK
)
697 retval
= dap_queue_dp_read(dap
, DP_CTRL_STAT
, NULL
);
698 if (retval
!= ERROR_OK
)
701 retval
= dap_run(dap
);
702 if (retval
!= ERROR_OK
)
709 * Initialize a DAP. This sets up the power domains, prepares the DP
710 * for further use, and arranges to use AP #0 for all AP operations
711 * until dap_ap-select() changes that policy.
713 * @param ap The MEM-AP being initialized.
715 int mem_ap_init(struct adiv5_ap
*ap
)
717 /* check that we support packed transfers */
720 struct adiv5_dap
*dap
= ap
->dap
;
722 ap
->tar_valid
= false;
723 ap
->csw_value
= 0; /* force csw and tar write */
724 retval
= mem_ap_setup_transfer(ap
, CSW_8BIT
| CSW_ADDRINC_PACKED
, 0);
725 if (retval
!= ERROR_OK
)
728 retval
= dap_queue_ap_read(ap
, MEM_AP_REG_CSW
, &csw
);
729 if (retval
!= ERROR_OK
)
732 retval
= dap_queue_ap_read(ap
, MEM_AP_REG_CFG
, &cfg
);
733 if (retval
!= ERROR_OK
)
736 retval
= dap_run(dap
);
737 if (retval
!= ERROR_OK
)
740 if (csw
& CSW_ADDRINC_PACKED
)
741 ap
->packed_transfers
= true;
743 ap
->packed_transfers
= false;
745 /* Packed transfers on TI BE-32 processors do not work correctly in
747 if (dap
->ti_be_32_quirks
)
748 ap
->packed_transfers
= false;
750 LOG_DEBUG("MEM_AP Packed Transfers: %s",
751 ap
->packed_transfers
? "enabled" : "disabled");
753 /* The ARM ADI spec leaves implementation-defined whether unaligned
754 * memory accesses work, only work partially, or cause a sticky error.
755 * On TI BE-32 processors, reads seem to return garbage in some bytes
756 * and unaligned writes seem to cause a sticky error.
757 * TODO: it would be nice to have a way to detect whether unaligned
758 * operations are supported on other processors. */
759 ap
->unaligned_access_bad
= dap
->ti_be_32_quirks
;
761 LOG_DEBUG("MEM_AP CFG: large data %d, long address %d, big-endian %d",
762 !!(cfg
& 0x04), !!(cfg
& 0x02), !!(cfg
& 0x01));
767 /* CID interpretation -- see ARM IHI 0029B section 3
768 * and ARM IHI 0031A table 13-3.
770 static const char *class_description
[16] = {
771 "Reserved", "ROM table", "Reserved", "Reserved",
772 "Reserved", "Reserved", "Reserved", "Reserved",
773 "Reserved", "CoreSight component", "Reserved", "Peripheral Test Block",
774 "Reserved", "OptimoDE DESS",
775 "Generic IP component", "PrimeCell or System component"
778 static bool is_dap_cid_ok(uint32_t cid
)
780 return (cid
& 0xffff0fff) == 0xb105000d;
784 * This function checks the ID for each access port to find the requested Access Port type
786 int dap_find_ap(struct adiv5_dap
*dap
, enum ap_type type_to_find
, struct adiv5_ap
**ap_out
)
790 /* Maximum AP number is 255 since the SELECT register is 8 bits */
791 for (ap_num
= 0; ap_num
<= 255; ap_num
++) {
793 /* read the IDR register of the Access Port */
796 int retval
= dap_queue_ap_read(dap_ap(dap
, ap_num
), AP_REG_IDR
, &id_val
);
797 if (retval
!= ERROR_OK
)
800 retval
= dap_run(dap
);
804 * 27-24 : JEDEC bank (0x4 for ARM)
805 * 23-17 : JEDEC code (0x3B for ARM)
806 * 16-13 : Class (0b1000=Mem-AP)
808 * 7-4 : AP Variant (non-zero for JTAG-AP)
809 * 3-0 : AP Type (0=JTAG-AP 1=AHB-AP 2=APB-AP 4=AXI-AP)
812 /* Reading register for a non-existant AP should not cause an error,
813 * but just to be sure, try to continue searching if an error does happen.
815 if ((retval
== ERROR_OK
) && /* Register read success */
816 ((id_val
& IDR_JEP106
) == IDR_JEP106_ARM
) && /* Jedec codes match */
817 ((id_val
& IDR_TYPE
) == type_to_find
)) { /* type matches*/
819 LOG_DEBUG("Found %s at AP index: %d (IDR=0x%08" PRIX32
")",
820 (type_to_find
== AP_TYPE_AHB_AP
) ? "AHB-AP" :
821 (type_to_find
== AP_TYPE_APB_AP
) ? "APB-AP" :
822 (type_to_find
== AP_TYPE_AXI_AP
) ? "AXI-AP" :
823 (type_to_find
== AP_TYPE_JTAG_AP
) ? "JTAG-AP" : "Unknown",
826 *ap_out
= &dap
->ap
[ap_num
];
831 LOG_DEBUG("No %s found",
832 (type_to_find
== AP_TYPE_AHB_AP
) ? "AHB-AP" :
833 (type_to_find
== AP_TYPE_APB_AP
) ? "APB-AP" :
834 (type_to_find
== AP_TYPE_AXI_AP
) ? "AXI-AP" :
835 (type_to_find
== AP_TYPE_JTAG_AP
) ? "JTAG-AP" : "Unknown");
839 int dap_get_debugbase(struct adiv5_ap
*ap
,
840 uint32_t *dbgbase
, uint32_t *apid
)
842 struct adiv5_dap
*dap
= ap
->dap
;
845 retval
= dap_queue_ap_read(ap
, MEM_AP_REG_BASE
, dbgbase
);
846 if (retval
!= ERROR_OK
)
848 retval
= dap_queue_ap_read(ap
, AP_REG_IDR
, apid
);
849 if (retval
!= ERROR_OK
)
851 retval
= dap_run(dap
);
852 if (retval
!= ERROR_OK
)
858 int dap_lookup_cs_component(struct adiv5_ap
*ap
,
859 uint32_t dbgbase
, uint8_t type
, uint32_t *addr
, int32_t *idx
)
861 uint32_t romentry
, entry_offset
= 0, component_base
, devtype
;
867 retval
= mem_ap_read_atomic_u32(ap
, (dbgbase
&0xFFFFF000) |
868 entry_offset
, &romentry
);
869 if (retval
!= ERROR_OK
)
872 component_base
= (dbgbase
& 0xFFFFF000)
873 + (romentry
& 0xFFFFF000);
875 if (romentry
& 0x1) {
877 retval
= mem_ap_read_atomic_u32(ap
, component_base
| 0xff4, &c_cid1
);
878 if (retval
!= ERROR_OK
) {
879 LOG_ERROR("Can't read component with base address 0x%" PRIx32
880 ", the corresponding core might be turned off", component_base
);
883 if (((c_cid1
>> 4) & 0x0f) == 1) {
884 retval
= dap_lookup_cs_component(ap
, component_base
,
886 if (retval
== ERROR_OK
)
888 if (retval
!= ERROR_TARGET_RESOURCE_NOT_AVAILABLE
)
892 retval
= mem_ap_read_atomic_u32(ap
,
893 (component_base
& 0xfffff000) | 0xfcc,
895 if (retval
!= ERROR_OK
)
897 if ((devtype
& 0xff) == type
) {
899 *addr
= component_base
;
906 } while (romentry
> 0);
909 return ERROR_TARGET_RESOURCE_NOT_AVAILABLE
;
914 static int dap_read_part_id(struct adiv5_ap
*ap
, uint32_t component_base
, uint32_t *cid
, uint64_t *pid
)
916 assert((component_base
& 0xFFF) == 0);
917 assert(ap
!= NULL
&& cid
!= NULL
&& pid
!= NULL
);
919 uint32_t cid0
, cid1
, cid2
, cid3
;
920 uint32_t pid0
, pid1
, pid2
, pid3
, pid4
;
923 /* IDs are in last 4K section */
924 retval
= mem_ap_read_u32(ap
, component_base
+ 0xFE0, &pid0
);
925 if (retval
!= ERROR_OK
)
927 retval
= mem_ap_read_u32(ap
, component_base
+ 0xFE4, &pid1
);
928 if (retval
!= ERROR_OK
)
930 retval
= mem_ap_read_u32(ap
, component_base
+ 0xFE8, &pid2
);
931 if (retval
!= ERROR_OK
)
933 retval
= mem_ap_read_u32(ap
, component_base
+ 0xFEC, &pid3
);
934 if (retval
!= ERROR_OK
)
936 retval
= mem_ap_read_u32(ap
, component_base
+ 0xFD0, &pid4
);
937 if (retval
!= ERROR_OK
)
939 retval
= mem_ap_read_u32(ap
, component_base
+ 0xFF0, &cid0
);
940 if (retval
!= ERROR_OK
)
942 retval
= mem_ap_read_u32(ap
, component_base
+ 0xFF4, &cid1
);
943 if (retval
!= ERROR_OK
)
945 retval
= mem_ap_read_u32(ap
, component_base
+ 0xFF8, &cid2
);
946 if (retval
!= ERROR_OK
)
948 retval
= mem_ap_read_u32(ap
, component_base
+ 0xFFC, &cid3
);
949 if (retval
!= ERROR_OK
)
952 retval
= dap_run(ap
->dap
);
953 if (retval
!= ERROR_OK
)
956 *cid
= (cid3
& 0xff) << 24
957 | (cid2
& 0xff) << 16
960 *pid
= (uint64_t)(pid4
& 0xff) << 32
961 | (pid3
& 0xff) << 24
962 | (pid2
& 0xff) << 16
969 /* The designer identity code is encoded as:
970 * bits 11:8 : JEP106 Bank (number of continuation codes), only valid when bit 7 is 1.
971 * bit 7 : Set when bits 6:0 represent a JEP106 ID and cleared when bits 6:0 represent
972 * a legacy ASCII Identity Code.
973 * bits 6:0 : JEP106 Identity Code (without parity) or legacy ASCII code according to bit 7.
974 * JEP106 is a standard available from jedec.org
977 /* Part number interpretations are from Cortex
978 * core specs, the CoreSight components TRM
979 * (ARM DDI 0314H), CoreSight System Design
980 * Guide (ARM DGI 0012D) and ETM specs; also
981 * from chip observation (e.g. TI SDTI).
984 /* The legacy code only used the part number field to identify CoreSight peripherals.
985 * This meant that the same part number from two different manufacturers looked the same.
986 * It is desirable for all future additions to identify with both part number and JEP106.
987 * "ANY_ID" is a wildcard (any JEP106) only to preserve legacy behavior for legacy entries.
990 #define ANY_ID 0x1000
994 static const struct {
995 uint16_t designer_id
;
1000 { ARM_ID
, 0x000, "Cortex-M3 SCS", "(System Control Space)", },
1001 { ARM_ID
, 0x001, "Cortex-M3 ITM", "(Instrumentation Trace Module)", },
1002 { ARM_ID
, 0x002, "Cortex-M3 DWT", "(Data Watchpoint and Trace)", },
1003 { ARM_ID
, 0x003, "Cortex-M3 FPB", "(Flash Patch and Breakpoint)", },
1004 { ARM_ID
, 0x008, "Cortex-M0 SCS", "(System Control Space)", },
1005 { ARM_ID
, 0x00a, "Cortex-M0 DWT", "(Data Watchpoint and Trace)", },
1006 { ARM_ID
, 0x00b, "Cortex-M0 BPU", "(Breakpoint Unit)", },
1007 { ARM_ID
, 0x00c, "Cortex-M4 SCS", "(System Control Space)", },
1008 { ARM_ID
, 0x00d, "CoreSight ETM11", "(Embedded Trace)", },
1009 { ARM_ID
, 0x00e, "Cortex-M7 FPB", "(Flash Patch and Breakpoint)", },
1010 { ARM_ID
, 0x490, "Cortex-A15 GIC", "(Generic Interrupt Controller)", },
1011 { ARM_ID
, 0x4a1, "Cortex-A53 ROM", "(v8 Memory Map ROM Table)", },
1012 { ARM_ID
, 0x4a2, "Cortex-A57 ROM", "(ROM Table)", },
1013 { ARM_ID
, 0x4a3, "Cortex-A53 ROM", "(v7 Memory Map ROM Table)", },
1014 { ARM_ID
, 0x4a4, "Cortex-A72 ROM", "(ROM Table)", },
1015 { ARM_ID
, 0x4a9, "Cortex-A9 ROM", "(ROM Table)", },
1016 { ARM_ID
, 0x4af, "Cortex-A15 ROM", "(ROM Table)", },
1017 { ARM_ID
, 0x4c0, "Cortex-M0+ ROM", "(ROM Table)", },
1018 { ARM_ID
, 0x4c3, "Cortex-M3 ROM", "(ROM Table)", },
1019 { ARM_ID
, 0x4c4, "Cortex-M4 ROM", "(ROM Table)", },
1020 { ARM_ID
, 0x4c7, "Cortex-M7 PPB ROM", "(Private Peripheral Bus ROM Table)", },
1021 { ARM_ID
, 0x4c8, "Cortex-M7 ROM", "(ROM Table)", },
1022 { ARM_ID
, 0x4b5, "Cortex-R5 ROM", "(ROM Table)", },
1023 { ARM_ID
, 0x470, "Cortex-M1 ROM", "(ROM Table)", },
1024 { ARM_ID
, 0x471, "Cortex-M0 ROM", "(ROM Table)", },
1025 { ARM_ID
, 0x906, "CoreSight CTI", "(Cross Trigger)", },
1026 { ARM_ID
, 0x907, "CoreSight ETB", "(Trace Buffer)", },
1027 { ARM_ID
, 0x908, "CoreSight CSTF", "(Trace Funnel)", },
1028 { ARM_ID
, 0x909, "CoreSight ATBR", "(Advanced Trace Bus Replicator)", },
1029 { ARM_ID
, 0x910, "CoreSight ETM9", "(Embedded Trace)", },
1030 { ARM_ID
, 0x912, "CoreSight TPIU", "(Trace Port Interface Unit)", },
1031 { ARM_ID
, 0x913, "CoreSight ITM", "(Instrumentation Trace Macrocell)", },
1032 { ARM_ID
, 0x914, "CoreSight SWO", "(Single Wire Output)", },
1033 { ARM_ID
, 0x917, "CoreSight HTM", "(AHB Trace Macrocell)", },
1034 { ARM_ID
, 0x920, "CoreSight ETM11", "(Embedded Trace)", },
1035 { ARM_ID
, 0x921, "Cortex-A8 ETM", "(Embedded Trace)", },
1036 { ARM_ID
, 0x922, "Cortex-A8 CTI", "(Cross Trigger)", },
1037 { ARM_ID
, 0x923, "Cortex-M3 TPIU", "(Trace Port Interface Unit)", },
1038 { ARM_ID
, 0x924, "Cortex-M3 ETM", "(Embedded Trace)", },
1039 { ARM_ID
, 0x925, "Cortex-M4 ETM", "(Embedded Trace)", },
1040 { ARM_ID
, 0x930, "Cortex-R4 ETM", "(Embedded Trace)", },
1041 { ARM_ID
, 0x931, "Cortex-R5 ETM", "(Embedded Trace)", },
1042 { ARM_ID
, 0x932, "CoreSight MTB-M0+", "(Micro Trace Buffer)", },
1043 { ARM_ID
, 0x941, "CoreSight TPIU-Lite", "(Trace Port Interface Unit)", },
1044 { ARM_ID
, 0x950, "Cortex-A9 PTM", "(Program Trace Macrocell)", },
1045 { ARM_ID
, 0x955, "Cortex-A5 ETM", "(Embedded Trace)", },
1046 { ARM_ID
, 0x95a, "Cortex-A72 ETM", "(Embedded Trace)", },
1047 { ARM_ID
, 0x95b, "Cortex-A17 PTM", "(Program Trace Macrocell)", },
1048 { ARM_ID
, 0x95d, "Cortex-A53 ETM", "(Embedded Trace)", },
1049 { ARM_ID
, 0x95e, "Cortex-A57 ETM", "(Embedded Trace)", },
1050 { ARM_ID
, 0x95f, "Cortex-A15 PTM", "(Program Trace Macrocell)", },
1051 { ARM_ID
, 0x961, "CoreSight TMC", "(Trace Memory Controller)", },
1052 { ARM_ID
, 0x962, "CoreSight STM", "(System Trace Macrocell)", },
1053 { ARM_ID
, 0x975, "Cortex-M7 ETM", "(Embedded Trace)", },
1054 { ARM_ID
, 0x9a0, "CoreSight PMU", "(Performance Monitoring Unit)", },
1055 { ARM_ID
, 0x9a1, "Cortex-M4 TPIU", "(Trace Port Interface Unit)", },
1056 { ARM_ID
, 0x9a4, "CoreSight GPR", "(Granular Power Requester)", },
1057 { ARM_ID
, 0x9a5, "Cortex-A5 PMU", "(Performance Monitor Unit)", },
1058 { ARM_ID
, 0x9a7, "Cortex-A7 PMU", "(Performance Monitor Unit)", },
1059 { ARM_ID
, 0x9a8, "Cortex-A53 CTI", "(Cross Trigger)", },
1060 { ARM_ID
, 0x9a9, "Cortex-M7 TPIU", "(Trace Port Interface Unit)", },
1061 { ARM_ID
, 0x9ae, "Cortex-A17 PMU", "(Performance Monitor Unit)", },
1062 { ARM_ID
, 0x9af, "Cortex-A15 PMU", "(Performance Monitor Unit)", },
1063 { ARM_ID
, 0x9b7, "Cortex-R7 PMU", "(Performance Monitor Unit)", },
1064 { ARM_ID
, 0x9d3, "Cortex-A53 PMU", "(Performance Monitor Unit)", },
1065 { ARM_ID
, 0x9d7, "Cortex-A57 PMU", "(Performance Monitor Unit)", },
1066 { ARM_ID
, 0x9d8, "Cortex-A72 PMU", "(Performance Monitor Unit)", },
1067 { ARM_ID
, 0xc05, "Cortex-A5 Debug", "(Debug Unit)", },
1068 { ARM_ID
, 0xc07, "Cortex-A7 Debug", "(Debug Unit)", },
1069 { ARM_ID
, 0xc08, "Cortex-A8 Debug", "(Debug Unit)", },
1070 { ARM_ID
, 0xc09, "Cortex-A9 Debug", "(Debug Unit)", },
1071 { ARM_ID
, 0xc0e, "Cortex-A17 Debug", "(Debug Unit)", },
1072 { ARM_ID
, 0xc0f, "Cortex-A15 Debug", "(Debug Unit)", },
1073 { ARM_ID
, 0xc14, "Cortex-R4 Debug", "(Debug Unit)", },
1074 { ARM_ID
, 0xc15, "Cortex-R5 Debug", "(Debug Unit)", },
1075 { ARM_ID
, 0xc17, "Cortex-R7 Debug", "(Debug Unit)", },
1076 { ARM_ID
, 0xd03, "Cortex-A53 Debug", "(Debug Unit)", },
1077 { ARM_ID
, 0xd07, "Cortex-A57 Debug", "(Debug Unit)", },
1078 { ARM_ID
, 0xd08, "Cortex-A72 Debug", "(Debug Unit)", },
1079 { 0x097, 0x9af, "MSP432 ROM", "(ROM Table)" },
1080 { 0x09f, 0xcd0, "Atmel CPU with DSU", "(CPU)" },
1081 { 0x0c1, 0x1db, "XMC4500 ROM", "(ROM Table)" },
1082 { 0x0c1, 0x1df, "XMC4700/4800 ROM", "(ROM Table)" },
1083 { 0x0c1, 0x1ed, "XMC1000 ROM", "(ROM Table)" },
1084 { 0x0E5, 0x000, "SHARC+/Blackfin+", "", },
1085 { 0x0F0, 0x440, "Qualcomm QDSS Component v1", "(Qualcomm Designed CoreSight Component v1)", },
1086 { 0x3eb, 0x181, "Tegra 186 ROM", "(ROM Table)", },
1087 { 0x3eb, 0x211, "Tegra 210 ROM", "(ROM Table)", },
1088 { 0x3eb, 0x202, "Denver ETM", "(Denver Embedded Trace)", },
1089 { 0x3eb, 0x302, "Denver Debug", "(Debug Unit)", },
1090 { 0x3eb, 0x402, "Denver PMU", "(Performance Monitor Unit)", },
1091 /* legacy comment: 0x113: what? */
1092 { ANY_ID
, 0x120, "TI SDTI", "(System Debug Trace Interface)", }, /* from OMAP3 memmap */
1093 { ANY_ID
, 0x343, "TI DAPCTL", "", }, /* from OMAP3 memmap */
1096 static int dap_rom_display(struct command_context
*cmd_ctx
,
1097 struct adiv5_ap
*ap
, uint32_t dbgbase
, int depth
)
1105 command_print(cmd_ctx
, "\tTables too deep");
1110 snprintf(tabs
, sizeof(tabs
), "[L%02d] ", depth
);
1112 uint32_t base_addr
= dbgbase
& 0xFFFFF000;
1113 command_print(cmd_ctx
, "\t\tComponent base address 0x%08" PRIx32
, base_addr
);
1115 retval
= dap_read_part_id(ap
, base_addr
, &cid
, &pid
);
1116 if (retval
!= ERROR_OK
) {
1117 command_print(cmd_ctx
, "\t\tCan't read component, the corresponding core might be turned off");
1118 return ERROR_OK
; /* Don't abort recursion */
1121 if (!is_dap_cid_ok(cid
)) {
1122 command_print(cmd_ctx
, "\t\tInvalid CID 0x%08" PRIx32
, cid
);
1123 return ERROR_OK
; /* Don't abort recursion */
1126 /* component may take multiple 4K pages */
1127 uint32_t size
= (pid
>> 36) & 0xf;
1129 command_print(cmd_ctx
, "\t\tStart address 0x%08" PRIx32
, (uint32_t)(base_addr
- 0x1000 * size
));
1131 command_print(cmd_ctx
, "\t\tPeripheral ID 0x%010" PRIx64
, pid
);
1133 uint8_t class = (cid
>> 12) & 0xf;
1134 uint16_t part_num
= pid
& 0xfff;
1135 uint16_t designer_id
= ((pid
>> 32) & 0xf) << 8 | ((pid
>> 12) & 0xff);
1137 if (designer_id
& 0x80) {
1139 command_print(cmd_ctx
, "\t\tDesigner is 0x%03" PRIx16
", %s",
1140 designer_id
, jep106_manufacturer(designer_id
>> 8, designer_id
& 0x7f));
1142 /* Legacy ASCII ID, clear invalid bits */
1143 designer_id
&= 0x7f;
1144 command_print(cmd_ctx
, "\t\tDesigner ASCII code 0x%02" PRIx16
", %s",
1145 designer_id
, designer_id
== 0x41 ? "ARM" : "<unknown>");
1148 /* default values to be overwritten upon finding a match */
1149 const char *type
= "Unrecognized";
1150 const char *full
= "";
1152 /* search dap_partnums[] array for a match */
1153 for (unsigned entry
= 0; entry
< ARRAY_SIZE(dap_partnums
); entry
++) {
1155 if ((dap_partnums
[entry
].designer_id
!= designer_id
) && (dap_partnums
[entry
].designer_id
!= ANY_ID
))
1158 if (dap_partnums
[entry
].part_num
!= part_num
)
1161 type
= dap_partnums
[entry
].type
;
1162 full
= dap_partnums
[entry
].full
;
1166 command_print(cmd_ctx
, "\t\tPart is 0x%" PRIx16
", %s %s", part_num
, type
, full
);
1167 command_print(cmd_ctx
, "\t\tComponent class is 0x%" PRIx8
", %s", class, class_description
[class]);
1169 if (class == 1) { /* ROM Table */
1171 retval
= mem_ap_read_atomic_u32(ap
, base_addr
| 0xFCC, &memtype
);
1172 if (retval
!= ERROR_OK
)
1176 command_print(cmd_ctx
, "\t\tMEMTYPE system memory present on bus");
1178 command_print(cmd_ctx
, "\t\tMEMTYPE system memory not present: dedicated debug bus");
1180 /* Read ROM table entries from base address until we get 0x00000000 or reach the reserved area */
1181 for (uint16_t entry_offset
= 0; entry_offset
< 0xF00; entry_offset
+= 4) {
1183 retval
= mem_ap_read_atomic_u32(ap
, base_addr
| entry_offset
, &romentry
);
1184 if (retval
!= ERROR_OK
)
1186 command_print(cmd_ctx
, "\t%sROMTABLE[0x%x] = 0x%" PRIx32
"",
1187 tabs
, entry_offset
, romentry
);
1188 if (romentry
& 0x01) {
1190 retval
= dap_rom_display(cmd_ctx
, ap
, base_addr
+ (romentry
& 0xFFFFF000), depth
+ 1);
1191 if (retval
!= ERROR_OK
)
1193 } else if (romentry
!= 0) {
1194 command_print(cmd_ctx
, "\t\tComponent not present");
1196 command_print(cmd_ctx
, "\t%s\tEnd of ROM table", tabs
);
1200 } else if (class == 9) { /* CoreSight component */
1201 const char *major
= "Reserved", *subtype
= "Reserved";
1204 retval
= mem_ap_read_atomic_u32(ap
, base_addr
| 0xFCC, &devtype
);
1205 if (retval
!= ERROR_OK
)
1207 unsigned minor
= (devtype
>> 4) & 0x0f;
1208 switch (devtype
& 0x0f) {
1210 major
= "Miscellaneous";
1216 subtype
= "Validation component";
1221 major
= "Trace Sink";
1238 major
= "Trace Link";
1244 subtype
= "Funnel, router";
1250 subtype
= "FIFO, buffer";
1255 major
= "Trace Source";
1261 subtype
= "Processor";
1267 subtype
= "Engine/Coprocessor";
1273 subtype
= "Software";
1278 major
= "Debug Control";
1284 subtype
= "Trigger Matrix";
1287 subtype
= "Debug Auth";
1290 subtype
= "Power Requestor";
1295 major
= "Debug Logic";
1301 subtype
= "Processor";
1307 subtype
= "Engine/Coprocessor";
1318 major
= "Perfomance Monitor";
1324 subtype
= "Processor";
1330 subtype
= "Engine/Coprocessor";
1341 command_print(cmd_ctx
, "\t\tType is 0x%02" PRIx8
", %s, %s",
1342 (uint8_t)(devtype
& 0xff),
1344 /* REVISIT also show 0xfc8 DevId */
1350 int dap_info_command(struct command_context
*cmd_ctx
,
1351 struct adiv5_ap
*ap
)
1354 uint32_t dbgbase
, apid
;
1357 /* Now we read ROM table ID registers, ref. ARM IHI 0029B sec */
1358 retval
= dap_get_debugbase(ap
, &dbgbase
, &apid
);
1359 if (retval
!= ERROR_OK
)
1362 command_print(cmd_ctx
, "AP ID register 0x%8.8" PRIx32
, apid
);
1364 command_print(cmd_ctx
, "No AP found at this ap 0x%x", ap
->ap_num
);
1368 switch (apid
& (IDR_JEP106
| IDR_TYPE
)) {
1369 case IDR_JEP106_ARM
| AP_TYPE_JTAG_AP
:
1370 command_print(cmd_ctx
, "\tType is JTAG-AP");
1372 case IDR_JEP106_ARM
| AP_TYPE_AHB_AP
:
1373 command_print(cmd_ctx
, "\tType is MEM-AP AHB");
1375 case IDR_JEP106_ARM
| AP_TYPE_APB_AP
:
1376 command_print(cmd_ctx
, "\tType is MEM-AP APB");
1378 case IDR_JEP106_ARM
| AP_TYPE_AXI_AP
:
1379 command_print(cmd_ctx
, "\tType is MEM-AP AXI");
1382 command_print(cmd_ctx
, "\tUnknown AP type");
1386 /* NOTE: a MEM-AP may have a single CoreSight component that's
1387 * not a ROM table ... or have no such components at all.
1389 mem_ap
= (apid
& IDR_CLASS
) == AP_CLASS_MEM_AP
;
1391 command_print(cmd_ctx
, "MEM-AP BASE 0x%8.8" PRIx32
, dbgbase
);
1393 if (dbgbase
== 0xFFFFFFFF || (dbgbase
& 0x3) == 0x2) {
1394 command_print(cmd_ctx
, "\tNo ROM table present");
1397 command_print(cmd_ctx
, "\tValid ROM table present");
1399 command_print(cmd_ctx
, "\tROM table in legacy format");
1401 dap_rom_display(cmd_ctx
, ap
, dbgbase
& 0xFFFFF000, 0);
1408 enum adiv5_cfg_param
{
1413 static const Jim_Nvp nvp_config_opts
[] = {
1414 { .name
= "-dap", .value
= CFG_DAP
},
1415 { .name
= "-ap-num", .value
= CFG_AP_NUM
},
1416 { .name
= NULL
, .value
= -1 }
1419 int adiv5_jim_configure(struct target
*target
, Jim_GetOptInfo
*goi
)
1421 struct adiv5_private_config
*pc
;
1424 pc
= (struct adiv5_private_config
*)target
->private_config
;
1426 pc
= calloc(1, sizeof(struct adiv5_private_config
));
1428 target
->private_config
= pc
;
1431 target
->has_dap
= true;
1433 if (goi
->argc
> 0) {
1436 Jim_SetEmptyResult(goi
->interp
);
1438 /* check first if topmost item is for us */
1439 e
= Jim_Nvp_name2value_obj(goi
->interp
, nvp_config_opts
,
1442 return JIM_CONTINUE
;
1444 e
= Jim_GetOpt_Obj(goi
, NULL
);
1450 if (goi
->isconfigure
) {
1452 struct adiv5_dap
*dap
;
1453 e
= Jim_GetOpt_Obj(goi
, &o_t
);
1456 dap
= dap_instance_by_jim_obj(goi
->interp
, o_t
);
1458 Jim_SetResultString(goi
->interp
, "DAP name invalid!", -1);
1461 if (pc
->dap
!= NULL
&& pc
->dap
!= dap
) {
1462 Jim_SetResultString(goi
->interp
,
1463 "DAP assignment cannot be changed after target was created!", -1);
1466 if (target
->tap_configured
) {
1467 Jim_SetResultString(goi
->interp
,
1468 "-chain-position and -dap configparams are mutually exclusive!", -1);
1472 target
->tap
= dap
->tap
;
1473 target
->dap_configured
= true;
1475 if (goi
->argc
!= 0) {
1476 Jim_WrongNumArgs(goi
->interp
,
1477 goi
->argc
, goi
->argv
,
1482 if (pc
->dap
== NULL
) {
1483 Jim_SetResultString(goi
->interp
, "DAP not configured", -1);
1486 Jim_SetResultString(goi
->interp
, adiv5_dap_name(pc
->dap
), -1);
1491 if (goi
->isconfigure
) {
1493 e
= Jim_GetOpt_Wide(goi
, &ap_num
);
1496 pc
->ap_num
= ap_num
;
1498 if (goi
->argc
!= 0) {
1499 Jim_WrongNumArgs(goi
->interp
,
1500 goi
->argc
, goi
->argv
,
1505 if (pc
->ap_num
< 0) {
1506 Jim_SetResultString(goi
->interp
, "AP number not configured", -1);
1509 Jim_SetResult(goi
->interp
, Jim_NewIntObj(goi
->interp
, (int)pc
->ap_num
));
1518 int adiv5_verify_config(struct adiv5_private_config
*pc
)
1523 if (pc
->dap
== NULL
)
1530 COMMAND_HANDLER(handle_dap_info_command
)
1532 struct adiv5_dap
*dap
= adiv5_get_dap(CMD_DATA
);
1540 COMMAND_PARSE_NUMBER(u32
, CMD_ARGV
[0], apsel
);
1542 return ERROR_COMMAND_SYNTAX_ERROR
;
1545 return ERROR_COMMAND_SYNTAX_ERROR
;
1548 return dap_info_command(CMD_CTX
, &dap
->ap
[apsel
]);
1551 COMMAND_HANDLER(dap_baseaddr_command
)
1553 struct adiv5_dap
*dap
= adiv5_get_dap(CMD_DATA
);
1554 uint32_t apsel
, baseaddr
;
1562 COMMAND_PARSE_NUMBER(u32
, CMD_ARGV
[0], apsel
);
1563 /* AP address is in bits 31:24 of DP_SELECT */
1565 return ERROR_COMMAND_SYNTAX_ERROR
;
1568 return ERROR_COMMAND_SYNTAX_ERROR
;
1571 /* NOTE: assumes we're talking to a MEM-AP, which
1572 * has a base address. There are other kinds of AP,
1573 * though they're not common for now. This should
1574 * use the ID register to verify it's a MEM-AP.
1576 retval
= dap_queue_ap_read(dap_ap(dap
, apsel
), MEM_AP_REG_BASE
, &baseaddr
);
1577 if (retval
!= ERROR_OK
)
1579 retval
= dap_run(dap
);
1580 if (retval
!= ERROR_OK
)
1583 command_print(CMD_CTX
, "0x%8.8" PRIx32
, baseaddr
);
1588 COMMAND_HANDLER(dap_memaccess_command
)
1590 struct adiv5_dap
*dap
= adiv5_get_dap(CMD_DATA
);
1591 uint32_t memaccess_tck
;
1595 memaccess_tck
= dap
->ap
[dap
->apsel
].memaccess_tck
;
1598 COMMAND_PARSE_NUMBER(u32
, CMD_ARGV
[0], memaccess_tck
);
1601 return ERROR_COMMAND_SYNTAX_ERROR
;
1603 dap
->ap
[dap
->apsel
].memaccess_tck
= memaccess_tck
;
1605 command_print(CMD_CTX
, "memory bus access delay set to %" PRIi32
" tck",
1606 dap
->ap
[dap
->apsel
].memaccess_tck
);
1611 COMMAND_HANDLER(dap_apsel_command
)
1613 struct adiv5_dap
*dap
= adiv5_get_dap(CMD_DATA
);
1614 uint32_t apsel
, apid
;
1622 COMMAND_PARSE_NUMBER(u32
, CMD_ARGV
[0], apsel
);
1623 /* AP address is in bits 31:24 of DP_SELECT */
1625 return ERROR_COMMAND_SYNTAX_ERROR
;
1628 return ERROR_COMMAND_SYNTAX_ERROR
;
1633 retval
= dap_queue_ap_read(dap_ap(dap
, apsel
), AP_REG_IDR
, &apid
);
1634 if (retval
!= ERROR_OK
)
1636 retval
= dap_run(dap
);
1637 if (retval
!= ERROR_OK
)
1640 command_print(CMD_CTX
, "ap %" PRIi32
" selected, identification register 0x%8.8" PRIx32
,
1646 COMMAND_HANDLER(dap_apcsw_command
)
1648 struct adiv5_dap
*dap
= adiv5_get_dap(CMD_DATA
);
1649 uint32_t apcsw
= dap
->ap
[dap
->apsel
].csw_default
;
1654 command_print(CMD_CTX
, "apsel %" PRIi32
" selected, csw 0x%8.8" PRIx32
,
1655 (dap
->apsel
), apcsw
);
1658 COMMAND_PARSE_NUMBER(u32
, CMD_ARGV
[0], sprot
);
1659 /* AP address is in bits 31:24 of DP_SELECT */
1661 return ERROR_COMMAND_SYNTAX_ERROR
;
1665 apcsw
&= ~CSW_SPROT
;
1668 return ERROR_COMMAND_SYNTAX_ERROR
;
1670 dap
->ap
[dap
->apsel
].csw_default
= apcsw
;
1677 COMMAND_HANDLER(dap_apid_command
)
1679 struct adiv5_dap
*dap
= adiv5_get_dap(CMD_DATA
);
1680 uint32_t apsel
, apid
;
1688 COMMAND_PARSE_NUMBER(u32
, CMD_ARGV
[0], apsel
);
1689 /* AP address is in bits 31:24 of DP_SELECT */
1691 return ERROR_COMMAND_SYNTAX_ERROR
;
1694 return ERROR_COMMAND_SYNTAX_ERROR
;
1697 retval
= dap_queue_ap_read(dap_ap(dap
, apsel
), AP_REG_IDR
, &apid
);
1698 if (retval
!= ERROR_OK
)
1700 retval
= dap_run(dap
);
1701 if (retval
!= ERROR_OK
)
1704 command_print(CMD_CTX
, "0x%8.8" PRIx32
, apid
);
1709 COMMAND_HANDLER(dap_apreg_command
)
1711 struct adiv5_dap
*dap
= adiv5_get_dap(CMD_DATA
);
1712 uint32_t apsel
, reg
, value
;
1715 if (CMD_ARGC
< 2 || CMD_ARGC
> 3)
1716 return ERROR_COMMAND_SYNTAX_ERROR
;
1718 COMMAND_PARSE_NUMBER(u32
, CMD_ARGV
[0], apsel
);
1719 /* AP address is in bits 31:24 of DP_SELECT */
1721 return ERROR_COMMAND_SYNTAX_ERROR
;
1723 COMMAND_PARSE_NUMBER(u32
, CMD_ARGV
[1], reg
);
1724 if (reg
>= 256 || (reg
& 3))
1725 return ERROR_COMMAND_SYNTAX_ERROR
;
1727 if (CMD_ARGC
== 3) {
1728 COMMAND_PARSE_NUMBER(u32
, CMD_ARGV
[2], value
);
1729 retval
= dap_queue_ap_write(dap_ap(dap
, apsel
), reg
, value
);
1731 retval
= dap_queue_ap_read(dap_ap(dap
, apsel
), reg
, &value
);
1733 if (retval
== ERROR_OK
)
1734 retval
= dap_run(dap
);
1736 if (retval
!= ERROR_OK
)
1740 command_print(CMD_CTX
, "0x%08" PRIx32
, value
);
1745 COMMAND_HANDLER(dap_ti_be_32_quirks_command
)
1747 struct adiv5_dap
*dap
= adiv5_get_dap(CMD_DATA
);
1748 uint32_t enable
= dap
->ti_be_32_quirks
;
1754 COMMAND_PARSE_NUMBER(u32
, CMD_ARGV
[0], enable
);
1756 return ERROR_COMMAND_SYNTAX_ERROR
;
1759 return ERROR_COMMAND_SYNTAX_ERROR
;
1761 dap
->ti_be_32_quirks
= enable
;
1762 command_print(CMD_CTX
, "TI BE-32 quirks mode %s",
1763 enable
? "enabled" : "disabled");
1768 const struct command_registration dap_instance_commands
[] = {
1771 .handler
= handle_dap_info_command
,
1772 .mode
= COMMAND_EXEC
,
1773 .help
= "display ROM table for MEM-AP "
1774 "(default currently selected AP)",
1775 .usage
= "[ap_num]",
1779 .handler
= dap_apsel_command
,
1780 .mode
= COMMAND_EXEC
,
1781 .help
= "Set the currently selected AP (default 0) "
1782 "and display the result",
1783 .usage
= "[ap_num]",
1787 .handler
= dap_apcsw_command
,
1788 .mode
= COMMAND_EXEC
,
1789 .help
= "Set csw access bit ",
1795 .handler
= dap_apid_command
,
1796 .mode
= COMMAND_EXEC
,
1797 .help
= "return ID register from AP "
1798 "(default currently selected AP)",
1799 .usage
= "[ap_num]",
1803 .handler
= dap_apreg_command
,
1804 .mode
= COMMAND_EXEC
,
1805 .help
= "read/write a register from AP "
1806 "(reg is byte address of a word register, like 0 4 8...)",
1807 .usage
= "ap_num reg [value]",
1811 .handler
= dap_baseaddr_command
,
1812 .mode
= COMMAND_EXEC
,
1813 .help
= "return debug base address from MEM-AP "
1814 "(default currently selected AP)",
1815 .usage
= "[ap_num]",
1818 .name
= "memaccess",
1819 .handler
= dap_memaccess_command
,
1820 .mode
= COMMAND_EXEC
,
1821 .help
= "set/get number of extra tck for MEM-AP memory "
1822 "bus access [0-255]",
1823 .usage
= "[cycles]",
1826 .name
= "ti_be_32_quirks",
1827 .handler
= dap_ti_be_32_quirks_command
,
1828 .mode
= COMMAND_CONFIG
,
1829 .help
= "set/get quirks mode for TI TMS450/TMS570 processors",
1830 .usage
= "[enable]",
1832 COMMAND_REGISTRATION_DONE
Linking to existing account procedure
If you already have an account and want to add another login method
you
MUST first sign in with your existing account and
then change URL to read
https://review.openocd.org/login/?link
to get to this page again but this time it'll work for linking. Thank you.
SSH host keys fingerprints
1024 SHA256:YKx8b7u5ZWdcbp7/4AeXNaqElP49m6QrwfXaqQGJAOk gerrit-code-review@openocd.zylin.com (DSA)
384 SHA256:jHIbSQa4REvwCFG4cq5LBlBLxmxSqelQPem/EXIrxjk gerrit-code-review@openocd.org (ECDSA)
521 SHA256:UAOPYkU9Fjtcao0Ul/Rrlnj/OsQvt+pgdYSZ4jOYdgs gerrit-code-review@openocd.org (ECDSA)
256 SHA256:A13M5QlnozFOvTllybRZH6vm7iSt0XLxbA48yfc2yfY gerrit-code-review@openocd.org (ECDSA)
256 SHA256:spYMBqEYoAOtK7yZBrcwE8ZpYt6b68Cfh9yEVetvbXg gerrit-code-review@openocd.org (ED25519)
+--[ED25519 256]--+
|=.. |
|+o.. . |
|*.o . . |
|+B . . . |
|Bo. = o S |
|Oo.+ + = |
|oB=.* = . o |
| =+=.+ + E |
|. .=o . o |
+----[SHA256]-----+
2048 SHA256:0Onrb7/PHjpo6iVZ7xQX2riKN83FJ3KGU0TvI0TaFG4 gerrit-code-review@openocd.zylin.com (RSA)