1 /***************************************************************************
2 * Copyright (C) 2005 by Dominic Rath *
3 * Dominic.Rath@gmx.de *
5 * Copyright (C) 2006 by Magnus Lundin *
8 * Copyright (C) 2008 by Spencer Oliver *
9 * spen@spen-soft.co.uk *
11 * Copyright (C) 2009 by Dirk Behme *
12 * dirk.behme@gmail.com - copy from cortex_m3 *
14 * This program is free software; you can redistribute it and/or modify *
15 * it under the terms of the GNU General Public License as published by *
16 * the Free Software Foundation; either version 2 of the License, or *
17 * (at your option) any later version. *
19 * This program is distributed in the hope that it will be useful, *
20 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
21 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
22 * GNU General Public License for more details. *
24 * You should have received a copy of the GNU General Public License *
25 * along with this program; if not, write to the *
26 * Free Software Foundation, Inc., *
27 * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
29 * Cortex-A8(tm) TRM, ARM DDI 0344H *
31 ***************************************************************************/
36 #include "breakpoints.h"
37 #include "cortex_a8.h"
39 #include "target_request.h"
40 #include "target_type.h"
42 static int cortex_a8_poll(struct target
*target
);
43 static int cortex_a8_debug_entry(struct target
*target
);
44 static int cortex_a8_restore_context(struct target
*target
);
45 static int cortex_a8_set_breakpoint(struct target
*target
,
46 struct breakpoint
*breakpoint
, uint8_t matchmode
);
47 static int cortex_a8_unset_breakpoint(struct target
*target
,
48 struct breakpoint
*breakpoint
);
49 static int cortex_a8_dap_read_coreregister_u32(struct target
*target
,
50 uint32_t *value
, int regnum
);
51 static int cortex_a8_dap_write_coreregister_u32(struct target
*target
,
52 uint32_t value
, int regnum
);
54 * FIXME do topology discovery using the ROM; don't
55 * assume this is an OMAP3.
57 #define swjdp_memoryap 0
58 #define swjdp_debugap 1
59 #define OMAP3530_DEBUG_BASE 0x54011000
62 * Cortex-A8 Basic debug access, very low level assumes state is saved
64 static int cortex_a8_init_debug_access(struct target
*target
)
66 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
67 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
74 /* Unlocking the debug registers for modification */
75 /* The debugport might be uninitialised so try twice */
76 retval
= mem_ap_write_atomic_u32(swjdp
, armv7a
->debug_base
+ CPUDBG_LOCKACCESS
, 0xC5ACCE55);
77 if (retval
!= ERROR_OK
)
78 mem_ap_write_atomic_u32(swjdp
, armv7a
->debug_base
+ CPUDBG_LOCKACCESS
, 0xC5ACCE55);
79 /* Clear Sticky Power Down status Bit in PRSR to enable access to
80 the registers in the Core Power Domain */
81 retval
= mem_ap_read_atomic_u32(swjdp
, armv7a
->debug_base
+ CPUDBG_PRSR
, &dummy
);
82 /* Enabling of instruction execution in debug mode is done in debug_entry code */
84 /* Resync breakpoint registers */
86 /* Since this is likley called from init or reset, update targtet state information*/
87 cortex_a8_poll(target
);
92 /* FIXME we waste a *LOT* of round-trips with needless DSCR reads, which
93 * slows down operations considerably. One good way to start reducing
94 * them would pass current values into and out of this routine. That
95 * should also help synch DCC read/write.
97 static int cortex_a8_exec_opcode(struct target
*target
, uint32_t opcode
)
101 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
102 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
104 LOG_DEBUG("exec opcode 0x%08" PRIx32
, opcode
);
107 retval
= mem_ap_read_atomic_u32(swjdp
,
108 armv7a
->debug_base
+ CPUDBG_DSCR
, &dscr
);
109 if (retval
!= ERROR_OK
)
111 LOG_ERROR("Could not read DSCR register, opcode = 0x%08" PRIx32
, opcode
);
115 while ((dscr
& (1 << DSCR_INSTR_COMP
)) == 0); /* Wait for InstrCompl bit to be set */
117 mem_ap_write_u32(swjdp
, armv7a
->debug_base
+ CPUDBG_ITR
, opcode
);
121 retval
= mem_ap_read_atomic_u32(swjdp
,
122 armv7a
->debug_base
+ CPUDBG_DSCR
, &dscr
);
123 if (retval
!= ERROR_OK
)
125 LOG_ERROR("Could not read DSCR register");
129 while ((dscr
& (1 << DSCR_INSTR_COMP
)) == 0); /* Wait for InstrCompl bit to be set */
134 /**************************************************************************
135 Read core register with very few exec_opcode, fast but needs work_area.
136 This can cause problems with MMU active.
137 **************************************************************************/
138 static int cortex_a8_read_regs_through_mem(struct target
*target
, uint32_t address
,
141 int retval
= ERROR_OK
;
142 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
143 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
145 cortex_a8_dap_read_coreregister_u32(target
, regfile
, 0);
146 cortex_a8_dap_write_coreregister_u32(target
, address
, 0);
147 cortex_a8_exec_opcode(target
, ARMV4_5_STMIA(0, 0xFFFE, 0, 0));
148 dap_ap_select(swjdp
, swjdp_memoryap
);
149 mem_ap_read_buf_u32(swjdp
, (uint8_t *)(®file
[1]), 4*15, address
);
150 dap_ap_select(swjdp
, swjdp_debugap
);
155 static int cortex_a8_read_cp(struct target
*target
, uint32_t *value
, uint8_t CP
,
156 uint8_t op1
, uint8_t CRn
, uint8_t CRm
, uint8_t op2
)
159 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
160 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
162 cortex_a8_exec_opcode(target
, ARMV4_5_MRC(CP
, op1
, 0, CRn
, CRm
, op2
));
163 /* Move R0 to DTRTX */
164 cortex_a8_exec_opcode(target
, ARMV4_5_MCR(14, 0, 0, 0, 5, 0));
167 retval
= mem_ap_read_atomic_u32(swjdp
,
168 armv7a
->debug_base
+ CPUDBG_DTRTX
, value
);
173 static int cortex_a8_write_cp(struct target
*target
, uint32_t value
,
174 uint8_t CP
, uint8_t op1
, uint8_t CRn
, uint8_t CRm
, uint8_t op2
)
178 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
179 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
181 LOG_DEBUG("CP%i, CRn %i, value 0x%08" PRIx32
, CP
, CRn
, value
);
183 /* Check that DCCRX is not full */
184 retval
= mem_ap_read_atomic_u32(swjdp
,
185 armv7a
->debug_base
+ CPUDBG_DSCR
, &dscr
);
186 if (dscr
& (1 << DSCR_DTR_RX_FULL
))
188 LOG_ERROR("DSCR_DTR_RX_FULL, dscr 0x%08" PRIx32
, dscr
);
189 /* Clear DCCRX with MCR(p14, 0, Rd, c0, c5, 0), opcode 0xEE000E15 */
190 cortex_a8_exec_opcode(target
, ARMV4_5_MRC(14, 0, 0, 0, 5, 0));
193 retval
= mem_ap_write_u32(swjdp
,
194 armv7a
->debug_base
+ CPUDBG_DTRRX
, value
);
195 /* Move DTRRX to r0 */
196 cortex_a8_exec_opcode(target
, ARMV4_5_MRC(14, 0, 0, 0, 5, 0));
198 cortex_a8_exec_opcode(target
, ARMV4_5_MCR(CP
, op1
, 0, CRn
, CRm
, op2
));
202 static int cortex_a8_read_cp15(struct target
*target
, uint32_t op1
, uint32_t op2
,
203 uint32_t CRn
, uint32_t CRm
, uint32_t *value
)
205 return cortex_a8_read_cp(target
, value
, 15, op1
, CRn
, CRm
, op2
);
208 static int cortex_a8_write_cp15(struct target
*target
, uint32_t op1
, uint32_t op2
,
209 uint32_t CRn
, uint32_t CRm
, uint32_t value
)
211 return cortex_a8_write_cp(target
, value
, 15, op1
, CRn
, CRm
, op2
);
214 static int cortex_a8_mrc(struct target
*target
, int cpnum
, uint32_t op1
, uint32_t op2
, uint32_t CRn
, uint32_t CRm
, uint32_t *value
)
218 LOG_ERROR("Only cp15 is supported");
221 return cortex_a8_read_cp15(target
, op1
, op2
, CRn
, CRm
, value
);
224 static int cortex_a8_mcr(struct target
*target
, int cpnum
, uint32_t op1
, uint32_t op2
, uint32_t CRn
, uint32_t CRm
, uint32_t value
)
228 LOG_ERROR("Only cp15 is supported");
231 return cortex_a8_write_cp15(target
, op1
, op2
, CRn
, CRm
, value
);
236 static int cortex_a8_dap_read_coreregister_u32(struct target
*target
,
237 uint32_t *value
, int regnum
)
239 int retval
= ERROR_OK
;
240 uint8_t reg
= regnum
&0xFF;
242 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
243 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
250 /* Rn to DCCTX, "MCR p14, 0, Rn, c0, c5, 0" 0xEE00nE15 */
251 cortex_a8_exec_opcode(target
, ARMV4_5_MCR(14, 0, reg
, 0, 5, 0));
255 /* "MOV r0, r15"; then move r0 to DCCTX */
256 cortex_a8_exec_opcode(target
, 0xE1A0000F);
257 cortex_a8_exec_opcode(target
, ARMV4_5_MCR(14, 0, 0, 0, 5, 0));
261 /* "MRS r0, CPSR" or "MRS r0, SPSR"
262 * then move r0 to DCCTX
264 cortex_a8_exec_opcode(target
, ARMV4_5_MRS(0, reg
& 1));
265 cortex_a8_exec_opcode(target
, ARMV4_5_MCR(14, 0, 0, 0, 5, 0));
271 retval
= mem_ap_read_atomic_u32(swjdp
,
272 armv7a
->debug_base
+ CPUDBG_DSCR
, &dscr
);
274 while ((dscr
& (1 << DSCR_DTR_TX_FULL
)) == 0); /* Wait for DTRRXfull */
276 retval
= mem_ap_read_atomic_u32(swjdp
,
277 armv7a
->debug_base
+ CPUDBG_DTRTX
, value
);
278 LOG_DEBUG("read DCC 0x%08" PRIx32
, *value
);
283 static int cortex_a8_dap_write_coreregister_u32(struct target
*target
,
284 uint32_t value
, int regnum
)
286 int retval
= ERROR_OK
;
287 uint8_t Rd
= regnum
&0xFF;
289 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
290 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
292 LOG_DEBUG("register %i, value 0x%08" PRIx32
, regnum
, value
);
294 /* Check that DCCRX is not full */
295 retval
= mem_ap_read_atomic_u32(swjdp
,
296 armv7a
->debug_base
+ CPUDBG_DSCR
, &dscr
);
297 if (dscr
& (1 << DSCR_DTR_RX_FULL
))
299 LOG_ERROR("DSCR_DTR_RX_FULL, dscr 0x%08" PRIx32
, dscr
);
300 /* Clear DCCRX with MCR(p14, 0, Rd, c0, c5, 0), opcode 0xEE000E15 */
301 cortex_a8_exec_opcode(target
, ARMV4_5_MRC(14, 0, 0, 0, 5, 0));
308 LOG_DEBUG("write DCC 0x%08" PRIx32
, value
);
309 retval
= mem_ap_write_u32(swjdp
,
310 armv7a
->debug_base
+ CPUDBG_DTRRX
, value
);
314 /* DCCRX to Rn, "MCR p14, 0, Rn, c0, c5, 0", 0xEE00nE15 */
315 cortex_a8_exec_opcode(target
, ARMV4_5_MRC(14, 0, Rd
, 0, 5, 0));
319 /* DCCRX to R0, "MCR p14, 0, R0, c0, c5, 0", 0xEE000E15
322 cortex_a8_exec_opcode(target
, ARMV4_5_MRC(14, 0, 0, 0, 5, 0));
323 cortex_a8_exec_opcode(target
, 0xE1A0F000);
327 /* DCCRX to R0, "MCR p14, 0, R0, c0, c5, 0", 0xEE000E15
328 * then "MSR CPSR_cxsf, r0" or "MSR SPSR_cxsf, r0" (all fields)
330 cortex_a8_exec_opcode(target
, ARMV4_5_MRC(14, 0, 0, 0, 5, 0));
331 cortex_a8_exec_opcode(target
, ARMV4_5_MSR_GP(0, 0xF, Rd
& 1));
333 /* "Prefetch flush" after modifying execution status in CPSR */
335 cortex_a8_exec_opcode(target
,
336 ARMV4_5_MCR(15, 0, 0, 7, 5, 4));
342 /* Write to memory mapped registers directly with no cache or mmu handling */
343 static int cortex_a8_dap_write_memap_register_u32(struct target
*target
, uint32_t address
, uint32_t value
)
346 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
347 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
349 retval
= mem_ap_write_atomic_u32(swjdp
, address
, value
);
355 * Cortex-A8 implementation of Debug Programmer's Model
357 * NOTE that in several of these cases the "stall" mode might be useful.
358 * It'd let us queue a few operations together... prepare/finish might
359 * be the places to enable/disable that mode.
362 static inline struct cortex_a8_common
*dpm_to_a8(struct arm_dpm
*dpm
)
364 return container_of(dpm
, struct cortex_a8_common
, armv7a_common
.dpm
);
367 static int cortex_a8_write_dcc(struct cortex_a8_common
*a8
, uint32_t data
)
369 LOG_DEBUG("write DCC 0x%08" PRIx32
, data
);
370 return mem_ap_write_u32(&a8
->armv7a_common
.swjdp_info
,
371 a8
->armv7a_common
.debug_base
+ CPUDBG_DTRRX
, data
);
374 static int cortex_a8_read_dcc(struct cortex_a8_common
*a8
, uint32_t *data
)
376 struct swjdp_common
*swjdp
= &a8
->armv7a_common
.swjdp_info
;
380 /* Wait for DTRRXfull */
382 retval
= mem_ap_read_atomic_u32(swjdp
,
383 a8
->armv7a_common
.debug_base
+ CPUDBG_DSCR
,
385 } while ((dscr
& (1 << DSCR_DTR_TX_FULL
)) == 0);
387 retval
= mem_ap_read_atomic_u32(swjdp
,
388 a8
->armv7a_common
.debug_base
+ CPUDBG_DTRTX
, data
);
389 LOG_DEBUG("read DCC 0x%08" PRIx32
, *data
);
394 static int cortex_a8_dpm_prepare(struct arm_dpm
*dpm
)
396 struct cortex_a8_common
*a8
= dpm_to_a8(dpm
);
397 struct swjdp_common
*swjdp
= &a8
->armv7a_common
.swjdp_info
;
401 retval
= mem_ap_read_atomic_u32(swjdp
,
402 a8
->armv7a_common
.debug_base
+ CPUDBG_DSCR
,
405 /* this "should never happen" ... */
406 if (dscr
& (1 << DSCR_DTR_RX_FULL
)) {
407 LOG_ERROR("DSCR_DTR_RX_FULL, dscr 0x%08" PRIx32
, dscr
);
409 retval
= cortex_a8_exec_opcode(
410 a8
->armv7a_common
.armv4_5_common
.target
,
411 ARMV4_5_MRC(14, 0, 0, 0, 5, 0));
417 static int cortex_a8_dpm_finish(struct arm_dpm
*dpm
)
419 /* REVISIT what could be done here? */
423 static int cortex_a8_instr_write_data_dcc(struct arm_dpm
*dpm
,
424 uint32_t opcode
, uint32_t data
)
426 struct cortex_a8_common
*a8
= dpm_to_a8(dpm
);
429 retval
= cortex_a8_write_dcc(a8
, data
);
431 return cortex_a8_exec_opcode(
432 a8
->armv7a_common
.armv4_5_common
.target
,
436 static int cortex_a8_instr_write_data_r0(struct arm_dpm
*dpm
,
437 uint32_t opcode
, uint32_t data
)
439 struct cortex_a8_common
*a8
= dpm_to_a8(dpm
);
442 retval
= cortex_a8_write_dcc(a8
, data
);
444 /* DCCRX to R0, "MCR p14, 0, R0, c0, c5, 0", 0xEE000E15 */
445 retval
= cortex_a8_exec_opcode(
446 a8
->armv7a_common
.armv4_5_common
.target
,
447 ARMV4_5_MRC(14, 0, 0, 0, 5, 0));
449 /* then the opcode, taking data from R0 */
450 retval
= cortex_a8_exec_opcode(
451 a8
->armv7a_common
.armv4_5_common
.target
,
457 static int cortex_a8_instr_cpsr_sync(struct arm_dpm
*dpm
)
459 struct target
*target
= dpm
->arm
->target
;
461 /* "Prefetch flush" after modifying execution status in CPSR */
462 return cortex_a8_exec_opcode(target
, ARMV4_5_MCR(15, 0, 0, 7, 5, 4));
465 static int cortex_a8_instr_read_data_dcc(struct arm_dpm
*dpm
,
466 uint32_t opcode
, uint32_t *data
)
468 struct cortex_a8_common
*a8
= dpm_to_a8(dpm
);
471 /* the opcode, writing data to DCC */
472 retval
= cortex_a8_exec_opcode(
473 a8
->armv7a_common
.armv4_5_common
.target
,
476 return cortex_a8_read_dcc(a8
, data
);
480 static int cortex_a8_instr_read_data_r0(struct arm_dpm
*dpm
,
481 uint32_t opcode
, uint32_t *data
)
483 struct cortex_a8_common
*a8
= dpm_to_a8(dpm
);
486 /* the opcode, writing data to R0 */
487 retval
= cortex_a8_exec_opcode(
488 a8
->armv7a_common
.armv4_5_common
.target
,
491 /* write R0 to DCC */
492 retval
= cortex_a8_exec_opcode(
493 a8
->armv7a_common
.armv4_5_common
.target
,
494 ARMV4_5_MCR(14, 0, 0, 0, 5, 0));
496 return cortex_a8_read_dcc(a8
, data
);
500 int cortex_a8_dpm_setup(struct cortex_a8_common
*a8
, uint32_t didr
)
502 struct arm_dpm
*dpm
= &a8
->armv7a_common
.dpm
;
504 dpm
->arm
= &a8
->armv7a_common
.armv4_5_common
;
507 dpm
->prepare
= cortex_a8_dpm_prepare
;
508 dpm
->finish
= cortex_a8_dpm_finish
;
510 dpm
->instr_write_data_dcc
= cortex_a8_instr_write_data_dcc
;
511 dpm
->instr_write_data_r0
= cortex_a8_instr_write_data_r0
;
512 dpm
->instr_cpsr_sync
= cortex_a8_instr_cpsr_sync
;
514 dpm
->instr_read_data_dcc
= cortex_a8_instr_read_data_dcc
;
515 dpm
->instr_read_data_r0
= cortex_a8_instr_read_data_r0
;
517 return arm_dpm_setup(dpm
);
522 * Cortex-A8 Run control
525 static int cortex_a8_poll(struct target
*target
)
527 int retval
= ERROR_OK
;
529 struct cortex_a8_common
*cortex_a8
= target_to_cortex_a8(target
);
530 struct armv7a_common
*armv7a
= &cortex_a8
->armv7a_common
;
531 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
532 enum target_state prev_target_state
= target
->state
;
533 uint8_t saved_apsel
= dap_ap_get_select(swjdp
);
535 dap_ap_select(swjdp
, swjdp_debugap
);
536 retval
= mem_ap_read_atomic_u32(swjdp
,
537 armv7a
->debug_base
+ CPUDBG_DSCR
, &dscr
);
538 if (retval
!= ERROR_OK
)
540 dap_ap_select(swjdp
, saved_apsel
);
543 cortex_a8
->cpudbg_dscr
= dscr
;
545 if ((dscr
& 0x3) == 0x3)
547 if (prev_target_state
!= TARGET_HALTED
)
549 /* We have a halting debug event */
550 LOG_DEBUG("Target halted");
551 target
->state
= TARGET_HALTED
;
552 if ((prev_target_state
== TARGET_RUNNING
)
553 || (prev_target_state
== TARGET_RESET
))
555 retval
= cortex_a8_debug_entry(target
);
556 if (retval
!= ERROR_OK
)
559 target_call_event_callbacks(target
,
560 TARGET_EVENT_HALTED
);
562 if (prev_target_state
== TARGET_DEBUG_RUNNING
)
566 retval
= cortex_a8_debug_entry(target
);
567 if (retval
!= ERROR_OK
)
570 target_call_event_callbacks(target
,
571 TARGET_EVENT_DEBUG_HALTED
);
575 else if ((dscr
& 0x3) == 0x2)
577 target
->state
= TARGET_RUNNING
;
581 LOG_DEBUG("Unknown target state dscr = 0x%08" PRIx32
, dscr
);
582 target
->state
= TARGET_UNKNOWN
;
585 dap_ap_select(swjdp
, saved_apsel
);
590 static int cortex_a8_halt(struct target
*target
)
592 int retval
= ERROR_OK
;
594 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
595 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
596 uint8_t saved_apsel
= dap_ap_get_select(swjdp
);
597 dap_ap_select(swjdp
, swjdp_debugap
);
600 * Tell the core to be halted by writing DRCR with 0x1
601 * and then wait for the core to be halted.
603 retval
= mem_ap_write_atomic_u32(swjdp
,
604 armv7a
->debug_base
+ CPUDBG_DRCR
, 0x1);
607 * enter halting debug mode
609 mem_ap_read_atomic_u32(swjdp
, armv7a
->debug_base
+ CPUDBG_DSCR
, &dscr
);
610 retval
= mem_ap_write_atomic_u32(swjdp
,
611 armv7a
->debug_base
+ CPUDBG_DSCR
, dscr
| (1 << DSCR_HALT_DBG_MODE
));
613 if (retval
!= ERROR_OK
)
617 mem_ap_read_atomic_u32(swjdp
,
618 armv7a
->debug_base
+ CPUDBG_DSCR
, &dscr
);
619 } while ((dscr
& (1 << DSCR_CORE_HALTED
)) == 0);
621 target
->debug_reason
= DBG_REASON_DBGRQ
;
624 dap_ap_select(swjdp
, saved_apsel
);
628 static int cortex_a8_resume(struct target
*target
, int current
,
629 uint32_t address
, int handle_breakpoints
, int debug_execution
)
631 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
632 struct arm
*armv4_5
= &armv7a
->armv4_5_common
;
633 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
635 // struct breakpoint *breakpoint = NULL;
636 uint32_t resume_pc
, dscr
;
638 uint8_t saved_apsel
= dap_ap_get_select(swjdp
);
639 dap_ap_select(swjdp
, swjdp_debugap
);
641 if (!debug_execution
)
643 target_free_all_working_areas(target
);
644 // cortex_m3_enable_breakpoints(target);
645 // cortex_m3_enable_watchpoints(target);
651 /* Disable interrupts */
652 /* We disable interrupts in the PRIMASK register instead of
653 * masking with C_MASKINTS,
654 * This is probably the same issue as Cortex-M3 Errata 377493:
655 * C_MASKINTS in parallel with disabled interrupts can cause
656 * local faults to not be taken. */
657 buf_set_u32(armv7m
->core_cache
->reg_list
[ARMV7M_PRIMASK
].value
, 0, 32, 1);
658 armv7m
->core_cache
->reg_list
[ARMV7M_PRIMASK
].dirty
= 1;
659 armv7m
->core_cache
->reg_list
[ARMV7M_PRIMASK
].valid
= 1;
661 /* Make sure we are in Thumb mode */
662 buf_set_u32(armv7m
->core_cache
->reg_list
[ARMV7M_xPSR
].value
, 0, 32,
663 buf_get_u32(armv7m
->core_cache
->reg_list
[ARMV7M_xPSR
].value
, 0, 32) | (1 << 24));
664 armv7m
->core_cache
->reg_list
[ARMV7M_xPSR
].dirty
= 1;
665 armv7m
->core_cache
->reg_list
[ARMV7M_xPSR
].valid
= 1;
669 /* current = 1: continue on current pc, otherwise continue at <address> */
670 resume_pc
= buf_get_u32(
671 armv4_5
->core_cache
->reg_list
[15].value
,
676 /* Make sure that the Armv7 gdb thumb fixups does not
677 * kill the return address
679 switch (armv4_5
->core_state
)
681 case ARMV4_5_STATE_ARM
:
682 resume_pc
&= 0xFFFFFFFC;
684 case ARMV4_5_STATE_THUMB
:
685 case ARM_STATE_THUMB_EE
:
686 /* When the return address is loaded into PC
687 * bit 0 must be 1 to stay in Thumb state
691 case ARMV4_5_STATE_JAZELLE
:
692 LOG_ERROR("How do I resume into Jazelle state??");
695 LOG_DEBUG("resume pc = 0x%08" PRIx32
, resume_pc
);
696 buf_set_u32(armv4_5
->core_cache
->reg_list
[15].value
,
698 armv4_5
->core_cache
->reg_list
[15].dirty
= 1;
699 armv4_5
->core_cache
->reg_list
[15].valid
= 1;
701 cortex_a8_restore_context(target
);
704 /* the front-end may request us not to handle breakpoints */
705 if (handle_breakpoints
)
707 /* Single step past breakpoint at current address */
708 if ((breakpoint
= breakpoint_find(target
, resume_pc
)))
710 LOG_DEBUG("unset breakpoint at 0x%8.8x", breakpoint
->address
);
711 cortex_m3_unset_breakpoint(target
, breakpoint
);
712 cortex_m3_single_step_core(target
);
713 cortex_m3_set_breakpoint(target
, breakpoint
);
718 /* Restart core and wait for it to be started */
719 mem_ap_write_atomic_u32(swjdp
, armv7a
->debug_base
+ CPUDBG_DRCR
, 0x2);
722 mem_ap_read_atomic_u32(swjdp
,
723 armv7a
->debug_base
+ CPUDBG_DSCR
, &dscr
);
724 } while ((dscr
& (1 << DSCR_CORE_RESTARTED
)) == 0);
726 target
->debug_reason
= DBG_REASON_NOTHALTED
;
727 target
->state
= TARGET_RUNNING
;
729 /* registers are now invalid */
730 register_cache_invalidate(armv4_5
->core_cache
);
732 if (!debug_execution
)
734 target
->state
= TARGET_RUNNING
;
735 target_call_event_callbacks(target
, TARGET_EVENT_RESUMED
);
736 LOG_DEBUG("target resumed at 0x%" PRIx32
, resume_pc
);
740 target
->state
= TARGET_DEBUG_RUNNING
;
741 target_call_event_callbacks(target
, TARGET_EVENT_DEBUG_RESUMED
);
742 LOG_DEBUG("target debug resumed at 0x%" PRIx32
, resume_pc
);
745 dap_ap_select(swjdp
, saved_apsel
);
750 static int cortex_a8_debug_entry(struct target
*target
)
753 uint32_t regfile
[16], pc
, cpsr
, dscr
;
754 int retval
= ERROR_OK
;
755 struct working_area
*regfile_working_area
= NULL
;
756 struct cortex_a8_common
*cortex_a8
= target_to_cortex_a8(target
);
757 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
758 struct arm
*armv4_5
= &armv7a
->armv4_5_common
;
759 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
762 LOG_DEBUG("dscr = 0x%08" PRIx32
, cortex_a8
->cpudbg_dscr
);
764 /* Enable the ITR execution once we are in debug mode */
765 mem_ap_read_atomic_u32(swjdp
,
766 armv7a
->debug_base
+ CPUDBG_DSCR
, &dscr
);
768 /* REVISIT see A8 TRM 12.11.4 steps 2..3 -- make sure that any
769 * imprecise data aborts get discarded by issuing a Data
770 * Synchronization Barrier: ARMV4_5_MCR(15, 0, 0, 7, 10, 4).
773 dscr
|= (1 << DSCR_EXT_INT_EN
);
774 retval
= mem_ap_write_atomic_u32(swjdp
,
775 armv7a
->debug_base
+ CPUDBG_DSCR
, dscr
);
777 /* Examine debug reason */
778 switch ((cortex_a8
->cpudbg_dscr
>> 2)&0xF)
780 case 0: /* DRCR[0] write */
782 target
->debug_reason
= DBG_REASON_DBGRQ
;
784 case 1: /* HW breakpoint */
785 case 3: /* SW BKPT */
786 case 5: /* vector catch */
787 target
->debug_reason
= DBG_REASON_BREAKPOINT
;
789 case 10: /* precise watchpoint */
790 target
->debug_reason
= DBG_REASON_WATCHPOINT
;
791 /* REVISIT could collect WFAR later, to see just
792 * which instruction triggered the watchpoint.
796 target
->debug_reason
= DBG_REASON_UNDEFINED
;
800 /* REVISIT fast_reg_read is never set ... */
802 /* Examine target state and mode */
803 if (cortex_a8
->fast_reg_read
)
804 target_alloc_working_area(target
, 64, ®file_working_area
);
806 /* First load register acessible through core debug port*/
807 if (!regfile_working_area
)
809 /* FIXME we don't actually need all these registers;
810 * reading them slows us down. Just R0, PC, CPSR...
812 for (i
= 0; i
<= 15; i
++)
813 cortex_a8_dap_read_coreregister_u32(target
,
818 dap_ap_select(swjdp
, swjdp_memoryap
);
819 cortex_a8_read_regs_through_mem(target
,
820 regfile_working_area
->address
, regfile
);
821 dap_ap_select(swjdp
, swjdp_memoryap
);
822 target_free_working_area(target
, regfile_working_area
);
825 /* read Current PSR */
826 cortex_a8_dap_read_coreregister_u32(target
, &cpsr
, 16);
828 dap_ap_select(swjdp
, swjdp_debugap
);
829 LOG_DEBUG("cpsr: %8.8" PRIx32
, cpsr
);
831 arm_set_cpsr(armv4_5
, cpsr
);
834 for (i
= 0; i
<= ARM_PC
; i
++)
836 reg
= arm_reg_current(armv4_5
, i
);
838 buf_set_u32(reg
->value
, 0, 32, regfile
[i
]);
843 /* Fixup PC Resume Address */
846 // T bit set for Thumb or ThumbEE state
847 regfile
[ARM_PC
] -= 4;
852 regfile
[ARM_PC
] -= 8;
855 reg
= armv4_5
->core_cache
->reg_list
+ 15;
856 buf_set_u32(reg
->value
, 0, 32, regfile
[ARM_PC
]);
857 reg
->dirty
= reg
->valid
;
858 ARMV4_5_CORE_REG_MODE(armv4_5
->core_cache
, armv4_5
->core_mode
, 15)
859 .dirty
= ARMV4_5_CORE_REG_MODE(armv4_5
->core_cache
,
860 armv4_5
->core_mode
, 15).valid
;
863 /* TODO, Move this */
864 uint32_t cp15_control_register
, cp15_cacr
, cp15_nacr
;
865 cortex_a8_read_cp(target
, &cp15_control_register
, 15, 0, 1, 0, 0);
866 LOG_DEBUG("cp15_control_register = 0x%08x", cp15_control_register
);
868 cortex_a8_read_cp(target
, &cp15_cacr
, 15, 0, 1, 0, 2);
869 LOG_DEBUG("cp15 Coprocessor Access Control Register = 0x%08x", cp15_cacr
);
871 cortex_a8_read_cp(target
, &cp15_nacr
, 15, 0, 1, 1, 2);
872 LOG_DEBUG("cp15 Nonsecure Access Control Register = 0x%08x", cp15_nacr
);
875 /* Are we in an exception handler */
876 // armv4_5->exception_number = 0;
877 if (armv7a
->post_debug_entry
)
878 armv7a
->post_debug_entry(target
);
886 static void cortex_a8_post_debug_entry(struct target
*target
)
888 struct cortex_a8_common
*cortex_a8
= target_to_cortex_a8(target
);
889 struct armv7a_common
*armv7a
= &cortex_a8
->armv7a_common
;
891 // cortex_a8_read_cp(target, &cp15_control_register, 15, 0, 1, 0, 0);
892 /* examine cp15 control reg */
893 armv7a
->read_cp15(target
, 0, 0, 1, 0, &cortex_a8
->cp15_control_reg
);
894 jtag_execute_queue();
895 LOG_DEBUG("cp15_control_reg: %8.8" PRIx32
, cortex_a8
->cp15_control_reg
);
897 if (armv7a
->armv4_5_mmu
.armv4_5_cache
.ctype
== -1)
899 uint32_t cache_type_reg
;
900 /* identify caches */
901 armv7a
->read_cp15(target
, 0, 1, 0, 0, &cache_type_reg
);
902 jtag_execute_queue();
903 /* FIXME the armv4_4 cache info DOES NOT APPLY to Cortex-A8 */
904 armv4_5_identify_cache(cache_type_reg
,
905 &armv7a
->armv4_5_mmu
.armv4_5_cache
);
908 armv7a
->armv4_5_mmu
.mmu_enabled
=
909 (cortex_a8
->cp15_control_reg
& 0x1U
) ? 1 : 0;
910 armv7a
->armv4_5_mmu
.armv4_5_cache
.d_u_cache_enabled
=
911 (cortex_a8
->cp15_control_reg
& 0x4U
) ? 1 : 0;
912 armv7a
->armv4_5_mmu
.armv4_5_cache
.i_cache_enabled
=
913 (cortex_a8
->cp15_control_reg
& 0x1000U
) ? 1 : 0;
918 static int cortex_a8_step(struct target
*target
, int current
, uint32_t address
,
919 int handle_breakpoints
)
921 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
922 struct arm
*armv4_5
= &armv7a
->armv4_5_common
;
923 struct breakpoint
*breakpoint
= NULL
;
924 struct breakpoint stepbreakpoint
;
929 if (target
->state
!= TARGET_HALTED
)
931 LOG_WARNING("target not halted");
932 return ERROR_TARGET_NOT_HALTED
;
935 /* current = 1: continue on current pc, otherwise continue at <address> */
936 r
= armv4_5
->core_cache
->reg_list
+ 15;
939 buf_set_u32(r
->value
, 0, 32, address
);
943 address
= buf_get_u32(r
->value
, 0, 32);
946 /* The front-end may request us not to handle breakpoints.
947 * But since Cortex-A8 uses breakpoint for single step,
948 * we MUST handle breakpoints.
950 handle_breakpoints
= 1;
951 if (handle_breakpoints
) {
952 breakpoint
= breakpoint_find(target
, address
);
954 cortex_a8_unset_breakpoint(target
, breakpoint
);
957 /* Setup single step breakpoint */
958 stepbreakpoint
.address
= address
;
959 stepbreakpoint
.length
= (armv4_5
->core_state
== ARMV4_5_STATE_THUMB
)
961 stepbreakpoint
.type
= BKPT_HARD
;
962 stepbreakpoint
.set
= 0;
964 /* Break on IVA mismatch */
965 cortex_a8_set_breakpoint(target
, &stepbreakpoint
, 0x04);
967 target
->debug_reason
= DBG_REASON_SINGLESTEP
;
969 cortex_a8_resume(target
, 1, address
, 0, 0);
971 while (target
->state
!= TARGET_HALTED
)
973 cortex_a8_poll(target
);
976 LOG_WARNING("timeout waiting for target halt");
981 cortex_a8_unset_breakpoint(target
, &stepbreakpoint
);
982 if (timeout
> 0) target
->debug_reason
= DBG_REASON_BREAKPOINT
;
985 cortex_a8_set_breakpoint(target
, breakpoint
, 0);
987 if (target
->state
!= TARGET_HALTED
)
988 LOG_DEBUG("target stepped");
993 static int cortex_a8_restore_context(struct target
*target
)
996 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
997 struct reg_cache
*cache
= armv7a
->armv4_5_common
.core_cache
;
998 unsigned max
= cache
->num_regs
;
1000 bool flushed
, flush_cpsr
= false;
1004 if (armv7a
->pre_restore_context
)
1005 armv7a
->pre_restore_context(target
);
1007 /* Flush all dirty registers from the cache, one mode at a time so
1008 * that we write CPSR as little as possible. Save CPSR and R0 for
1009 * last; they're used to change modes and write other registers.
1011 * REVISIT be smarter: save eventual mode for last loop, don't
1012 * need to write CPSR an extra time.
1015 enum armv4_5_mode mode
= ARMV4_5_MODE_ANY
;
1020 /* write dirty non-{R0,CPSR} registers sharing the same mode */
1021 for (i
= max
- 1, r
= cache
->reg_list
+ 1; i
> 0; i
--, r
++) {
1022 struct arm_reg
*reg
;
1024 if (!r
->dirty
|| r
== armv7a
->armv4_5_common
.cpsr
)
1028 /* TODO Check return values */
1030 /* Pick a mode and update CPSR; else ignore this
1031 * register if it's for a different mode than what
1032 * we're handling on this pass.
1034 * REVISIT don't distinguish SYS and USR modes.
1036 * FIXME if we restore from FIQ mode, R8..R12 will
1037 * get wrongly flushed onto FIQ shadows...
1039 if (mode
== ARMV4_5_MODE_ANY
) {
1041 if (mode
!= ARMV4_5_MODE_ANY
) {
1042 cortex_a8_dap_write_coreregister_u32(
1046 } else if (mode
!= reg
->mode
)
1049 /* Write this register */
1050 value
= buf_get_u32(r
->value
, 0, 32);
1051 cortex_a8_dap_write_coreregister_u32(target
, value
,
1052 (reg
->num
== 16) ? 17 : reg
->num
);
1059 /* now flush CPSR if needed ... */
1060 r
= armv7a
->armv4_5_common
.cpsr
;
1061 if (flush_cpsr
|| r
->dirty
) {
1062 value
= buf_get_u32(r
->value
, 0, 32);
1063 cortex_a8_dap_write_coreregister_u32(target
, value
, 16);
1067 /* ... and R0 always (it was dirtied when we saved context) */
1068 r
= cache
->reg_list
+ 0;
1069 value
= buf_get_u32(r
->value
, 0, 32);
1070 cortex_a8_dap_write_coreregister_u32(target
, value
, 0);
1073 if (armv7a
->post_restore_context
)
1074 armv7a
->post_restore_context(target
);
1082 * Cortex-A8 Core register functions
1084 static int cortex_a8_load_core_reg_u32(struct target
*target
, int num
,
1085 armv4_5_mode_t mode
, uint32_t * value
)
1088 struct arm
*armv4_5
= target_to_armv4_5(target
);
1090 if ((num
<= ARM_CPSR
))
1092 /* read a normal core register */
1093 retval
= cortex_a8_dap_read_coreregister_u32(target
, value
, num
);
1095 if (retval
!= ERROR_OK
)
1097 LOG_ERROR("JTAG failure %i", retval
);
1098 return ERROR_JTAG_DEVICE_ERROR
;
1100 LOG_DEBUG("load from core reg %i value 0x%" PRIx32
, num
, *value
);
1104 return ERROR_INVALID_ARGUMENTS
;
1107 /* Register other than r0 - r14 uses r0 for access */
1109 ARMV4_5_CORE_REG_MODE(armv4_5
->core_cache
,
1110 armv4_5
->core_mode
, 0).dirty
=
1111 ARMV4_5_CORE_REG_MODE(armv4_5
->core_cache
,
1112 armv4_5
->core_mode
, 0).valid
;
1113 ARMV4_5_CORE_REG_MODE(armv4_5
->core_cache
,
1114 armv4_5
->core_mode
, 15).dirty
=
1115 ARMV4_5_CORE_REG_MODE(armv4_5
->core_cache
,
1116 armv4_5
->core_mode
, 15).valid
;
1121 static int cortex_a8_store_core_reg_u32(struct target
*target
, int num
,
1122 armv4_5_mode_t mode
, uint32_t value
)
1126 struct arm
*armv4_5
= target_to_armv4_5(target
);
1128 #ifdef ARMV7_GDB_HACKS
1129 /* If the LR register is being modified, make sure it will put us
1130 * in "thumb" mode, or an INVSTATE exception will occur. This is a
1131 * hack to deal with the fact that gdb will sometimes "forge"
1132 * return addresses, and doesn't set the LSB correctly (i.e., when
1133 * printing expressions containing function calls, it sets LR=0.) */
1139 if ((num
<= ARM_CPSR
))
1141 retval
= cortex_a8_dap_write_coreregister_u32(target
, value
, num
);
1142 if (retval
!= ERROR_OK
)
1144 LOG_ERROR("JTAG failure %i", retval
);
1145 ARMV4_5_CORE_REG_MODE(armv4_5
->core_cache
,
1146 armv4_5
->core_mode
, num
).dirty
=
1147 ARMV4_5_CORE_REG_MODE(armv4_5
->core_cache
,
1148 armv4_5
->core_mode
, num
).valid
;
1149 return ERROR_JTAG_DEVICE_ERROR
;
1151 LOG_DEBUG("write core reg %i value 0x%" PRIx32
, num
, value
);
1155 return ERROR_INVALID_ARGUMENTS
;
1163 static int cortex_a8_write_core_reg(struct target
*target
, struct reg
*r
,
1164 int num
, enum armv4_5_mode mode
, uint32_t value
);
1166 static int cortex_a8_read_core_reg(struct target
*target
, struct reg
*r
,
1167 int num
, enum armv4_5_mode mode
)
1171 struct arm
*armv4_5
= target_to_armv4_5(target
);
1172 struct reg
*cpsr_r
= NULL
;
1174 unsigned cookie
= num
;
1176 /* avoid some needless mode changes
1177 * FIXME move some of these to shared ARM code...
1179 if (mode
!= armv4_5
->core_mode
) {
1180 if ((armv4_5
->core_mode
== ARMV4_5_MODE_SYS
)
1181 && (mode
== ARMV4_5_MODE_USR
))
1182 mode
= ARMV4_5_MODE_ANY
;
1183 else if ((mode
!= ARMV4_5_MODE_FIQ
) && (num
<= 12))
1184 mode
= ARMV4_5_MODE_ANY
;
1186 if (mode
!= ARMV4_5_MODE_ANY
) {
1187 cpsr_r
= armv4_5
->cpsr
;
1188 cpsr
= buf_get_u32(cpsr_r
->value
, 0, 32);
1189 cortex_a8_write_core_reg(target
, cpsr_r
,
1190 16, ARMV4_5_MODE_ANY
, mode
);
1196 case ARMV4_5_MODE_USR
:
1197 case ARMV4_5_MODE_SYS
:
1198 case ARMV4_5_MODE_ANY
:
1208 cortex_a8_dap_read_coreregister_u32(target
, &value
, cookie
);
1209 retval
= jtag_execute_queue();
1210 if (retval
== ERROR_OK
) {
1213 buf_set_u32(r
->value
, 0, 32, value
);
1217 cortex_a8_write_core_reg(target
, cpsr_r
,
1218 16, ARMV4_5_MODE_ANY
, cpsr
);
1222 static int cortex_a8_write_core_reg(struct target
*target
, struct reg
*r
,
1223 int num
, enum armv4_5_mode mode
, uint32_t value
)
1226 struct arm
*armv4_5
= target_to_armv4_5(target
);
1227 struct reg
*cpsr_r
= NULL
;
1229 unsigned cookie
= num
;
1231 /* avoid some needless mode changes
1232 * FIXME move some of these to shared ARM code...
1234 if (mode
!= armv4_5
->core_mode
) {
1235 if ((armv4_5
->core_mode
== ARMV4_5_MODE_SYS
)
1236 && (mode
== ARMV4_5_MODE_USR
))
1237 mode
= ARMV4_5_MODE_ANY
;
1238 else if ((mode
!= ARMV4_5_MODE_FIQ
) && (num
<= 12))
1239 mode
= ARMV4_5_MODE_ANY
;
1241 if (mode
!= ARMV4_5_MODE_ANY
) {
1242 cpsr_r
= armv4_5
->cpsr
;
1243 cpsr
= buf_get_u32(cpsr_r
->value
, 0, 32);
1244 cortex_a8_write_core_reg(target
, cpsr_r
,
1245 16, ARMV4_5_MODE_ANY
, mode
);
1252 case ARMV4_5_MODE_USR
:
1253 case ARMV4_5_MODE_SYS
:
1254 case ARMV4_5_MODE_ANY
:
1264 cortex_a8_dap_write_coreregister_u32(target
, value
, cookie
);
1265 if ((retval
= jtag_execute_queue()) == ERROR_OK
) {
1266 buf_set_u32(r
->value
, 0, 32, value
);
1272 cortex_a8_write_core_reg(target
, cpsr_r
,
1273 16, ARMV4_5_MODE_ANY
, cpsr
);
1279 * Cortex-A8 Breakpoint and watchpoint fuctions
1282 /* Setup hardware Breakpoint Register Pair */
1283 static int cortex_a8_set_breakpoint(struct target
*target
,
1284 struct breakpoint
*breakpoint
, uint8_t matchmode
)
1289 uint8_t byte_addr_select
= 0x0F;
1290 struct cortex_a8_common
*cortex_a8
= target_to_cortex_a8(target
);
1291 struct armv7a_common
*armv7a
= &cortex_a8
->armv7a_common
;
1292 struct cortex_a8_brp
* brp_list
= cortex_a8
->brp_list
;
1294 if (breakpoint
->set
)
1296 LOG_WARNING("breakpoint already set");
1300 if (breakpoint
->type
== BKPT_HARD
)
1302 while (brp_list
[brp_i
].used
&& (brp_i
< cortex_a8
->brp_num
))
1304 if (brp_i
>= cortex_a8
->brp_num
)
1306 LOG_ERROR("ERROR Can not find free Breakpoint Register Pair");
1309 breakpoint
->set
= brp_i
+ 1;
1310 if (breakpoint
->length
== 2)
1312 byte_addr_select
= (3 << (breakpoint
->address
& 0x02));
1314 control
= ((matchmode
& 0x7) << 20)
1315 | (byte_addr_select
<< 5)
1317 brp_list
[brp_i
].used
= 1;
1318 brp_list
[brp_i
].value
= (breakpoint
->address
& 0xFFFFFFFC);
1319 brp_list
[brp_i
].control
= control
;
1320 cortex_a8_dap_write_memap_register_u32(target
, armv7a
->debug_base
1321 + CPUDBG_BVR_BASE
+ 4 * brp_list
[brp_i
].BRPn
,
1322 brp_list
[brp_i
].value
);
1323 cortex_a8_dap_write_memap_register_u32(target
, armv7a
->debug_base
1324 + CPUDBG_BCR_BASE
+ 4 * brp_list
[brp_i
].BRPn
,
1325 brp_list
[brp_i
].control
);
1326 LOG_DEBUG("brp %i control 0x%0" PRIx32
" value 0x%0" PRIx32
, brp_i
,
1327 brp_list
[brp_i
].control
,
1328 brp_list
[brp_i
].value
);
1330 else if (breakpoint
->type
== BKPT_SOFT
)
1333 if (breakpoint
->length
== 2)
1335 buf_set_u32(code
, 0, 32, ARMV5_T_BKPT(0x11));
1339 buf_set_u32(code
, 0, 32, ARMV5_BKPT(0x11));
1341 retval
= target
->type
->read_memory(target
,
1342 breakpoint
->address
& 0xFFFFFFFE,
1343 breakpoint
->length
, 1,
1344 breakpoint
->orig_instr
);
1345 if (retval
!= ERROR_OK
)
1347 retval
= target
->type
->write_memory(target
,
1348 breakpoint
->address
& 0xFFFFFFFE,
1349 breakpoint
->length
, 1, code
);
1350 if (retval
!= ERROR_OK
)
1352 breakpoint
->set
= 0x11; /* Any nice value but 0 */
1358 static int cortex_a8_unset_breakpoint(struct target
*target
, struct breakpoint
*breakpoint
)
1361 struct cortex_a8_common
*cortex_a8
= target_to_cortex_a8(target
);
1362 struct armv7a_common
*armv7a
= &cortex_a8
->armv7a_common
;
1363 struct cortex_a8_brp
* brp_list
= cortex_a8
->brp_list
;
1365 if (!breakpoint
->set
)
1367 LOG_WARNING("breakpoint not set");
1371 if (breakpoint
->type
== BKPT_HARD
)
1373 int brp_i
= breakpoint
->set
- 1;
1374 if ((brp_i
< 0) || (brp_i
>= cortex_a8
->brp_num
))
1376 LOG_DEBUG("Invalid BRP number in breakpoint");
1379 LOG_DEBUG("rbp %i control 0x%0" PRIx32
" value 0x%0" PRIx32
, brp_i
,
1380 brp_list
[brp_i
].control
, brp_list
[brp_i
].value
);
1381 brp_list
[brp_i
].used
= 0;
1382 brp_list
[brp_i
].value
= 0;
1383 brp_list
[brp_i
].control
= 0;
1384 cortex_a8_dap_write_memap_register_u32(target
, armv7a
->debug_base
1385 + CPUDBG_BCR_BASE
+ 4 * brp_list
[brp_i
].BRPn
,
1386 brp_list
[brp_i
].control
);
1387 cortex_a8_dap_write_memap_register_u32(target
, armv7a
->debug_base
1388 + CPUDBG_BVR_BASE
+ 4 * brp_list
[brp_i
].BRPn
,
1389 brp_list
[brp_i
].value
);
1393 /* restore original instruction (kept in target endianness) */
1394 if (breakpoint
->length
== 4)
1396 retval
= target
->type
->write_memory(target
,
1397 breakpoint
->address
& 0xFFFFFFFE,
1398 4, 1, breakpoint
->orig_instr
);
1399 if (retval
!= ERROR_OK
)
1404 retval
= target
->type
->write_memory(target
,
1405 breakpoint
->address
& 0xFFFFFFFE,
1406 2, 1, breakpoint
->orig_instr
);
1407 if (retval
!= ERROR_OK
)
1411 breakpoint
->set
= 0;
1416 static int cortex_a8_add_breakpoint(struct target
*target
,
1417 struct breakpoint
*breakpoint
)
1419 struct cortex_a8_common
*cortex_a8
= target_to_cortex_a8(target
);
1421 if ((breakpoint
->type
== BKPT_HARD
) && (cortex_a8
->brp_num_available
< 1))
1423 LOG_INFO("no hardware breakpoint available");
1424 return ERROR_TARGET_RESOURCE_NOT_AVAILABLE
;
1427 if (breakpoint
->type
== BKPT_HARD
)
1428 cortex_a8
->brp_num_available
--;
1429 cortex_a8_set_breakpoint(target
, breakpoint
, 0x00); /* Exact match */
1434 static int cortex_a8_remove_breakpoint(struct target
*target
, struct breakpoint
*breakpoint
)
1436 struct cortex_a8_common
*cortex_a8
= target_to_cortex_a8(target
);
1439 /* It is perfectly possible to remove brakpoints while the taget is running */
1440 if (target
->state
!= TARGET_HALTED
)
1442 LOG_WARNING("target not halted");
1443 return ERROR_TARGET_NOT_HALTED
;
1447 if (breakpoint
->set
)
1449 cortex_a8_unset_breakpoint(target
, breakpoint
);
1450 if (breakpoint
->type
== BKPT_HARD
)
1451 cortex_a8
->brp_num_available
++ ;
1461 * Cortex-A8 Reset fuctions
1464 static int cortex_a8_assert_reset(struct target
*target
)
1466 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
1470 /* registers are now invalid */
1471 register_cache_invalidate(armv7a
->armv4_5_common
.core_cache
);
1473 target
->state
= TARGET_RESET
;
1478 static int cortex_a8_deassert_reset(struct target
*target
)
1483 if (target
->reset_halt
)
1486 if ((retval
= target_halt(target
)) != ERROR_OK
)
1494 * Cortex-A8 Memory access
1496 * This is same Cortex M3 but we must also use the correct
1497 * ap number for every access.
1500 static int cortex_a8_read_memory(struct target
*target
, uint32_t address
,
1501 uint32_t size
, uint32_t count
, uint8_t *buffer
)
1503 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
1504 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
1505 int retval
= ERROR_INVALID_ARGUMENTS
;
1507 /* cortex_a8 handles unaligned memory access */
1509 // ??? dap_ap_select(swjdp, swjdp_memoryap);
1511 if (count
&& buffer
) {
1514 retval
= mem_ap_read_buf_u32(swjdp
, buffer
, 4 * count
, address
);
1517 retval
= mem_ap_read_buf_u16(swjdp
, buffer
, 2 * count
, address
);
1520 retval
= mem_ap_read_buf_u8(swjdp
, buffer
, count
, address
);
1528 static int cortex_a8_write_memory(struct target
*target
, uint32_t address
,
1529 uint32_t size
, uint32_t count
, uint8_t *buffer
)
1531 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
1532 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
1533 int retval
= ERROR_INVALID_ARGUMENTS
;
1535 // ??? dap_ap_select(swjdp, swjdp_memoryap);
1537 if (count
&& buffer
) {
1540 retval
= mem_ap_write_buf_u32(swjdp
, buffer
, 4 * count
, address
);
1543 retval
= mem_ap_write_buf_u16(swjdp
, buffer
, 2 * count
, address
);
1546 retval
= mem_ap_write_buf_u8(swjdp
, buffer
, count
, address
);
1551 if (retval
== ERROR_OK
&& target
->state
== TARGET_HALTED
)
1553 /* The Cache handling will NOT work with MMU active, the wrong addresses will be invalidated */
1554 /* invalidate I-Cache */
1555 if (armv7a
->armv4_5_mmu
.armv4_5_cache
.i_cache_enabled
)
1557 /* Invalidate ICache single entry with MVA, repeat this for all cache
1558 lines in the address range, Cortex-A8 has fixed 64 byte line length */
1559 /* Invalidate Cache single entry with MVA to PoU */
1560 for (uint32_t cacheline
=address
; cacheline
<address
+size
*count
; cacheline
+=64)
1561 armv7a
->write_cp15(target
, 0, 1, 7, 5, cacheline
); /* I-Cache to PoU */
1563 /* invalidate D-Cache */
1564 if (armv7a
->armv4_5_mmu
.armv4_5_cache
.d_u_cache_enabled
)
1566 /* Invalidate Cache single entry with MVA to PoC */
1567 for (uint32_t cacheline
=address
; cacheline
<address
+size
*count
; cacheline
+=64)
1568 armv7a
->write_cp15(target
, 0, 1, 7, 6, cacheline
); /* U/D cache to PoC */
1575 static int cortex_a8_bulk_write_memory(struct target
*target
, uint32_t address
,
1576 uint32_t count
, uint8_t *buffer
)
1578 return cortex_a8_write_memory(target
, address
, 4, count
, buffer
);
1582 static int cortex_a8_dcc_read(struct swjdp_common
*swjdp
, uint8_t *value
, uint8_t *ctrl
)
1587 mem_ap_read_buf_u16(swjdp
, (uint8_t*)&dcrdr
, 1, DCB_DCRDR
);
1588 *ctrl
= (uint8_t)dcrdr
;
1589 *value
= (uint8_t)(dcrdr
>> 8);
1591 LOG_DEBUG("data 0x%x ctrl 0x%x", *value
, *ctrl
);
1593 /* write ack back to software dcc register
1594 * signify we have read data */
1595 if (dcrdr
& (1 << 0))
1598 mem_ap_write_buf_u16(swjdp
, (uint8_t*)&dcrdr
, 1, DCB_DCRDR
);
1605 static int cortex_a8_handle_target_request(void *priv
)
1607 struct target
*target
= priv
;
1608 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
1609 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
1611 if (!target_was_examined(target
))
1613 if (!target
->dbg_msg_enabled
)
1616 if (target
->state
== TARGET_RUNNING
)
1621 cortex_a8_dcc_read(swjdp
, &data
, &ctrl
);
1623 /* check if we have data */
1624 if (ctrl
& (1 << 0))
1628 /* we assume target is quick enough */
1630 cortex_a8_dcc_read(swjdp
, &data
, &ctrl
);
1631 request
|= (data
<< 8);
1632 cortex_a8_dcc_read(swjdp
, &data
, &ctrl
);
1633 request
|= (data
<< 16);
1634 cortex_a8_dcc_read(swjdp
, &data
, &ctrl
);
1635 request
|= (data
<< 24);
1636 target_request(target
, request
);
1644 * Cortex-A8 target information and configuration
1647 static int cortex_a8_examine_first(struct target
*target
)
1649 struct cortex_a8_common
*cortex_a8
= target_to_cortex_a8(target
);
1650 struct armv7a_common
*armv7a
= &cortex_a8
->armv7a_common
;
1651 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
1653 int retval
= ERROR_OK
;
1654 uint32_t didr
, ctypr
, ttypr
, cpuid
;
1658 /* Here we shall insert a proper ROM Table scan */
1659 armv7a
->debug_base
= OMAP3530_DEBUG_BASE
;
1661 /* We do one extra read to ensure DAP is configured,
1662 * we call ahbap_debugport_init(swjdp) instead
1664 ahbap_debugport_init(swjdp
);
1665 mem_ap_read_atomic_u32(swjdp
, armv7a
->debug_base
+ CPUDBG_CPUID
, &cpuid
);
1666 if ((retval
= mem_ap_read_atomic_u32(swjdp
,
1667 armv7a
->debug_base
+ CPUDBG_CPUID
, &cpuid
)) != ERROR_OK
)
1669 LOG_DEBUG("Examine failed");
1673 if ((retval
= mem_ap_read_atomic_u32(swjdp
,
1674 armv7a
->debug_base
+ CPUDBG_CTYPR
, &ctypr
)) != ERROR_OK
)
1676 LOG_DEBUG("Examine failed");
1680 if ((retval
= mem_ap_read_atomic_u32(swjdp
,
1681 armv7a
->debug_base
+ CPUDBG_TTYPR
, &ttypr
)) != ERROR_OK
)
1683 LOG_DEBUG("Examine failed");
1687 if ((retval
= mem_ap_read_atomic_u32(swjdp
,
1688 armv7a
->debug_base
+ CPUDBG_DIDR
, &didr
)) != ERROR_OK
)
1690 LOG_DEBUG("Examine failed");
1694 LOG_DEBUG("cpuid = 0x%08" PRIx32
, cpuid
);
1695 LOG_DEBUG("ctypr = 0x%08" PRIx32
, ctypr
);
1696 LOG_DEBUG("ttypr = 0x%08" PRIx32
, ttypr
);
1697 LOG_DEBUG("didr = 0x%08" PRIx32
, didr
);
1699 /* Setup Breakpoint Register Pairs */
1700 cortex_a8
->brp_num
= ((didr
>> 24) & 0x0F) + 1;
1701 cortex_a8
->brp_num_context
= ((didr
>> 20) & 0x0F) + 1;
1702 cortex_a8
->brp_num_available
= cortex_a8
->brp_num
;
1703 cortex_a8
->brp_list
= calloc(cortex_a8
->brp_num
, sizeof(struct cortex_a8_brp
));
1704 // cortex_a8->brb_enabled = ????;
1705 for (i
= 0; i
< cortex_a8
->brp_num
; i
++)
1707 cortex_a8
->brp_list
[i
].used
= 0;
1708 if (i
< (cortex_a8
->brp_num
-cortex_a8
->brp_num_context
))
1709 cortex_a8
->brp_list
[i
].type
= BRP_NORMAL
;
1711 cortex_a8
->brp_list
[i
].type
= BRP_CONTEXT
;
1712 cortex_a8
->brp_list
[i
].value
= 0;
1713 cortex_a8
->brp_list
[i
].control
= 0;
1714 cortex_a8
->brp_list
[i
].BRPn
= i
;
1717 /* Setup Watchpoint Register Pairs */
1718 cortex_a8
->wrp_num
= ((didr
>> 28) & 0x0F) + 1;
1719 cortex_a8
->wrp_num_available
= cortex_a8
->wrp_num
;
1720 cortex_a8
->wrp_list
= calloc(cortex_a8
->wrp_num
, sizeof(struct cortex_a8_wrp
));
1721 for (i
= 0; i
< cortex_a8
->wrp_num
; i
++)
1723 cortex_a8
->wrp_list
[i
].used
= 0;
1724 cortex_a8
->wrp_list
[i
].type
= 0;
1725 cortex_a8
->wrp_list
[i
].value
= 0;
1726 cortex_a8
->wrp_list
[i
].control
= 0;
1727 cortex_a8
->wrp_list
[i
].WRPn
= i
;
1729 LOG_DEBUG("Configured %i hw breakpoint pairs and %i hw watchpoint pairs",
1730 cortex_a8
->brp_num
, cortex_a8
->wrp_num
);
1732 target_set_examined(target
);
1736 static int cortex_a8_examine(struct target
*target
)
1738 int retval
= ERROR_OK
;
1740 /* don't re-probe hardware after each reset */
1741 if (!target_was_examined(target
))
1742 retval
= cortex_a8_examine_first(target
);
1744 /* Configure core debug access */
1745 if (retval
== ERROR_OK
)
1746 retval
= cortex_a8_init_debug_access(target
);
1752 * Cortex-A8 target creation and initialization
1755 static void cortex_a8_build_reg_cache(struct target
*target
)
1757 struct reg_cache
**cache_p
= register_get_last_cache_p(&target
->reg_cache
);
1758 struct arm
*armv4_5
= target_to_armv4_5(target
);
1760 armv4_5
->core_type
= ARM_MODE_MON
;
1762 (*cache_p
) = armv4_5_build_reg_cache(target
, armv4_5
);
1766 static int cortex_a8_init_target(struct command_context
*cmd_ctx
,
1767 struct target
*target
)
1769 cortex_a8_build_reg_cache(target
);
1773 static int cortex_a8_init_arch_info(struct target
*target
,
1774 struct cortex_a8_common
*cortex_a8
, struct jtag_tap
*tap
)
1776 struct armv7a_common
*armv7a
= &cortex_a8
->armv7a_common
;
1777 struct arm
*armv4_5
= &armv7a
->armv4_5_common
;
1778 struct swjdp_common
*swjdp
= &armv7a
->swjdp_info
;
1780 /* Setup struct cortex_a8_common */
1781 cortex_a8
->common_magic
= CORTEX_A8_COMMON_MAGIC
;
1782 armv4_5
->arch_info
= armv7a
;
1784 /* prepare JTAG information for the new target */
1785 cortex_a8
->jtag_info
.tap
= tap
;
1786 cortex_a8
->jtag_info
.scann_size
= 4;
1788 swjdp
->dp_select_value
= -1;
1789 swjdp
->ap_csw_value
= -1;
1790 swjdp
->ap_tar_value
= -1;
1791 swjdp
->jtag_info
= &cortex_a8
->jtag_info
;
1792 swjdp
->memaccess_tck
= 80;
1794 /* Number of bits for tar autoincrement, impl. dep. at least 10 */
1795 swjdp
->tar_autoincr_block
= (1 << 10);
1797 cortex_a8
->fast_reg_read
= 0;
1800 /* register arch-specific functions */
1801 armv7a
->examine_debug_reason
= NULL
;
1803 armv7a
->post_debug_entry
= cortex_a8_post_debug_entry
;
1805 armv7a
->pre_restore_context
= NULL
;
1806 armv7a
->post_restore_context
= NULL
;
1807 armv7a
->armv4_5_mmu
.armv4_5_cache
.ctype
= -1;
1808 // armv7a->armv4_5_mmu.get_ttb = armv7a_get_ttb;
1809 armv7a
->armv4_5_mmu
.read_memory
= cortex_a8_read_memory
;
1810 armv7a
->armv4_5_mmu
.write_memory
= cortex_a8_write_memory
;
1811 // armv7a->armv4_5_mmu.disable_mmu_caches = armv7a_disable_mmu_caches;
1812 // armv7a->armv4_5_mmu.enable_mmu_caches = armv7a_enable_mmu_caches;
1813 armv7a
->armv4_5_mmu
.has_tiny_pages
= 1;
1814 armv7a
->armv4_5_mmu
.mmu_enabled
= 0;
1815 armv7a
->read_cp15
= cortex_a8_read_cp15
;
1816 armv7a
->write_cp15
= cortex_a8_write_cp15
;
1819 // arm7_9->handle_target_request = cortex_a8_handle_target_request;
1821 armv4_5
->read_core_reg
= cortex_a8_read_core_reg
;
1822 armv4_5
->write_core_reg
= cortex_a8_write_core_reg
;
1824 /* REVISIT v7a setup should be in a v7a-specific routine */
1825 armv4_5_init_arch_info(target
, armv4_5
);
1826 armv7a
->common_magic
= ARMV7_COMMON_MAGIC
;
1828 target_register_timer_callback(cortex_a8_handle_target_request
, 1, 1, target
);
1833 static int cortex_a8_target_create(struct target
*target
, Jim_Interp
*interp
)
1835 struct cortex_a8_common
*cortex_a8
= calloc(1, sizeof(struct cortex_a8_common
));
1837 cortex_a8_init_arch_info(target
, cortex_a8
, target
->tap
);
1842 COMMAND_HANDLER(cortex_a8_handle_cache_info_command
)
1844 struct target
*target
= get_current_target(CMD_CTX
);
1845 struct armv7a_common
*armv7a
= target_to_armv7a(target
);
1847 return armv4_5_handle_cache_info_command(CMD_CTX
,
1848 &armv7a
->armv4_5_mmu
.armv4_5_cache
);
1852 COMMAND_HANDLER(cortex_a8_handle_dbginit_command
)
1854 struct target
*target
= get_current_target(CMD_CTX
);
1856 cortex_a8_init_debug_access(target
);
1862 static int cortex_a8_register_commands(struct command_context
*cmd_ctx
)
1864 struct command
*cortex_a8_cmd
;
1865 int retval
= ERROR_OK
;
1867 armv4_5_register_commands(cmd_ctx
);
1868 armv7a_register_commands(cmd_ctx
);
1870 cortex_a8_cmd
= register_command(cmd_ctx
, NULL
, "cortex_a8",
1872 "cortex_a8 specific commands");
1874 register_command(cmd_ctx
, cortex_a8_cmd
, "cache_info",
1875 cortex_a8_handle_cache_info_command
, COMMAND_EXEC
,
1876 "display information about target caches");
1878 register_command(cmd_ctx
, cortex_a8_cmd
, "dbginit",
1879 cortex_a8_handle_dbginit_command
, COMMAND_EXEC
,
1880 "Initialize core debug");
1885 struct target_type cortexa8_target
= {
1886 .name
= "cortex_a8",
1888 .poll
= cortex_a8_poll
,
1889 .arch_state
= armv7a_arch_state
,
1891 .target_request_data
= NULL
,
1893 .halt
= cortex_a8_halt
,
1894 .resume
= cortex_a8_resume
,
1895 .step
= cortex_a8_step
,
1897 .assert_reset
= cortex_a8_assert_reset
,
1898 .deassert_reset
= cortex_a8_deassert_reset
,
1899 .soft_reset_halt
= NULL
,
1901 .get_gdb_reg_list
= armv4_5_get_gdb_reg_list
,
1903 .read_memory
= cortex_a8_read_memory
,
1904 .write_memory
= cortex_a8_write_memory
,
1905 .bulk_write_memory
= cortex_a8_bulk_write_memory
,
1907 .checksum_memory
= arm_checksum_memory
,
1908 .blank_check_memory
= arm_blank_check_memory
,
1910 .run_algorithm
= armv4_5_run_algorithm
,
1912 .add_breakpoint
= cortex_a8_add_breakpoint
,
1913 .remove_breakpoint
= cortex_a8_remove_breakpoint
,
1914 .add_watchpoint
= NULL
,
1915 .remove_watchpoint
= NULL
,
1917 .register_commands
= cortex_a8_register_commands
,
1918 .target_create
= cortex_a8_target_create
,
1919 .init_target
= cortex_a8_init_target
,
1920 .examine
= cortex_a8_examine
,
1921 .mrc
= cortex_a8_mrc
,
1922 .mcr
= cortex_a8_mcr
,
Linking to existing account procedure
If you already have an account and want to add another login method
you
MUST first sign in with your existing account and
then change URL to read
https://review.openocd.org/login/?link
to get to this page again but this time it'll work for linking. Thank you.
SSH host keys fingerprints
1024 SHA256:YKx8b7u5ZWdcbp7/4AeXNaqElP49m6QrwfXaqQGJAOk gerrit-code-review@openocd.zylin.com (DSA)
384 SHA256:jHIbSQa4REvwCFG4cq5LBlBLxmxSqelQPem/EXIrxjk gerrit-code-review@openocd.org (ECDSA)
521 SHA256:UAOPYkU9Fjtcao0Ul/Rrlnj/OsQvt+pgdYSZ4jOYdgs gerrit-code-review@openocd.org (ECDSA)
256 SHA256:A13M5QlnozFOvTllybRZH6vm7iSt0XLxbA48yfc2yfY gerrit-code-review@openocd.org (ECDSA)
256 SHA256:spYMBqEYoAOtK7yZBrcwE8ZpYt6b68Cfh9yEVetvbXg gerrit-code-review@openocd.org (ED25519)
+--[ED25519 256]--+
|=.. |
|+o.. . |
|*.o . . |
|+B . . . |
|Bo. = o S |
|Oo.+ + = |
|oB=.* = . o |
| =+=.+ + E |
|. .=o . o |
+----[SHA256]-----+
2048 SHA256:0Onrb7/PHjpo6iVZ7xQX2riKN83FJ3KGU0TvI0TaFG4 gerrit-code-review@openocd.zylin.com (RSA)