1 /***************************************************************************
2 * Copyright (C) 2008-2009 by Marvell Semiconductors, Inc. *
3 * Written by Nicolas Pitre <nico@marvell.com> *
5 * Copyright (C) 2008 by Hongtao Zheng *
8 * This program is free software; you can redistribute it and/or modify *
9 * it under the terms of the GNU General Public License as published by *
10 * the Free Software Foundation; either version 2 of the License, or *
11 * (at your option) any later version. *
13 * This program is distributed in the hope that it will be useful, *
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
16 * GNU General Public License for more details. *
18 * You should have received a copy of the GNU General Public License *
19 * along with this program; if not, write to the *
20 * Free Software Foundation, Inc., *
21 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. *
22 ***************************************************************************/
25 * Marvell Feroceon/Dragonite support.
27 * The Feroceon core, as found in the Orion and Kirkwood SoCs amongst others,
28 * mimics the ARM926 ICE interface with the following differences:
30 * - the MOE (method of entry) reporting is not implemented
32 * - breakpoint/watchpoint comparator #1 is seemingly not implemented
34 * - due to a different pipeline implementation, some injected debug
35 * instruction sequences have to be somewhat different
39 * - asserting DBGRQ doesn't work if target is looping on the undef vector
41 * - the EICE version signature in the COMMS_CTL reg is next to the flow bits
42 * not at the top, and rather meaningless due to existing discrepencies
44 * - the DCC channel is half duplex (only one FIFO for both directions) with
45 * seemingly no proper flow control.
47 * The Dragonite core is the non-mmu version based on the ARM966 model, and
48 * it shares the above issues as well.
55 #include "arm926ejs.h"
57 #include "target_type.h"
59 #include "arm_opcodes.h"
61 static int feroceon_assert_reset(struct target
*target
)
63 struct arm
*arm
= target
->arch_info
;
64 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
65 int ud
= arm7_9
->use_dbgrq
;
67 arm7_9
->use_dbgrq
= 0;
68 if (target
->reset_halt
)
70 arm7_9
->use_dbgrq
= ud
;
71 return arm7_9_assert_reset(target
);
74 static int feroceon_dummy_clock_out(struct arm_jtag
*jtag_info
, uint32_t instr
)
76 struct scan_field fields
[3];
79 uint8_t sysspeed_buf
= 0x0;
83 buf_set_u32(out_buf
, 0, 32, 0);
85 buf_set_u32(instr_buf
, 0, 32, flip_u32(instr
, 32));
87 retval
= arm_jtag_scann(jtag_info
, 0x1, TAP_DRPAUSE
);
88 if (retval
!= ERROR_OK
)
91 retval
= arm_jtag_set_instr(jtag_info
, jtag_info
->intest_instr
, NULL
, TAP_DRPAUSE
);
92 if (retval
!= ERROR_OK
)
95 fields
[0].num_bits
= 32;
96 fields
[0].out_value
= out_buf
;
97 fields
[0].in_value
= NULL
;
99 fields
[1].num_bits
= 3;
100 fields
[1].out_value
= &sysspeed_buf
;
101 fields
[1].in_value
= NULL
;
103 fields
[2].num_bits
= 32;
104 fields
[2].out_value
= instr_buf
;
105 fields
[2].in_value
= NULL
;
107 jtag_add_dr_scan(jtag_info
->tap
, 3, fields
, TAP_DRPAUSE
);
109 /* no jtag_add_runtest(0, TAP_DRPAUSE) here */
114 static void feroceon_change_to_arm(struct target
*target
, uint32_t *r0
,
117 struct arm
*arm
= target
->arch_info
;
118 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
119 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
122 * save r0 before using it and put system in ARM state
123 * to allow common handling of ARM and THUMB debugging
126 feroceon_dummy_clock_out(jtag_info
, ARMV4_5_T_NOP
);
127 feroceon_dummy_clock_out(jtag_info
, ARMV4_5_T_NOP
);
128 feroceon_dummy_clock_out(jtag_info
, ARMV4_5_T_NOP
);
130 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_STR(0, 0), 0, NULL
, 0);
131 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
132 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
133 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, r0
, 0);
134 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
135 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
137 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_MOV(0, 15), 0, NULL
, 0);
138 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_STR(0, 0), 0, NULL
, 0);
139 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
140 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
141 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, pc
, 0);
142 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
143 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
145 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_BX(15), 0, NULL
, 0);
146 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
147 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
148 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
149 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
151 jtag_execute_queue();
154 * fix program counter:
155 * MOV R0, PC was the 7th instruction (+12)
156 * reading PC in Thumb state gives address of instruction + 4
161 static void feroceon_read_core_regs(struct target
*target
,
162 uint32_t mask
, uint32_t *core_regs
[16])
165 struct arm
*arm
= target
->arch_info
;
166 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
167 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
169 arm9tdmi_clock_out(jtag_info
, ARMV4_5_STMIA(0, mask
& 0xffff, 0, 0), 0, NULL
, 0);
170 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
171 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
173 for (i
= 0; i
<= 15; i
++)
175 arm9tdmi_clock_data_in(jtag_info
, core_regs
[i
]);
177 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
178 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
181 static void feroceon_read_core_regs_target_buffer(struct target
*target
,
182 uint32_t mask
, void *buffer
, int size
)
185 struct arm
*arm
= target
->arch_info
;
186 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
187 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
188 int be
= (target
->endianness
== TARGET_BIG_ENDIAN
) ? 1 : 0;
189 uint32_t *buf_u32
= buffer
;
190 uint16_t *buf_u16
= buffer
;
191 uint8_t *buf_u8
= buffer
;
193 arm9tdmi_clock_out(jtag_info
, ARMV4_5_STMIA(0, mask
& 0xffff, 0, 0), 0, NULL
, 0);
194 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
195 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
197 for (i
= 0; i
<= 15; i
++) {
198 if (mask
& (1 << i
)) {
201 arm9tdmi_clock_data_in_endianness(jtag_info
, buf_u32
++, 4, be
);
204 arm9tdmi_clock_data_in_endianness(jtag_info
, buf_u16
++, 2, be
);
207 arm9tdmi_clock_data_in_endianness(jtag_info
, buf_u8
++, 1, be
);
213 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
214 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
217 static void feroceon_read_xpsr(struct target
*target
, uint32_t *xpsr
, int spsr
)
219 struct arm
*arm
= target
->arch_info
;
220 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
221 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
223 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MRS(0, spsr
& 1), 0, NULL
, 0);
224 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
225 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
226 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
227 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
228 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
229 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
231 arm9tdmi_clock_out(jtag_info
, ARMV4_5_STMIA(0, 1, 0, 0), 0, NULL
, 0);
232 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
233 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
234 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, xpsr
, 0);
236 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
237 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
240 static void feroceon_write_xpsr(struct target
*target
, uint32_t xpsr
, int spsr
)
242 struct arm
*arm
= target
->arch_info
;
243 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
244 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
246 LOG_DEBUG("xpsr: %8.8" PRIx32
", spsr: %i", xpsr
, spsr
);
248 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MSR_IM(xpsr
& 0xff, 0, 1, spsr
), 0, NULL
, 0);
249 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
250 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
251 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
252 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
253 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
254 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
256 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MSR_IM((xpsr
& 0xff00) >> 8, 0xc, 2, spsr
), 0, NULL
, 0);
257 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
258 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
259 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
260 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
261 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
262 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
264 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MSR_IM((xpsr
& 0xff0000) >> 16, 0x8, 4, spsr
), 0, NULL
, 0);
265 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
266 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
267 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
268 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
269 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
270 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
272 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MSR_IM((xpsr
& 0xff000000) >> 24, 0x4, 8, spsr
), 0, NULL
, 0);
273 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
274 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
275 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
276 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
277 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
278 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
281 static void feroceon_write_xpsr_im8(struct target
*target
,
282 uint8_t xpsr_im
, int rot
, int spsr
)
284 struct arm
*arm
= target
->arch_info
;
285 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
286 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
288 LOG_DEBUG("xpsr_im: %2.2x, rot: %i, spsr: %i", xpsr_im
, rot
, spsr
);
290 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MSR_IM(xpsr_im
, rot
, 1, spsr
), 0, NULL
, 0);
291 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
292 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
293 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
294 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
295 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
296 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
299 static void feroceon_write_core_regs(struct target
*target
,
300 uint32_t mask
, uint32_t core_regs
[16])
303 struct arm
*arm
= target
->arch_info
;
304 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
305 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
307 arm9tdmi_clock_out(jtag_info
, ARMV4_5_LDMIA(0, mask
& 0xffff, 0, 0), 0, NULL
, 0);
308 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
309 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
311 for (i
= 0; i
<= 15; i
++)
313 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, core_regs
[i
], NULL
, 0);
315 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
316 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
317 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
320 static void feroceon_branch_resume(struct target
*target
)
322 struct arm
*arm
= target
->arch_info
;
323 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
324 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
326 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
327 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
328 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
329 arm9tdmi_clock_out(jtag_info
, ARMV4_5_B(0xfffff9, 0), 0, NULL
, 0);
330 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 1);
332 arm7_9
->need_bypass_before_restart
= 1;
335 static void feroceon_branch_resume_thumb(struct target
*target
)
339 struct arm
*arm
= target
->arch_info
;
340 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
341 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
342 uint32_t r0
= buf_get_u32(arm
->core_cache
->reg_list
[0].value
, 0, 32);
343 uint32_t pc
= buf_get_u32(arm
->pc
->value
, 0, 32);
345 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
346 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
347 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
348 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
350 arm9tdmi_clock_out(jtag_info
, 0xE28F0001, 0, NULL
, 0); /* add r0,pc,#1 */
351 arm9tdmi_clock_out(jtag_info
, ARMV4_5_BX(0), 0, NULL
, 0);
352 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
353 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
355 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_LDMIA(0, 0x1), 0, NULL
, 0);
356 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
357 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
359 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, r0
, NULL
, 0);
360 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
361 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
364 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_B(0x7e9 + pc
), 0, NULL
, 0);
365 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 1);
367 arm7_9
->need_bypass_before_restart
= 1;
370 static int feroceon_read_cp15(struct target
*target
, uint32_t op1
,
371 uint32_t op2
, uint32_t CRn
, uint32_t CRm
, uint32_t *value
)
373 struct arm
*arm
= target
->arch_info
;
374 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
375 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
378 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MRC(15, op1
, 0, CRn
, CRm
, op2
), 0, NULL
, 0);
379 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 1);
380 err
= arm7_9_execute_sys_speed(target
);
384 arm9tdmi_clock_out(jtag_info
, ARMV4_5_STMIA(0, 1, 0, 0), 0, NULL
, 0);
385 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
386 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
387 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, value
, 0);
388 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
389 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
390 return jtag_execute_queue();
393 static int feroceon_write_cp15(struct target
*target
, uint32_t op1
,
394 uint32_t op2
, uint32_t CRn
, uint32_t CRm
, uint32_t value
)
396 struct arm
*arm
= target
->arch_info
;
397 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
398 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
400 arm9tdmi_clock_out(jtag_info
, ARMV4_5_LDMIA(0, 1, 0, 0), 0, NULL
, 0);
401 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
402 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
403 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, value
, NULL
, 0);
404 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
405 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
406 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
408 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MCR(15, op1
, 0, CRn
, CRm
, op2
), 0, NULL
, 0);
409 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 1);
410 return arm7_9_execute_sys_speed(target
);
413 static void feroceon_set_dbgrq(struct target
*target
)
415 struct arm
*arm
= target
->arch_info
;
416 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
417 struct reg
*dbg_ctrl
= &arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
];
419 buf_set_u32(dbg_ctrl
->value
, 0, 8, 2);
420 embeddedice_store_reg(dbg_ctrl
);
423 static void feroceon_enable_single_step(struct target
*target
, uint32_t next_pc
)
425 struct arm
*arm
= target
->arch_info
;
426 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
428 /* set a breakpoint there */
429 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_ADDR_VALUE
], next_pc
);
430 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_ADDR_MASK
], 0);
431 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_DATA_MASK
], 0xffffffff);
432 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_CONTROL_VALUE
], 0x100);
433 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_CONTROL_MASK
], 0xf7);
436 static void feroceon_disable_single_step(struct target
*target
)
438 struct arm
*arm
= target
->arch_info
;
439 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
441 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_ADDR_VALUE
]);
442 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_ADDR_MASK
]);
443 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_DATA_MASK
]);
444 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_CONTROL_MASK
]);
445 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_CONTROL_VALUE
]);
448 static int feroceon_examine_debug_reason(struct target
*target
)
450 /* the MOE is not implemented */
451 if (target
->debug_reason
!= DBG_REASON_SINGLESTEP
)
452 target
->debug_reason
= DBG_REASON_DBGRQ
;
457 static int feroceon_bulk_write_memory(struct target
*target
,
458 uint32_t address
, uint32_t count
, const uint8_t *buffer
)
461 struct arm
*arm
= target
->arch_info
;
462 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
463 enum arm_state core_state
= arm
->core_state
;
464 uint32_t x
, flip
, shift
, save
[7];
468 * We can't use the dcc flow control bits, so let's transfer data
469 * with 31 bits and flip the MSB each time a new data word is sent.
471 static uint32_t dcc_code
[] = {
472 0xee115e10, /* 3: mrc p14, 0, r5, c1, c0, 0 */
473 0xe3a0301e, /* 1: mov r3, #30 */
474 0xe3a04002, /* mov r4, #2 */
475 0xee111e10, /* 2: mrc p14, 0, r1, c1, c0, 0 */
476 0xe1310005, /* teq r1, r5 */
477 0x0afffffc, /* beq 1b */
478 0xe1a05001, /* mov r5, r1 */
479 0xe1a01081, /* mov r1, r1, lsl #1 */
480 0xee112e10, /* 3: mrc p14, 0, r2, c1, c0, 0 */
481 0xe1320005, /* teq r2, r5 */
482 0x0afffffc, /* beq 3b */
483 0xe1a05002, /* mov r5, r2 */
484 0xe3c22102, /* bic r2, r2, #0x80000000 */
485 0xe1811332, /* orr r1, r1, r2, lsr r3 */
486 0xe2533001, /* subs r3, r3, #1 */
487 0xe4801004, /* str r1, [r0], #4 */
488 0xe1a01412, /* mov r1, r2, lsl r4 */
489 0xe2844001, /* add r4, r4, #1 */
490 0x4affffed, /* bmi 1b */
491 0xeafffff3, /* b 3b */
494 uint32_t dcc_size
= sizeof(dcc_code
);
496 if (address
% 4 != 0)
497 return ERROR_TARGET_UNALIGNED_ACCESS
;
499 if (!arm7_9
->dcc_downloads
)
500 return ERROR_TARGET_RESOURCE_NOT_AVAILABLE
;
502 /* regrab previously allocated working_area, or allocate a new one */
503 if (!arm7_9
->dcc_working_area
) {
504 uint8_t dcc_code_buf
[dcc_size
];
506 /* make sure we have a working area */
507 if (target_alloc_working_area(target
, dcc_size
, &arm7_9
->dcc_working_area
) != ERROR_OK
) {
508 LOG_INFO("no working area available, falling back to memory writes");
509 return ERROR_TARGET_RESOURCE_NOT_AVAILABLE
;
512 /* copy target instructions to target endianness */
513 for (i
= 0; i
< dcc_size
/4; i
++)
514 target_buffer_set_u32(target
, dcc_code_buf
+ i
*4, dcc_code
[i
]);
516 /* write DCC code to working area, using the non-optimized
517 * memory write to avoid ending up here again */
518 retval
= arm7_9_write_memory_no_opt(target
,
519 arm7_9
->dcc_working_area
->address
, 4, dcc_size
/4, dcc_code_buf
);
520 if (retval
!= ERROR_OK
)
524 /* backup clobbered processor state */
525 for (i
= 0; i
<= 5; i
++)
526 save
[i
] = buf_get_u32(arm
->core_cache
->reg_list
[i
].value
, 0, 32);
527 save
[i
] = buf_get_u32(arm
->pc
->value
, 0, 32);
529 /* set up target address in r0 */
530 buf_set_u32(arm
->core_cache
->reg_list
[0].value
, 0, 32, address
);
531 arm
->core_cache
->reg_list
[0].valid
= 1;
532 arm
->core_cache
->reg_list
[0].dirty
= 1;
533 arm
->core_state
= ARM_STATE_ARM
;
535 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_COMMS_DATA
], 0);
536 arm7_9_resume(target
, 0, arm7_9
->dcc_working_area
->address
, 1, 1);
542 for (i
= 0; i
< count
; i
++) {
543 uint32_t y
= target_buffer_get_u32(target
, buffer
);
544 uint32_t z
= (x
>> 1) | (y
>> shift
) | (flip
^= 0x80000000);
545 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_COMMS_DATA
], z
);
546 x
= y
<< (32 - shift
);
547 if (++shift
>= 32 || i
+ 1 >= count
) {
548 z
= (x
>> 1) | (flip
^= 0x80000000);
549 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_COMMS_DATA
], z
);
556 retval
= target_halt(target
);
557 if (retval
== ERROR_OK
)
558 retval
= target_wait_state(target
, TARGET_HALTED
, 500);
559 if (retval
== ERROR_OK
) {
560 uint32_t endaddress
=
561 buf_get_u32(arm
->core_cache
->reg_list
[0].value
, 0, 32);
562 if (endaddress
!= address
+ count
*4) {
563 LOG_ERROR("DCC write failed,"
564 " expected end address 0x%08" PRIx32
565 " got 0x%0" PRIx32
"",
566 address
+ count
*4, endaddress
);
571 /* restore target state */
572 for (i
= 0; i
<= 5; i
++) {
573 buf_set_u32(arm
->core_cache
->reg_list
[i
].value
, 0, 32, save
[i
]);
574 arm
->core_cache
->reg_list
[i
].valid
= 1;
575 arm
->core_cache
->reg_list
[i
].dirty
= 1;
577 buf_set_u32(arm
->pc
->value
, 0, 32, save
[i
]);
580 arm
->core_state
= core_state
;
585 static int feroceon_init_target(struct command_context
*cmd_ctx
,
586 struct target
*target
)
588 arm9tdmi_init_target(cmd_ctx
, target
);
592 static void feroceon_common_setup(struct target
*target
)
594 struct arm
*arm
= target
->arch_info
;
595 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
597 /* override some insn sequence functions */
598 arm7_9
->change_to_arm
= feroceon_change_to_arm
;
599 arm7_9
->read_core_regs
= feroceon_read_core_regs
;
600 arm7_9
->read_core_regs_target_buffer
= feroceon_read_core_regs_target_buffer
;
601 arm7_9
->read_xpsr
= feroceon_read_xpsr
;
602 arm7_9
->write_xpsr
= feroceon_write_xpsr
;
603 arm7_9
->write_xpsr_im8
= feroceon_write_xpsr_im8
;
604 arm7_9
->write_core_regs
= feroceon_write_core_regs
;
605 arm7_9
->branch_resume
= feroceon_branch_resume
;
606 arm7_9
->branch_resume_thumb
= feroceon_branch_resume_thumb
;
608 /* must be implemented with only one comparator */
609 arm7_9
->enable_single_step
= feroceon_enable_single_step
;
610 arm7_9
->disable_single_step
= feroceon_disable_single_step
;
612 arm7_9
->bulk_write_memory
= feroceon_bulk_write_memory
;
614 /* MOE is not implemented */
615 arm7_9
->examine_debug_reason
= feroceon_examine_debug_reason
;
617 /* Note: asserting DBGRQ might not win over the undef exception.
618 If that happens then just use "arm7_9 dbgrq disable". */
619 arm7_9
->use_dbgrq
= 1;
620 arm7_9
->set_special_dbgrq
= feroceon_set_dbgrq
;
622 /* only one working comparator */
623 arm7_9
->wp_available_max
= 1;
624 arm7_9
->wp1_used_default
= -1;
627 static int feroceon_target_create(struct target
*target
, Jim_Interp
*interp
)
629 struct arm926ejs_common
*arm926ejs
= calloc(1, sizeof(struct arm926ejs_common
));
631 arm926ejs_init_arch_info(target
, arm926ejs
, target
->tap
);
632 feroceon_common_setup(target
);
634 struct arm
*arm
= target
->arch_info
;
635 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
636 arm7_9
->write_memory
= arm926ejs_write_memory
;
638 /* the standard ARM926 methods don't always work (don't ask...) */
639 arm926ejs
->read_cp15
= feroceon_read_cp15
;
640 arm926ejs
->write_cp15
= feroceon_write_cp15
;
645 static int dragonite_target_create(struct target
*target
, Jim_Interp
*interp
)
647 struct arm966e_common
*arm966e
= calloc(1, sizeof(struct arm966e_common
));
649 arm966e_init_arch_info(target
, arm966e
, target
->tap
);
650 feroceon_common_setup(target
);
652 struct arm
*arm
= target
->arch_info
;
653 struct arm7_9_common
*arm7_9
= arm
->arch_info
;
654 arm7_9
->write_memory
= arm7_9_write_memory
;
659 static int feroceon_examine(struct target
*target
)
662 struct arm7_9_common
*arm7_9
;
665 retval
= arm7_9_examine(target
);
666 if (retval
!= ERROR_OK
)
669 arm
= target
->arch_info
;
670 arm7_9
= arm
->arch_info
;
672 /* the COMMS_CTRL bits are all contiguous */
673 if (buf_get_u32(arm7_9
->eice_cache
->reg_list
[EICE_COMMS_CTRL
].value
, 2, 4) != 6)
674 LOG_ERROR("unexpected Feroceon EICE version signature");
676 arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
].size
= 6;
677 arm7_9
->eice_cache
->reg_list
[EICE_DBG_STAT
].size
= 5;
678 arm7_9
->has_monitor_mode
= 1;
680 /* vector catch reg is not initialized on reset */
681 embeddedice_set_reg(&arm7_9
->eice_cache
->reg_list
[EICE_VEC_CATCH
], 0);
683 /* clear monitor mode, enable comparators */
684 embeddedice_read_reg(&arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
]);
685 jtag_execute_queue();
686 buf_set_u32(arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
].value
, 4, 1, 0);
687 buf_set_u32(arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
].value
, 5, 1, 0);
688 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
]);
693 struct target_type feroceon_target
= {
697 .arch_state
= arm926ejs_arch_state
,
699 .target_request_data
= arm7_9_target_request_data
,
702 .resume
= arm7_9_resume
,
705 .assert_reset
= feroceon_assert_reset
,
706 .deassert_reset
= arm7_9_deassert_reset
,
707 .soft_reset_halt
= arm926ejs_soft_reset_halt
,
709 .get_gdb_reg_list
= arm_get_gdb_reg_list
,
711 .read_memory
= arm7_9_read_memory
,
712 .write_memory
= arm7_9_write_memory_opt
,
714 .checksum_memory
= arm_checksum_memory
,
715 .blank_check_memory
= arm_blank_check_memory
,
717 .run_algorithm
= armv4_5_run_algorithm
,
719 .add_breakpoint
= arm7_9_add_breakpoint
,
720 .remove_breakpoint
= arm7_9_remove_breakpoint
,
721 .add_watchpoint
= arm7_9_add_watchpoint
,
722 .remove_watchpoint
= arm7_9_remove_watchpoint
,
724 .commands
= arm926ejs_command_handlers
,
725 .target_create
= feroceon_target_create
,
726 .init_target
= feroceon_init_target
,
727 .examine
= feroceon_examine
,
730 struct target_type dragonite_target
= {
734 .arch_state
= arm_arch_state
,
736 .target_request_data
= arm7_9_target_request_data
,
739 .resume
= arm7_9_resume
,
742 .assert_reset
= feroceon_assert_reset
,
743 .deassert_reset
= arm7_9_deassert_reset
,
744 .soft_reset_halt
= arm7_9_soft_reset_halt
,
746 .get_gdb_reg_list
= arm_get_gdb_reg_list
,
748 .read_memory
= arm7_9_read_memory
,
749 .write_memory
= arm7_9_write_memory_opt
,
751 .checksum_memory
= arm_checksum_memory
,
752 .blank_check_memory
= arm_blank_check_memory
,
754 .run_algorithm
= armv4_5_run_algorithm
,
756 .add_breakpoint
= arm7_9_add_breakpoint
,
757 .remove_breakpoint
= arm7_9_remove_breakpoint
,
758 .add_watchpoint
= arm7_9_add_watchpoint
,
759 .remove_watchpoint
= arm7_9_remove_watchpoint
,
761 .commands
= arm966e_command_handlers
,
762 .target_create
= dragonite_target_create
,
763 .init_target
= feroceon_init_target
,
764 .examine
= feroceon_examine
,
Linking to existing account procedure
If you already have an account and want to add another login method
you
MUST first sign in with your existing account and
then change URL to read
https://review.openocd.org/login/?link
to get to this page again but this time it'll work for linking. Thank you.
SSH host keys fingerprints
1024 SHA256:YKx8b7u5ZWdcbp7/4AeXNaqElP49m6QrwfXaqQGJAOk gerrit-code-review@openocd.zylin.com (DSA)
384 SHA256:jHIbSQa4REvwCFG4cq5LBlBLxmxSqelQPem/EXIrxjk gerrit-code-review@openocd.org (ECDSA)
521 SHA256:UAOPYkU9Fjtcao0Ul/Rrlnj/OsQvt+pgdYSZ4jOYdgs gerrit-code-review@openocd.org (ECDSA)
256 SHA256:A13M5QlnozFOvTllybRZH6vm7iSt0XLxbA48yfc2yfY gerrit-code-review@openocd.org (ECDSA)
256 SHA256:spYMBqEYoAOtK7yZBrcwE8ZpYt6b68Cfh9yEVetvbXg gerrit-code-review@openocd.org (ED25519)
+--[ED25519 256]--+
|=.. |
|+o.. . |
|*.o . . |
|+B . . . |
|Bo. = o S |
|Oo.+ + = |
|oB=.* = . o |
| =+=.+ + E |
|. .=o . o |
+----[SHA256]-----+
2048 SHA256:0Onrb7/PHjpo6iVZ7xQX2riKN83FJ3KGU0TvI0TaFG4 gerrit-code-review@openocd.zylin.com (RSA)