src/target/mips_ejtag.c

   1 /***************************************************************************
   2  *   Copyright (C) 2008 by Spencer Oliver                                  *
   3  *   spen@spen-soft.co.uk                                                  *
   4  *                                                                         *
   5  *   Copyright (C) 2008 by David T.L. Wong                                 *
   6  *                                                                         *
   7  *   Copyright (C) 2009 by David N. Claffey <dnclaffey@gmail.com>          *
   8  *                                                                         *
   9  *   This program is free software; you can redistribute it and/or modify  *
  10  *   it under the terms of the GNU General Public License as published by  *
  11  *   the Free Software Foundation; either version 2 of the License, or     *
  12  *   (at your option) any later version.                                   *
  13  *                                                                         *
  14  *   This program is distributed in the hope that it will be useful,       *
  15  *   but WITHOUT ANY WARRANTY; without even the implied warranty of        *
  16  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
  17  *   GNU General Public License for more details.                          *
  18  *                                                                         *
  19  *   You should have received a copy of the GNU General Public License     *
  20  *   along with this program; if not, write to the                         *
  21  *   Free Software Foundation, Inc.,                                       *
  22  *   51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.           *
  23  ***************************************************************************/
  24
  25 #ifdef HAVE_CONFIG_H
  26 #include "config.h"
  27 #endif
  28
  29 #include "mips32.h"
  30 #include "mips_ejtag.h"
  31 #include "mips32_dmaacc.h"
  32
  33 void mips_ejtag_set_instr(struct mips_ejtag *ejtag_info, int new_instr)
  34 {
  35         struct jtag_tap *tap;
  36
  37         tap = ejtag_info->tap;
  38         assert(tap != NULL);
  39
  40         if (buf_get_u32(tap->cur_instr, 0, tap->ir_length) != (uint32_t)new_instr) {
  41                 struct scan_field field;
  42                 uint8_t t[4];
  43
  44                 field.num_bits = tap->ir_length;
  45                 field.out_value = t;
  46                 buf_set_u32(t, 0, field.num_bits, new_instr);
  47                 field.in_value = NULL;
  48
  49                 jtag_add_ir_scan(tap, &field, TAP_IDLE);
  50         }
  51 }
  52
  53 int mips_ejtag_get_idcode(struct mips_ejtag *ejtag_info, uint32_t *idcode)
  54 {
  55         struct scan_field field;
  56         uint8_t r[4];
  57
  58         mips_ejtag_set_instr(ejtag_info, EJTAG_INST_IDCODE);
  59
  60         field.num_bits = 32;
  61         field.out_value = NULL;
  62         field.in_value = r;
  63
  64         jtag_add_dr_scan(ejtag_info->tap, 1, &field, TAP_IDLE);
  65
  66         int retval;
  67         retval = jtag_execute_queue();
  68         if (retval != ERROR_OK) {
  69                 LOG_ERROR("register read failed");
  70                 return retval;
  71         }
  72
  73         *idcode = buf_get_u32(field.in_value, 0, 32);
  74
  75         return ERROR_OK;
  76 }
  77
  78 static int mips_ejtag_get_impcode(struct mips_ejtag *ejtag_info, uint32_t *impcode)
  79 {
  80         struct scan_field field;
  81         uint8_t r[4];
  82
  83         mips_ejtag_set_instr(ejtag_info, EJTAG_INST_IMPCODE);
  84
  85         field.num_bits = 32;
  86         field.out_value = NULL;
  87         field.in_value = r;
  88
  89         jtag_add_dr_scan(ejtag_info->tap, 1, &field, TAP_IDLE);
  90
  91         int retval;
  92         retval = jtag_execute_queue();
  93         if (retval != ERROR_OK) {
  94                 LOG_ERROR("register read failed");
  95                 return retval;
  96         }
  97
  98         *impcode = buf_get_u32(field.in_value, 0, 32);
  99
 100         return ERROR_OK;
 101 }
 102
 103 void mips_ejtag_add_scan_96(struct mips_ejtag *ejtag_info, uint32_t ctrl, uint32_t data, uint8_t *in_scan_buf)
 104 {
 105         assert(ejtag_info->tap != NULL);
 106         struct jtag_tap *tap = ejtag_info->tap;
 107
 108         struct scan_field field;
 109         uint8_t out_scan[12];
 110
 111         /* processor access "all" register 96 bit */
 112         field.num_bits = 96;
 113
 114         field.out_value = out_scan;
 115         buf_set_u32(out_scan, 0, 32, ctrl);
 116         buf_set_u32(out_scan + 4, 0, 32, data);
 117         buf_set_u32(out_scan + 8, 0, 32, 0);
 118
 119         field.in_value = in_scan_buf;
 120
 121         jtag_add_dr_scan(tap, 1, &field, TAP_IDLE);
 122
 123         keep_alive();
 124 }
 125
 126 int mips_ejtag_drscan_32(struct mips_ejtag *ejtag_info, uint32_t *data)
 127 {
 128         struct jtag_tap *tap;
 129         tap  = ejtag_info->tap;
 130         assert(tap != NULL);
 131
 132         struct scan_field field;
 133         uint8_t t[4], r[4];
 134         int retval;
 135
 136         field.num_bits = 32;
 137         field.out_value = t;
 138         buf_set_u32(t, 0, field.num_bits, *data);
 139         field.in_value = r;
 140
 141         jtag_add_dr_scan(tap, 1, &field, TAP_IDLE);
 142
 143         retval = jtag_execute_queue();
 144         if (retval != ERROR_OK) {
 145                 LOG_ERROR("register read failed");
 146                 return retval;
 147         }
 148
 149         *data = buf_get_u32(field.in_value, 0, 32);
 150
 151         keep_alive();
 152
 153         return ERROR_OK;
 154 }
 155
 156 void mips_ejtag_drscan_32_out(struct mips_ejtag *ejtag_info, uint32_t data)
 157 {
 158         uint8_t t[4];
 159         struct jtag_tap *tap;
 160         tap  = ejtag_info->tap;
 161         assert(tap != NULL);
 162
 163         struct scan_field field;
 164
 165         field.num_bits = 32;
 166         field.out_value = t;
 167         buf_set_u32(t, 0, field.num_bits, data);
 168
 169         field.in_value = NULL;
 170
 171         jtag_add_dr_scan(tap, 1, &field, TAP_IDLE);
 172 }
 173
 174 int mips_ejtag_drscan_8(struct mips_ejtag *ejtag_info, uint32_t *data)
 175 {
 176         struct jtag_tap *tap;
 177         tap  = ejtag_info->tap;
 178         assert(tap != NULL);
 179
 180         struct scan_field field;
 181         uint8_t t[4] = {0, 0, 0, 0}, r[4];
 182         int retval;
 183
 184         field.num_bits = 8;
 185         field.out_value = t;
 186         buf_set_u32(t, 0, field.num_bits, *data);
 187         field.in_value = r;
 188
 189         jtag_add_dr_scan(tap, 1, &field, TAP_IDLE);
 190
 191         retval = jtag_execute_queue();
 192         if (retval != ERROR_OK) {
 193                 LOG_ERROR("register read failed");
 194                 return retval;
 195         }
 196
 197         *data = buf_get_u32(field.in_value, 0, 32);
 198
 199         return ERROR_OK;
 200 }
 201
 202 void mips_ejtag_drscan_8_out(struct mips_ejtag *ejtag_info, uint8_t data)
 203 {
 204         struct jtag_tap *tap;
 205         tap  = ejtag_info->tap;
 206         assert(tap != NULL);
 207
 208         struct scan_field field;
 209
 210         field.num_bits = 8;
 211         field.out_value = &data;
 212         field.in_value = NULL;
 213
 214         jtag_add_dr_scan(tap, 1, &field, TAP_IDLE);
 215 }
 216
 217 /* Set (to enable) or clear (to disable stepping) the SSt bit (bit 8) in Cp0 Debug reg (reg 23, sel 0) */
 218 int mips_ejtag_config_step(struct mips_ejtag *ejtag_info, int enable_step)
 219 {
 220         struct pracc_queue_info ctx = {.max_code = 7};
 221         pracc_queue_init(&ctx);
 222         if (ctx.retval != ERROR_OK)
 223                 goto exit;
 224
 225         pracc_add(&ctx, 0, MIPS32_MFC0(8, 23, 0));                      /* move COP0 Debug to $8 */
 226         pracc_add(&ctx, 0, MIPS32_ORI(8, 8, 0x0100));                   /* set SSt bit in debug reg */
 227         if (!enable_step)
 228                 pracc_add(&ctx, 0, MIPS32_XORI(8, 8, 0x0100));          /* clear SSt bit in debug reg */
 229
 230         pracc_add(&ctx, 0, MIPS32_MTC0(8, 23, 0));                      /* move $8 to COP0 Debug */
 231         pracc_add(&ctx, 0, MIPS32_LUI(8, UPPER16(ejtag_info->reg8)));           /* restore upper 16 bits  of $8 */
 232         pracc_add(&ctx, 0, MIPS32_B(NEG16((ctx.code_count + 1))));                      /* jump to start */
 233         pracc_add(&ctx, 0, MIPS32_ORI(8, 8, LOWER16(ejtag_info->reg8)));        /* restore lower 16 bits of $8 */
 234
 235         ctx.retval = mips32_pracc_queue_exec(ejtag_info, &ctx, NULL);
 236 exit:
 237         pracc_queue_free(&ctx);
 238         return ctx.retval;
 239 }
 240
 241 /*
 242  * Disable memory protection for 0xFF20.0000–0xFF3F.FFFF
 243  * It is needed by EJTAG 1.5-2.0, especially for BMIPS CPUs
 244  * For example bcm7401 and others. At leas on some
 245  * CPUs, DebugMode wont start if this bit is not removed.
 246  */
 247 static int disable_dcr_mp(struct mips_ejtag *ejtag_info)
 248 {
 249         uint32_t dcr;
 250         int retval;
 251
 252         retval = mips32_dmaacc_read_mem(ejtag_info, EJTAG_DCR, 4, 1, &dcr);
 253         if (retval != ERROR_OK)
 254                 goto error;
 255
 256         dcr &= ~EJTAG_DCR_MP;
 257         retval = mips32_dmaacc_write_mem(ejtag_info, EJTAG_DCR, 4, 1, &dcr);
 258         if (retval != ERROR_OK)
 259                 goto error;
 260         return ERROR_OK;
 261 error:
 262         LOG_ERROR("Failed to remove DCR MPbit!");
 263         return retval;
 264 }
 265
 266 int mips_ejtag_enter_debug(struct mips_ejtag *ejtag_info)
 267 {
 268         uint32_t ejtag_ctrl;
 269         mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL);
 270
 271         if (ejtag_info->ejtag_version == EJTAG_VERSION_20) {
 272                 if (disable_dcr_mp(ejtag_info) != ERROR_OK)
 273                         goto error;
 274         }
 275
 276         /* set debug break bit */
 277         ejtag_ctrl = ejtag_info->ejtag_ctrl | EJTAG_CTRL_JTAGBRK;
 278         mips_ejtag_drscan_32(ejtag_info, &ejtag_ctrl);
 279
 280         /* break bit will be cleared by hardware */
 281         ejtag_ctrl = ejtag_info->ejtag_ctrl;
 282         mips_ejtag_drscan_32(ejtag_info, &ejtag_ctrl);
 283         LOG_DEBUG("ejtag_ctrl: 0x%8.8" PRIx32 "", ejtag_ctrl);
 284         if ((ejtag_ctrl & EJTAG_CTRL_BRKST) == 0)
 285                 goto error;
 286
 287         return ERROR_OK;
 288 error:
 289         LOG_ERROR("Failed to enter Debug Mode!");
 290         return ERROR_FAIL;
 291 }
 292
 293 int mips_ejtag_exit_debug(struct mips_ejtag *ejtag_info)
 294 {
 295         uint32_t pracc_list[] = {MIPS32_DRET, 0};
 296         struct pracc_queue_info ctx = {.max_code = 1, .pracc_list = pracc_list, .code_count = 1, .store_count = 0};
 297
 298         /* execute our dret instruction */
 299         ctx.retval = mips32_pracc_queue_exec(ejtag_info, &ctx, NULL);
 300
 301         /* pic32mx workaround, false pending at low core clock */
 302         jtag_add_sleep(1000);
 303         return ctx.retval;
 304 }
 305
 306 /* mips_ejtag_init_mmr - asign Memory-Mapped Registers depending
 307  *                      on EJTAG version.
 308  */
 309 static void mips_ejtag_init_mmr(struct mips_ejtag *ejtag_info)
 310 {
 311         if (ejtag_info->ejtag_version == EJTAG_VERSION_20) {
 312                 ejtag_info->ejtag_ibs_addr      = EJTAG_V20_IBS;
 313                 ejtag_info->ejtag_iba0_addr     = EJTAG_V20_IBA0;
 314                 ejtag_info->ejtag_ibc_offs      = EJTAG_V20_IBC_OFFS;
 315                 ejtag_info->ejtag_ibm_offs      = EJTAG_V20_IBM_OFFS;
 316
 317                 ejtag_info->ejtag_dbs_addr      = EJTAG_V20_DBS;
 318                 ejtag_info->ejtag_dba0_addr     = EJTAG_V20_DBA0;
 319                 ejtag_info->ejtag_dbc_offs      = EJTAG_V20_DBC_OFFS;
 320                 ejtag_info->ejtag_dbm_offs      = EJTAG_V20_DBM_OFFS;
 321                 ejtag_info->ejtag_dbv_offs      = EJTAG_V20_DBV_OFFS;
 322
 323                 ejtag_info->ejtag_iba_step_size = EJTAG_V20_IBAn_STEP;
 324                 ejtag_info->ejtag_dba_step_size = EJTAG_V20_DBAn_STEP;
 325         } else {
 326                 ejtag_info->ejtag_ibs_addr      = EJTAG_V25_IBS;
 327                 ejtag_info->ejtag_iba0_addr     = EJTAG_V25_IBA0;
 328                 ejtag_info->ejtag_ibm_offs      = EJTAG_V25_IBM_OFFS;
 329                 ejtag_info->ejtag_ibasid_offs   = EJTAG_V25_IBASID_OFFS;
 330                 ejtag_info->ejtag_ibc_offs      = EJTAG_V25_IBC_OFFS;
 331
 332                 ejtag_info->ejtag_dbs_addr      = EJTAG_V25_DBS;
 333                 ejtag_info->ejtag_dba0_addr     = EJTAG_V25_DBA0;
 334                 ejtag_info->ejtag_dbm_offs      = EJTAG_V25_DBM_OFFS;
 335                 ejtag_info->ejtag_dbasid_offs   = EJTAG_V25_DBASID_OFFS;
 336                 ejtag_info->ejtag_dbc_offs      = EJTAG_V25_DBC_OFFS;
 337                 ejtag_info->ejtag_dbv_offs      = EJTAG_V25_DBV_OFFS;
 338
 339                 ejtag_info->ejtag_iba_step_size = EJTAG_V25_IBAn_STEP;
 340                 ejtag_info->ejtag_dba_step_size = EJTAG_V25_DBAn_STEP;
 341         }
 342 }
 343
 344 int mips_ejtag_init(struct mips_ejtag *ejtag_info)
 345 {
 346         int retval;
 347
 348         retval = mips_ejtag_get_impcode(ejtag_info, &ejtag_info->impcode);
 349         if (retval != ERROR_OK)
 350                 return retval;
 351         LOG_DEBUG("impcode: 0x%8.8" PRIx32 "", ejtag_info->impcode);
 352
 353         /* get ejtag version */
 354         ejtag_info->ejtag_version = ((ejtag_info->impcode >> 29) & 0x07);
 355
 356         switch (ejtag_info->ejtag_version) {
 357                 case EJTAG_VERSION_20:
 358                         LOG_DEBUG("EJTAG: Version 1 or 2.0 Detected");
 359                         break;
 360                 case EJTAG_VERSION_25:
 361                         LOG_DEBUG("EJTAG: Version 2.5 Detected");
 362                         break;
 363                 case EJTAG_VERSION_26:
 364                         LOG_DEBUG("EJTAG: Version 2.6 Detected");
 365                         break;
 366                 case EJTAG_VERSION_31:
 367                         LOG_DEBUG("EJTAG: Version 3.1 Detected");
 368                         break;
 369                 case EJTAG_VERSION_41:
 370                         LOG_DEBUG("EJTAG: Version 4.1 Detected");
 371                         break;
 372                 case EJTAG_VERSION_51:
 373                         LOG_DEBUG("EJTAG: Version 5.1 Detected");
 374                         break;
 375                 default:
 376                         LOG_DEBUG("EJTAG: Unknown Version Detected");
 377                         break;
 378         }
 379         LOG_DEBUG("EJTAG: features:%s%s%s%s%s%s%s",
 380                 ejtag_info->impcode & EJTAG_IMP_R3K ? " R3k" : " R4k",
 381                 ejtag_info->impcode & EJTAG_IMP_DINT ? " DINT" : "",
 382                 ejtag_info->impcode & (1 << 22) ? " ASID_8" : "",
 383                 ejtag_info->impcode & (1 << 21) ? " ASID_6" : "",
 384                 ejtag_info->impcode & EJTAG_IMP_MIPS16 ? " MIPS16" : "",
 385                 ejtag_info->impcode & EJTAG_IMP_NODMA ? " noDMA" : " DMA",
 386                 ejtag_info->impcode & EJTAG_DCR_MIPS64  ? " MIPS64" : " MIPS32");
 387
 388         if ((ejtag_info->impcode & EJTAG_IMP_NODMA) == 0) {
 389                 LOG_DEBUG("EJTAG: DMA Access Mode detected. Disabling to "
 390                           "workaround current broken code.");
 391                 ejtag_info->impcode |= EJTAG_IMP_NODMA;
 392         }
 393
 394         /* set initial state for ejtag control reg */
 395         ejtag_info->ejtag_ctrl = EJTAG_CTRL_ROCC | EJTAG_CTRL_PRACC | EJTAG_CTRL_PROBEN | EJTAG_CTRL_SETDEV;
 396         ejtag_info->fast_access_save = -1;
 397
 398         mips_ejtag_init_mmr(ejtag_info);
 399
 400         return ERROR_OK;
 401 }
 402
 403 int mips_ejtag_fastdata_scan(struct mips_ejtag *ejtag_info, int write_t, uint32_t *data)
 404 {
 405         struct jtag_tap *tap;
 406
 407         tap = ejtag_info->tap;
 408         assert(tap != NULL);
 409
 410         struct scan_field fields[2];
 411         uint8_t spracc = 0;
 412         uint8_t t[4] = {0, 0, 0, 0};
 413
 414         /* fastdata 1-bit register */
 415         fields[0].num_bits = 1;
 416         fields[0].out_value = &spracc;
 417         fields[0].in_value = NULL;
 418
 419         /* processor access data register 32 bit */
 420         fields[1].num_bits = 32;
 421         fields[1].out_value = t;
 422
 423         if (write_t) {
 424                 fields[1].in_value = NULL;
 425                 buf_set_u32(t, 0, 32, *data);
 426         } else
 427                 fields[1].in_value = (uint8_t *) data;
 428
 429         jtag_add_dr_scan(tap, 2, fields, TAP_IDLE);
 430
 431         if (!write_t && data)
 432                 jtag_add_callback(mips_le_to_h_u32,
 433                         (jtag_callback_data_t) data);
 434
 435         keep_alive();
 436
 437         return ERROR_OK;
 438 }