1 /* Remote debugging interface for Motorola's MVME187BUG monitor, an embedded
4 Copyright 1992, 1993 Free Software Foundation, Inc.
5 Contributed by Cygnus Support. Written by K. Richard Pixley.
7 This file is part of GDB.
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program; if not, write to the Free Software
21 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
41 #include "remote-utils.h"
45 /* External data declarations */
46 extern int stop_soon_quietly
; /* for wait_for_inferior */
48 /* Forward data declarations */
49 extern struct target_ops bug_ops
; /* Forward declaration */
51 /* Forward function declarations */
52 static int bug_clear_breakpoints
PARAMS((void));
54 static int bug_read_memory
PARAMS((CORE_ADDR memaddr
,
55 unsigned char *myaddr
,
58 static int bug_write_memory
PARAMS((CORE_ADDR memaddr
,
59 unsigned char *myaddr
,
62 /* This variable is somewhat arbitrary. It's here so that it can be
63 set from within a running gdb. */
65 static int srec_max_retries
= 3;
67 /* Each S-record download to the target consists of an S0 header
68 record, some number of S3 data records, and one S7 termination
69 record. I call this download a "frame". Srec_frame says how many
70 bytes will be represented in each frame. */
72 static int srec_frame
= 160;
74 /* This variable determines how many bytes will be represented in each
77 static int srec_bytes
= 40;
79 /* At one point it appeared to me as though the bug monitor could not
80 really be expected to receive two sequential characters at 9600
81 baud reliably. Echo-pacing is an attempt to force data across the
82 line even in this condition. Specifically, in echo-pace mode, each
83 character is sent one at a time and we look for the echo before
84 sending the next. This is excruciatingly slow. */
86 static int srec_echo_pace
= 0;
88 /* How long to wait after an srec for a possible error message.
89 Similar to the above, I tried sleeping after sending each S3 record
90 in hopes that I might actually see error messages from the bug
91 monitor. This might actually work if we were to use sleep
92 intervals smaller than 1 second. */
94 static int srec_sleep
= 0;
96 /* Every srec_noise records, flub the checksum. This is a debugging
97 feature. Set the variable to something other than 1 in order to
98 inject *deliberate* checksum errors. One might do this if one
99 wanted to test error handling and recovery. */
101 static int srec_noise
= 0;
103 /* Called when SIGALRM signal sent due to alarm() timeout. */
105 /* Number of SIGTRAPs we need to simulate. That is, the next
106 NEED_ARTIFICIAL_TRAP calls to bug_wait should just return
107 SIGTRAP without actually waiting for anything. */
109 static int need_artificial_trap
= 0;
112 * Download a file specified in 'args', to the bug.
116 bug_load (args
, fromtty
)
126 dcache_flush (gr_get_dcache());
128 abfd
= bfd_openr (args
, 0);
131 printf_filtered ("Unable to open file %s\n", args
);
135 if (bfd_check_format (abfd
, bfd_object
) == 0)
137 printf_filtered ("File is not an object file\n");
142 while (s
!= (asection
*) NULL
)
144 if (s
->flags
& SEC_LOAD
)
148 char *buffer
= xmalloc (srec_frame
);
150 printf_filtered ("%s\t: 0x%4x .. 0x%4x ", s
->name
, s
->vma
, s
->vma
+ s
->_raw_size
);
152 for (i
= 0; i
< s
->_raw_size
; i
+= srec_frame
)
154 if (srec_frame
> s
->_raw_size
- i
)
155 srec_frame
= s
->_raw_size
- i
;
157 bfd_get_section_contents (abfd
, s
, buffer
, i
, srec_frame
);
158 bug_write_memory (s
->vma
+ i
, buffer
, srec_frame
);
159 printf_filtered ("*");
162 printf_filtered ("\n");
167 sprintf (buffer
, "rs ip %lx", (unsigned long) abfd
->start_address
);
168 sr_write_cr (buffer
);
189 while (*s
&& !isspace (*s
))
195 copy
= xmalloc (len
+ 1);
196 memcpy (copy
, word
, len
);
203 static struct gr_settings bug_settings
= {
207 bug_clear_breakpoints
, /* clear_all_breakpoints */
208 bug_read_memory
, /* readfunc */
209 bug_write_memory
, /* writefunc */
210 gr_generic_checkin
, /* checkin */
213 static char *cpu_check_strings
[] = {
219 bug_open (args
, from_tty
)
226 gr_open(args
, from_tty
, &bug_settings
);
227 /* decide *now* whether we are on an 88100 or an 88110 */
228 sr_write_cr("rs cr06");
229 sr_expect("rs cr06");
231 switch (sr_multi_scan(cpu_check_strings
, 0))
233 case 0: /* this is an m88100 */
234 target_is_m88110
= 0;
236 case 1: /* this is an m88110 */
237 target_is_m88110
= 1;
244 /* Tell the remote machine to resume. */
247 bug_resume (pid
, step
, sig
)
250 dcache_flush (gr_get_dcache());
256 /* Force the next bug_wait to return a trap. Not doing anything
257 about I/O from the target means that the user has to type
258 "continue" to see any. FIXME, this should be fixed. */
259 need_artificial_trap
= 1;
267 /* Wait until the remote machine stops, then return,
268 storing status in STATUS just as `wait' would. */
270 static char *wait_strings
[] = {
272 "Exception: Data Access Fault (Local Bus Timeout)",
282 int old_timeout
= sr_get_timeout();
283 int old_immediate_quit
= immediate_quit
;
285 WSETEXIT ((*status
), 0);
287 /* read off leftovers from resume so that the rest can be passed
288 back out as stdout. */
289 if (need_artificial_trap
== 0)
291 sr_expect("Effective address: ");
292 (void) sr_get_hex_word();
296 sr_set_timeout(-1); /* Don't time out -- user program is running. */
297 immediate_quit
= 1; /* Helps ability to QUIT */
299 switch (gr_multi_scan(wait_strings
, need_artificial_trap
== 0))
301 case 0: /* breakpoint case */
302 WSETSTOP ((*status
), SIGTRAP
);
303 /* user output from the target can be discarded here. (?) */
307 case 1: /* bus error */
308 WSETSTOP ((*status
), SIGBUS
);
309 /* user output from the target can be discarded here. (?) */
313 case 2: /* normal case */
315 if (need_artificial_trap
!= 0)
318 WSETSTOP ((*status
), SIGTRAP
);
319 need_artificial_trap
--;
325 WSETEXIT ((*status
), 0);
329 case -1: /* trouble */
331 fprintf_filtered (stderr
,
332 "Trouble reading target during wait\n");
336 sr_set_timeout(old_timeout
);
337 immediate_quit
= old_immediate_quit
;
341 /* Return the name of register number REGNO
342 in the form input and output by bug.
344 Returns a pointer to a static buffer containing the answer. */
349 static char *rn
[] = {
350 "r00", "r01", "r02", "r03", "r04", "r05", "r06", "r07",
351 "r08", "r09", "r10", "r11", "r12", "r13", "r14", "r15",
352 "r16", "r17", "r18", "r19", "r20", "r21", "r22", "r23",
353 "r24", "r25", "r26", "r27", "r28", "r29", "r30", "r31",
355 /* these get confusing because we omit a few and switch some ordering around. */
357 "cr01", /* 32 = psr */
358 "fcr62", /* 33 = fpsr*/
359 "fcr63", /* 34 = fpcr */
360 "ip", /* this is something of a cheat. */
362 "cr05", /* 36 = snip */
363 "cr06", /* 37 = sfip */
365 "x00", "x01", "x02", "x03", "x04", "x05", "x06", "x07",
366 "x08", "x09", "x10", "x11", "x12", "x13", "x14", "x15",
367 "x16", "x17", "x18", "x19", "x20", "x21", "x22", "x23",
368 "x24", "x25", "x26", "x27", "x28", "x29", "x30", "x31",
374 #if 0 /* not currently used */
375 /* Read from remote while the input matches STRING. Return zero on
376 success, -1 on failure. */
390 printf("\nNext character is '%c' - %d and s is \"%s\".\n", c
, c
, --s
);
400 bug_srec_write_cr (s
)
408 if (sr_get_debug() > 0)
412 SERIAL_WRITE(sr_get_desc(), p
, 1);
413 while (sr_pollchar() != *p
);
418 /* return(bug_scan (s) || bug_scan ("\n")); */
424 /* Store register REGNO, or all if REGNO == -1. */
427 bug_fetch_register(regno
)
430 REGISTER_TYPE regval
;
438 for (i
= 0; i
< NUM_REGS
; ++i
)
439 bug_fetch_register(i
);
441 else if (regno
< XFP_REGNUM
)
444 sr_write_cr(get_reg_name(regno
));
446 regval
= sr_get_hex_word();
449 /* the following registers contain flag bits in the lower to bit slots.
451 if (regno
== PC_REGNUM
/* aka sxip */
452 || regno
== NPC_REGNUM
/* aka snip */
453 || regno
== SFIP_REGNUM
) /* aka sfip */
456 supply_register(regno
, (char *) ®val
);
460 /* Float register so we need to parse a strange data format. */
462 unsigned char value
[10];
465 sr_write(get_reg_name(regno
), strlen(get_reg_name(regno
)));
468 sr_expect(get_reg_name(regno
));
473 p
= sr_get_hex_digit(1);
478 p
= sr_get_hex_digit(1);
479 value
[0] += (p
<< 4);
480 value
[0] += sr_get_hex_digit(1);
482 value
[1] = sr_get_hex_digit(1) << 4;
486 value
[1] += sr_get_hex_digit(1);
488 value
[2] = (sr_get_hex_digit(1) << 4) + sr_get_hex_digit(1);
489 value
[3] = (sr_get_hex_digit(1) << 4) + sr_get_hex_digit(1);
490 value
[4] = (sr_get_hex_digit(1) << 4) + sr_get_hex_digit(1);
491 value
[5] = (sr_get_hex_digit(1) << 4) + sr_get_hex_digit(1);
492 value
[6] = (sr_get_hex_digit(1) << 4) + sr_get_hex_digit(1);
493 value
[7] = (sr_get_hex_digit(1) << 4) + sr_get_hex_digit(1);
498 supply_register(regno
, value
);
504 /* Store register REGNO, or all if REGNO == -1. */
507 bug_store_register (regno
)
517 for (i
= 0; i
< NUM_REGS
; ++i
)
518 bug_store_register(i
);
524 regname
= get_reg_name(regno
);
526 if (regno
< XFP_REGNUM
)
527 sprintf(buffer
, "rs %s %08x",
529 read_register(regno
));
532 unsigned char *value
= ®isters
[REGISTER_BYTE(regno
)];
534 sprintf(buffer
, "rs %s %1x_%2x%1x_%1x%2x%2x%2x%2x%2x%2x",
537 (value
[0] >> 7) & 0xf,
540 (value
[1] >> 8) & 0xf,
559 bug_xfer_memory (memaddr
, myaddr
, len
, write
, target
)
564 struct target_ops
*target
; /* ignored */
568 /* Round starting address down to longword boundary. */
569 register CORE_ADDR addr
;
571 /* Round ending address up; get number of longwords that makes. */
574 /* Allocate buffer of that many longwords. */
575 register int *buffer
;
577 addr
= memaddr
& -sizeof (int);
578 count
= (((memaddr
+ len
) - addr
) + sizeof (int) - 1) / sizeof (int);
580 buffer
= (int *) alloca (count
* sizeof (int));
584 /* Fill start and end extra bytes of buffer with existing memory data. */
586 if (addr
!= memaddr
|| len
< (int) sizeof (int))
588 /* Need part of initial word -- fetch it. */
589 buffer
[0] = gr_fetch_word (addr
);
592 if (count
> 1) /* FIXME, avoid if even boundary */
595 = gr_fetch_word (addr
+ (count
- 1) * sizeof (int));
598 /* Copy data to be written over corresponding part of buffer */
600 memcpy ((char *) buffer
+ (memaddr
& (sizeof (int) - 1)), myaddr
, len
);
602 /* Write the entire buffer. */
604 for (i
= 0; i
< count
; i
++, addr
+= sizeof (int))
607 gr_store_word (addr
, buffer
[i
]);
618 /* Read all the longwords */
619 for (i
= 0; i
< count
; i
++, addr
+= sizeof (int))
622 buffer
[i
] = gr_fetch_word (addr
);
630 /* Copy appropriate bytes out of the buffer. */
631 memcpy (myaddr
, (char *) buffer
+ (memaddr
& (sizeof (int) - 1)), len
);
642 command
= (srec_echo_pace
? "lo 0 ;x" : "lo 0");
644 sr_write_cr (command
);
647 bug_srec_write_cr ("S0030000FC");
651 /* This is an extremely vulnerable and fragile function. I've made
652 considerable attempts to make this deterministic, but I've
653 certainly forgotten something. The trouble is that S-records are
654 only a partial file format, not a protocol. Worse, apparently the
655 m88k bug monitor does not run in real time while receiving
656 S-records. Hence, we must pay excruciating attention to when and
657 where error messages are returned, and what has actually been sent.
659 Each call represents a chunk of memory to be sent to the target.
660 We break that chunk into an S0 header record, some number of S3
661 data records each containing srec_bytes, and an S7 termination
664 static char *srecord_strings
[] = {
671 bug_write_memory (memaddr
, myaddr
, len
)
673 unsigned char *myaddr
;
680 char buffer
[(srec_bytes
+ 8) << 1];
688 if (retries
> srec_max_retries
)
693 if (sr_get_debug() > 0)
694 printf("\n<retrying...>\n");
696 /* This gr_expect_prompt call is extremely important. Without
697 it, we will tend to resend our packet so fast that it
698 will arrive before the bug monitor is ready to receive
699 it. This would lead to a very ugly resend loop. */
715 if (thisgo
> srec_bytes
)
718 address
= memaddr
+ done
;
719 sprintf (buf
, "S3%02X%08X", thisgo
+ 4 + 1, address
);
722 checksum
+= (thisgo
+ 4 + 1
724 + ((address
>> 8) & 0xff)
725 + ((address
>> 16) & 0xff)
726 + ((address
>> 24) & 0xff));
728 for (idx
= 0; idx
< thisgo
; idx
++)
730 sprintf (buf
, "%02X", myaddr
[idx
+ done
]);
731 checksum
+= myaddr
[idx
+ done
];
737 /* FIXME-NOW: insert a deliberate error every now and then.
738 This is intended for testing/debugging the error handling
740 static int counter
= 0;
741 if (++counter
> srec_noise
)
748 sprintf(buf
, "%02X", ~checksum
& 0xff);
749 bug_srec_write_cr (buffer
);
754 /* This pollchar is probably redundant to the gr_multi_scan
755 below. Trouble is, we can't be sure when or where an
756 error message will appear. Apparently, when running at
757 full speed from a typical sun4, error messages tend to
758 appear to arrive only *after* the s7 record. */
760 if ((x
= sr_pollchar()) != 0)
762 if (sr_get_debug() > 0)
763 printf("\n<retrying...>\n");
767 /* flush any remaining input and verify that we are back
768 at the prompt level. */
770 /* start all over again. */
779 bug_srec_write_cr("S7060000000000F9");
782 /* Having finished the load, we need to figure out whether we
784 } while (gr_multi_scan(srecord_strings
, 0) == 0);;
789 /* Copy LEN bytes of data from debugger memory at MYADDR
790 to inferior's memory at MEMADDR. Returns errno value.
791 * sb/sh instructions don't work on unaligned addresses, when TU=1.
794 /* Read LEN bytes from inferior memory at MEMADDR. Put the result
795 at debugger address MYADDR. Returns errno value. */
797 bug_read_memory (memaddr
, myaddr
, len
)
799 unsigned char *myaddr
;
809 unsigned int checksum
;
811 sprintf(request
, "du 0 %x:&%d", memaddr
, len
);
812 sr_write_cr(request
);
814 p
= buffer
= alloca(len
);
816 /* scan up through the header */
817 sr_expect("S0030000FC");
819 while (p
< buffer
+ len
)
821 /* scan off any white space. */
822 while (sr_readchar() != 'S') ;;
824 /* what kind of s-rec? */
825 type
= sr_readchar();
827 /* scan record size */
828 sr_get_hex_byte(&size
);
842 inaddr
= (inaddr
<< 8) + c
;
845 /* intentional fall through */
848 inaddr
= (inaddr
<< 8) + c
;
851 /* intentional fall through */
854 inaddr
= (inaddr
<< 8) + c
;
858 inaddr
= (inaddr
<< 8) + c
;
865 error("reading s-records.");
869 || (memaddr
+ len
) < (inaddr
+ size
))
870 error("srec out of memory range.");
872 if (p
!= buffer
+ inaddr
- memaddr
)
873 error("srec out of sequence.");
875 for (; size
; --size
, ++p
)
882 if (c
!= (~checksum
& 0xff))
883 error("bad s-rec checksum");
888 if (p
!= buffer
+ len
)
891 memcpy(myaddr
, buffer
, len
);
895 #define MAX_BREAKS 16
896 static int num_brkpts
= 0;
898 bug_insert_breakpoint (addr
, save
)
900 char *save
; /* Throw away, let bug save instructions */
904 if (num_brkpts
< MAX_BREAKS
)
909 sprintf (buffer
, "br %x", addr
);
910 sr_write_cr (buffer
);
916 fprintf_filtered (stderr
,
917 "Too many break points, break point not installed\n");
923 bug_remove_breakpoint (addr
, save
)
925 char *save
; /* Throw away, let bug save instructions */
932 sprintf (buffer
, "nobr %x", addr
);
933 sr_write_cr (buffer
);
940 /* Clear the bugs notion of what the break points are */
942 bug_clear_breakpoints ()
947 sr_write_cr ("nobr");
955 struct target_ops bug_ops
=
957 "bug", "Remote BUG monitor",
958 "Use the mvme187 board running the BUG monitor connected\n\
962 0, gr_detach
, bug_resume
, bug_wait
, /* attach */
963 bug_fetch_register
, bug_store_register
,
967 bug_insert_breakpoint
, bug_remove_breakpoint
, /* Breakpoints */
968 0, 0, 0, 0, 0, /* Terminal handling */
969 gr_kill
, /* FIXME, kill */
971 0, /* lookup_symbol */
972 gr_create_inferior
, /* create_inferior */
973 gr_mourn
, /* mourn_inferior FIXME */
975 0, /* notice_signals */
976 process_stratum
, 0, /* next */
977 1, 1, 1, 1, 1, /* all mem, mem, stack, regs, exec */
978 0, 0, /* Section pointers */
979 OPS_MAGIC
, /* Always the last thing */
983 _initialize_remote_bug ()
985 add_target (&bug_ops
);
988 (add_set_cmd ("srec-bytes", class_support
, var_uinteger
,
989 (char *) &srec_bytes
,
991 Set the number of bytes represented in each S-record.\n\
992 This affects the communication protocol with the remote target.",
997 (add_set_cmd ("srec-max-retries", class_support
, var_uinteger
,
998 (char *) &srec_max_retries
,
1000 Set the number of retries for shipping S-records.\n\
1001 This affects the communication protocol with the remote target.",
1006 (add_set_cmd ("srec-frame", class_support
, var_uinteger
,
1007 (char *) &srec_frame
,
1009 Set the number of bytes in an S-record frame.\n\
1010 This affects the communication protocol with the remote target.",
1015 (add_set_cmd ("srec-noise", class_support
, var_zinteger
,
1016 (char *) &srec_noise
,
1018 Set number of S-record to send before deliberately flubbing a checksum.\n\
1019 Zero means flub none at all. This affects the communication protocol\n\
1020 with the remote target.",
1025 (add_set_cmd ("srec-sleep", class_support
, var_zinteger
,
1026 (char *) &srec_sleep
,
1028 Set number of seconds to sleep after an S-record for a possible error message to arrive.\n\
1029 This affects the communication protocol with the remote target.",
1034 (add_set_cmd ("srec-echo-pace", class_support
, var_boolean
,
1035 (char *) &srec_echo_pace
,
1037 Set echo-verification.\n\
1038 When on, use verification by echo when downloading S-records. This is\n\
1039 much slower, but generally more reliable.",
This page took 0.050181 seconds and 4 git commands to generate.