1 /***************************************************************************
2 * Copyright (C) 2008-2009 by Marvell Semiconductors, Inc. *
3 * Written by Nicolas Pitre <nico@marvell.com> *
5 * Copyright (C) 2008 by Hongtao Zheng *
8 * This program is free software; you can redistribute it and/or modify *
9 * it under the terms of the GNU General Public License as published by *
10 * the Free Software Foundation; either version 2 of the License, or *
11 * (at your option) any later version. *
13 * This program is distributed in the hope that it will be useful, *
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
16 * GNU General Public License for more details. *
18 * You should have received a copy of the GNU General Public License *
19 * along with this program; if not, write to the *
20 * Free Software Foundation, Inc., *
21 * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
22 ***************************************************************************/
25 * Marvell Feroceon/Dragonite support.
27 * The Feroceon core, as found in the Orion and Kirkwood SoCs amongst others,
28 * mimics the ARM926 ICE interface with the following differences:
30 * - the MOE (method of entry) reporting is not implemented
32 * - breakpoint/watchpoint comparator #1 is seemingly not implemented
34 * - due to a different pipeline implementation, some injected debug
35 * instruction sequences have to be somewhat different
39 * - asserting DBGRQ doesn't work if target is looping on the undef vector
41 * - the EICE version signature in the COMMS_CTL reg is next to the flow bits
42 * not at the top, and rather meaningless due to existing discrepencies
44 * - the DCC channel is half duplex (only one FIFO for both directions) with
45 * seemingly no proper flow control.
47 * The Dragonite core is the non-mmu version based on the ARM966 model, and
48 * it shares the above issues as well.
55 #include "arm926ejs.h"
57 #include "target_type.h"
59 #include "arm_opcodes.h"
62 int feroceon_assert_reset(struct target
*target
)
64 struct arm
*armv4_5
= target
->arch_info
;
65 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
66 int ud
= arm7_9
->use_dbgrq
;
68 arm7_9
->use_dbgrq
= 0;
69 if (target
->reset_halt
)
71 arm7_9
->use_dbgrq
= ud
;
72 return arm7_9_assert_reset(target
);
75 int feroceon_dummy_clock_out(struct arm_jtag
*jtag_info
, uint32_t instr
)
77 struct scan_field fields
[3];
80 uint8_t sysspeed_buf
= 0x0;
83 buf_set_u32(out_buf
, 0, 32, 0);
85 buf_set_u32(instr_buf
, 0, 32, flip_u32(instr
, 32));
87 arm_jtag_scann(jtag_info
, 0x1, TAP_DRPAUSE
);
89 arm_jtag_set_instr(jtag_info
, jtag_info
->intest_instr
, NULL
, TAP_DRPAUSE
);
91 fields
[0].num_bits
= 32;
92 fields
[0].out_value
= out_buf
;
93 fields
[0].in_value
= NULL
;
95 fields
[1].num_bits
= 3;
96 fields
[1].out_value
= &sysspeed_buf
;
97 fields
[1].in_value
= NULL
;
99 fields
[2].num_bits
= 32;
100 fields
[2].out_value
= instr_buf
;
101 fields
[2].in_value
= NULL
;
103 jtag_add_dr_scan(jtag_info
->tap
, 3, fields
, TAP_DRPAUSE
);
105 /* no jtag_add_runtest(0, TAP_DRPAUSE) here */
110 void feroceon_change_to_arm(struct target
*target
, uint32_t *r0
, uint32_t *pc
)
112 struct arm
*armv4_5
= target
->arch_info
;
113 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
114 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
117 * save r0 before using it and put system in ARM state
118 * to allow common handling of ARM and THUMB debugging
121 feroceon_dummy_clock_out(jtag_info
, ARMV4_5_T_NOP
);
122 feroceon_dummy_clock_out(jtag_info
, ARMV4_5_T_NOP
);
123 feroceon_dummy_clock_out(jtag_info
, ARMV4_5_T_NOP
);
125 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_STR(0, 0), 0, NULL
, 0);
126 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
127 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
128 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, r0
, 0);
129 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
130 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
132 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_MOV(0, 15), 0, NULL
, 0);
133 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_STR(0, 0), 0, NULL
, 0);
134 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
135 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
136 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, pc
, 0);
137 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
138 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
140 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_BX(15), 0, NULL
, 0);
141 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
142 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
143 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
144 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
146 jtag_execute_queue();
149 * fix program counter:
150 * MOV R0, PC was the 7th instruction (+12)
151 * reading PC in Thumb state gives address of instruction + 4
156 void feroceon_read_core_regs(struct target
*target
, uint32_t mask
, uint32_t* core_regs
[16])
159 struct arm
*armv4_5
= target
->arch_info
;
160 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
161 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
163 arm9tdmi_clock_out(jtag_info
, ARMV4_5_STMIA(0, mask
& 0xffff, 0, 0), 0, NULL
, 0);
164 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
165 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
167 for (i
= 0; i
<= 15; i
++)
169 arm9tdmi_clock_data_in(jtag_info
, core_regs
[i
]);
171 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
172 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
175 void feroceon_read_core_regs_target_buffer(struct target
*target
, uint32_t mask
, void* buffer
, int size
)
178 struct arm
*armv4_5
= target
->arch_info
;
179 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
180 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
181 int be
= (target
->endianness
== TARGET_BIG_ENDIAN
) ? 1 : 0;
182 uint32_t *buf_u32
= buffer
;
183 uint16_t *buf_u16
= buffer
;
184 uint8_t *buf_u8
= buffer
;
186 arm9tdmi_clock_out(jtag_info
, ARMV4_5_STMIA(0, mask
& 0xffff, 0, 0), 0, NULL
, 0);
187 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
188 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
190 for (i
= 0; i
<= 15; i
++)
192 if (mask
& (1 << i
)) {
196 arm9tdmi_clock_data_in_endianness(jtag_info
, buf_u32
++, 4, be
);
199 arm9tdmi_clock_data_in_endianness(jtag_info
, buf_u16
++, 2, be
);
202 arm9tdmi_clock_data_in_endianness(jtag_info
, buf_u8
++, 1, be
);
208 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
209 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
212 void feroceon_read_xpsr(struct target
*target
, uint32_t *xpsr
, int spsr
)
214 struct arm
*armv4_5
= target
->arch_info
;
215 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
216 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
218 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MRS(0, spsr
& 1), 0, NULL
, 0);
219 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
220 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
221 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
222 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
223 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
224 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
226 arm9tdmi_clock_out(jtag_info
, ARMV4_5_STMIA(0, 1, 0, 0), 0, NULL
, 0);
227 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
228 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
229 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, xpsr
, 0);
231 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
232 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
235 void feroceon_write_xpsr(struct target
*target
, uint32_t xpsr
, int spsr
)
237 struct arm
*armv4_5
= target
->arch_info
;
238 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
239 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
241 LOG_DEBUG("xpsr: %8.8" PRIx32
", spsr: %i", xpsr
, spsr
);
243 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MSR_IM(xpsr
& 0xff, 0, 1, spsr
), 0, NULL
, 0);
244 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
245 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
246 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
247 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
248 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
249 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
251 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MSR_IM((xpsr
& 0xff00) >> 8, 0xc, 2, spsr
), 0, NULL
, 0);
252 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
253 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
254 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
255 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
256 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
257 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
259 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MSR_IM((xpsr
& 0xff0000) >> 16, 0x8, 4, spsr
), 0, NULL
, 0);
260 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
261 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
262 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
263 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
264 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
265 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
267 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MSR_IM((xpsr
& 0xff000000) >> 24, 0x4, 8, spsr
), 0, NULL
, 0);
268 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
269 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
270 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
271 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
272 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
273 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
276 void feroceon_write_xpsr_im8(struct target
*target
, uint8_t xpsr_im
, int rot
, int spsr
)
278 struct arm
*armv4_5
= target
->arch_info
;
279 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
280 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
282 LOG_DEBUG("xpsr_im: %2.2x, rot: %i, spsr: %i", xpsr_im
, rot
, spsr
);
284 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MSR_IM(xpsr_im
, rot
, 1, spsr
), 0, NULL
, 0);
285 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
286 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
287 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
288 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
289 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
290 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
293 void feroceon_write_core_regs(struct target
*target
, uint32_t mask
, uint32_t core_regs
[16])
296 struct arm
*armv4_5
= target
->arch_info
;
297 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
298 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
300 arm9tdmi_clock_out(jtag_info
, ARMV4_5_LDMIA(0, mask
& 0xffff, 0, 0), 0, NULL
, 0);
301 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
302 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
304 for (i
= 0; i
<= 15; i
++)
306 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, core_regs
[i
], NULL
, 0);
308 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
309 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
310 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
313 void feroceon_branch_resume(struct target
*target
)
315 struct arm
*armv4_5
= target
->arch_info
;
316 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
317 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
319 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
320 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
321 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
322 arm9tdmi_clock_out(jtag_info
, ARMV4_5_B(0xfffff9, 0), 0, NULL
, 0);
323 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 1);
325 arm7_9
->need_bypass_before_restart
= 1;
328 void feroceon_branch_resume_thumb(struct target
*target
)
332 struct arm
*armv4_5
= target
->arch_info
;
333 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
334 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
335 uint32_t r0
= buf_get_u32(armv4_5
->core_cache
->reg_list
[0].value
, 0, 32);
336 uint32_t pc
= buf_get_u32(armv4_5
->pc
->value
, 0, 32);
338 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
339 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
340 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
341 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
343 arm9tdmi_clock_out(jtag_info
, 0xE28F0001, 0, NULL
, 0); // add r0,pc,#1
344 arm9tdmi_clock_out(jtag_info
, ARMV4_5_BX(0), 0, NULL
, 0);
345 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
346 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
348 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_LDMIA(0, 0x1), 0, NULL
, 0);
349 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
350 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
352 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, r0
, NULL
, 0);
353 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
354 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 0);
357 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_B(0x7e9 + pc
), 0, NULL
, 0);
358 arm9tdmi_clock_out(jtag_info
, ARMV4_5_T_NOP
, 0, NULL
, 1);
360 arm7_9
->need_bypass_before_restart
= 1;
363 int feroceon_read_cp15(struct target
*target
, uint32_t op1
, uint32_t op2
, uint32_t CRn
, uint32_t CRm
, uint32_t *value
)
365 struct arm
*armv4_5
= target
->arch_info
;
366 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
367 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
370 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MRC(15, op1
, 0, CRn
, CRm
, op2
), 0, NULL
, 0);
371 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 1);
372 err
= arm7_9_execute_sys_speed(target
);
376 arm9tdmi_clock_out(jtag_info
, ARMV4_5_STMIA(0, 1, 0, 0), 0, NULL
, 0);
377 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
378 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
379 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, value
, 0);
380 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
381 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
382 return jtag_execute_queue();
385 int feroceon_write_cp15(struct target
*target
, uint32_t op1
, uint32_t op2
, uint32_t CRn
, uint32_t CRm
, uint32_t value
)
387 struct arm
*armv4_5
= target
->arch_info
;
388 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
389 struct arm_jtag
*jtag_info
= &arm7_9
->jtag_info
;
391 arm9tdmi_clock_out(jtag_info
, ARMV4_5_LDMIA(0, 1, 0, 0), 0, NULL
, 0);
392 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
393 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
394 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, value
, NULL
, 0);
395 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
396 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
397 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 0);
399 arm9tdmi_clock_out(jtag_info
, ARMV4_5_MCR(15, op1
, 0, CRn
, CRm
, op2
), 0, NULL
, 0);
400 arm9tdmi_clock_out(jtag_info
, ARMV4_5_NOP
, 0, NULL
, 1);
401 return arm7_9_execute_sys_speed(target
);
404 void feroceon_set_dbgrq(struct target
*target
)
406 struct arm
*armv4_5
= target
->arch_info
;
407 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
408 struct reg
*dbg_ctrl
= &arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
];
410 buf_set_u32(dbg_ctrl
->value
, 0, 8, 2);
411 embeddedice_store_reg(dbg_ctrl
);
414 void feroceon_enable_single_step(struct target
*target
, uint32_t next_pc
)
416 struct arm
*armv4_5
= target
->arch_info
;
417 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
419 /* set a breakpoint there */
420 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_ADDR_VALUE
], next_pc
);
421 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_ADDR_MASK
], 0);
422 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_DATA_MASK
], 0xffffffff);
423 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_CONTROL_VALUE
], 0x100);
424 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_CONTROL_MASK
], 0xf7);
427 void feroceon_disable_single_step(struct target
*target
)
429 struct arm
*armv4_5
= target
->arch_info
;
430 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
432 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_ADDR_VALUE
]);
433 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_ADDR_MASK
]);
434 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_DATA_MASK
]);
435 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_CONTROL_MASK
]);
436 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_W0_CONTROL_VALUE
]);
439 int feroceon_examine_debug_reason(struct target
*target
)
441 /* the MOE is not implemented */
442 if (target
->debug_reason
!= DBG_REASON_SINGLESTEP
)
444 target
->debug_reason
= DBG_REASON_DBGRQ
;
450 int feroceon_bulk_write_memory(struct target
*target
, uint32_t address
, uint32_t count
, uint8_t *buffer
)
453 struct arm
*armv4_5
= target
->arch_info
;
454 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
455 enum arm_state core_state
= armv4_5
->core_state
;
456 uint32_t x
, flip
, shift
, save
[7];
460 * We can't use the dcc flow control bits, so let's transfer data
461 * with 31 bits and flip the MSB each time a new data word is sent.
463 static uint32_t dcc_code
[] =
465 0xee115e10, /* 3: mrc p14, 0, r5, c1, c0, 0 */
466 0xe3a0301e, /* 1: mov r3, #30 */
467 0xe3a04002, /* mov r4, #2 */
468 0xee111e10, /* 2: mrc p14, 0, r1, c1, c0, 0 */
469 0xe1310005, /* teq r1, r5 */
470 0x0afffffc, /* beq 1b */
471 0xe1a05001, /* mov r5, r1 */
472 0xe1a01081, /* mov r1, r1, lsl #1 */
473 0xee112e10, /* 3: mrc p14, 0, r2, c1, c0, 0 */
474 0xe1320005, /* teq r2, r5 */
475 0x0afffffc, /* beq 3b */
476 0xe1a05002, /* mov r5, r2 */
477 0xe3c22102, /* bic r2, r2, #0x80000000 */
478 0xe1811332, /* orr r1, r1, r2, lsr r3 */
479 0xe2533001, /* subs r3, r3, #1 */
480 0xe4801004, /* str r1, [r0], #4 */
481 0xe1a01412, /* mov r1, r2, lsl r4 */
482 0xe2844001, /* add r4, r4, #1 */
483 0x4affffed, /* bmi 1b */
484 0xeafffff3, /* b 3b */
487 uint32_t dcc_size
= sizeof(dcc_code
);
489 if (!arm7_9
->dcc_downloads
)
490 return target_write_memory(target
, address
, 4, count
, buffer
);
492 /* regrab previously allocated working_area, or allocate a new one */
493 if (!arm7_9
->dcc_working_area
)
495 uint8_t dcc_code_buf
[dcc_size
];
497 /* make sure we have a working area */
498 if (target_alloc_working_area(target
, dcc_size
, &arm7_9
->dcc_working_area
) != ERROR_OK
)
500 LOG_INFO("no working area available, falling back to memory writes");
501 return target_write_memory(target
, address
, 4, count
, buffer
);
504 /* copy target instructions to target endianness */
505 for (i
= 0; i
< dcc_size
/4; i
++)
506 target_buffer_set_u32(target
, dcc_code_buf
+ i
*4, dcc_code
[i
]);
508 /* write DCC code to working area */
509 if ((retval
= target_write_memory(target
, arm7_9
->dcc_working_area
->address
, 4, dcc_size
/4, dcc_code_buf
)) != ERROR_OK
)
515 /* backup clobbered processor state */
516 for (i
= 0; i
<= 5; i
++)
517 save
[i
] = buf_get_u32(armv4_5
->core_cache
->reg_list
[i
].value
, 0, 32);
518 save
[i
] = buf_get_u32(armv4_5
->pc
->value
, 0, 32);
520 /* set up target address in r0 */
521 buf_set_u32(armv4_5
->core_cache
->reg_list
[0].value
, 0, 32, address
);
522 armv4_5
->core_cache
->reg_list
[0].valid
= 1;
523 armv4_5
->core_cache
->reg_list
[0].dirty
= 1;
524 armv4_5
->core_state
= ARM_STATE_ARM
;
526 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_COMMS_DATA
], 0);
527 arm7_9_resume(target
, 0, arm7_9
->dcc_working_area
->address
, 1, 1);
533 for (i
= 0; i
< count
; i
++)
535 uint32_t y
= target_buffer_get_u32(target
, buffer
);
536 uint32_t z
= (x
>> 1) | (y
>> shift
) | (flip
^= 0x80000000);
537 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_COMMS_DATA
], z
);
538 x
= y
<< (32 - shift
);
539 if (++shift
>= 32 || i
+ 1 >= count
)
541 z
= (x
>> 1) | (flip
^= 0x80000000);
542 embeddedice_write_reg(&arm7_9
->eice_cache
->reg_list
[EICE_COMMS_DATA
], z
);
549 retval
= target_halt(target
);
550 if (retval
== ERROR_OK
)
551 retval
= target_wait_state(target
, TARGET_HALTED
, 500);
552 if (retval
== ERROR_OK
) {
553 uint32_t endaddress
=
554 buf_get_u32(armv4_5
->core_cache
->reg_list
[0].value
, 0, 32);
555 if (endaddress
!= address
+ count
*4) {
556 LOG_ERROR("DCC write failed,"
557 " expected end address 0x%08" PRIx32
558 " got 0x%0" PRIx32
"",
559 address
+ count
*4, endaddress
);
564 /* restore target state */
565 for (i
= 0; i
<= 5; i
++)
567 buf_set_u32(armv4_5
->core_cache
->reg_list
[i
].value
, 0, 32, save
[i
]);
568 armv4_5
->core_cache
->reg_list
[i
].valid
= 1;
569 armv4_5
->core_cache
->reg_list
[i
].dirty
= 1;
571 buf_set_u32(armv4_5
->pc
->value
, 0, 32, save
[i
]);
572 armv4_5
->pc
->valid
= 1;
573 armv4_5
->pc
->dirty
= 1;
574 armv4_5
->core_state
= core_state
;
579 int feroceon_init_target(struct command_context
*cmd_ctx
, struct target
*target
)
581 arm9tdmi_init_target(cmd_ctx
, target
);
585 void feroceon_common_setup(struct target
*target
)
587 struct arm
*armv4_5
= target
->arch_info
;
588 struct arm7_9_common
*arm7_9
= armv4_5
->arch_info
;
590 /* override some insn sequence functions */
591 arm7_9
->change_to_arm
= feroceon_change_to_arm
;
592 arm7_9
->read_core_regs
= feroceon_read_core_regs
;
593 arm7_9
->read_core_regs_target_buffer
= feroceon_read_core_regs_target_buffer
;
594 arm7_9
->read_xpsr
= feroceon_read_xpsr
;
595 arm7_9
->write_xpsr
= feroceon_write_xpsr
;
596 arm7_9
->write_xpsr_im8
= feroceon_write_xpsr_im8
;
597 arm7_9
->write_core_regs
= feroceon_write_core_regs
;
598 arm7_9
->branch_resume
= feroceon_branch_resume
;
599 arm7_9
->branch_resume_thumb
= feroceon_branch_resume_thumb
;
601 /* must be implemented with only one comparator */
602 arm7_9
->enable_single_step
= feroceon_enable_single_step
;
603 arm7_9
->disable_single_step
= feroceon_disable_single_step
;
605 /* MOE is not implemented */
606 arm7_9
->examine_debug_reason
= feroceon_examine_debug_reason
;
608 /* Note: asserting DBGRQ might not win over the undef exception.
609 If that happens then just use "arm7_9 dbgrq disable". */
610 arm7_9
->use_dbgrq
= 1;
611 arm7_9
->set_special_dbgrq
= feroceon_set_dbgrq
;
613 /* only one working comparator */
614 arm7_9
->wp_available_max
= 1;
615 arm7_9
->wp1_used_default
= -1;
618 int feroceon_target_create(struct target
*target
, Jim_Interp
*interp
)
620 struct arm926ejs_common
*arm926ejs
= calloc(1,sizeof(struct arm926ejs_common
));
622 arm926ejs_init_arch_info(target
, arm926ejs
, target
->tap
);
623 feroceon_common_setup(target
);
625 /* the standard ARM926 methods don't always work (don't ask...) */
626 arm926ejs
->read_cp15
= feroceon_read_cp15
;
627 arm926ejs
->write_cp15
= feroceon_write_cp15
;
632 int dragonite_target_create(struct target
*target
, Jim_Interp
*interp
)
634 struct arm966e_common
*arm966e
= calloc(1,sizeof(struct arm966e_common
));
636 arm966e_init_arch_info(target
, arm966e
, target
->tap
);
637 feroceon_common_setup(target
);
642 int feroceon_examine(struct target
*target
)
645 struct arm7_9_common
*arm7_9
;
648 retval
= arm7_9_examine(target
);
649 if (retval
!= ERROR_OK
)
652 armv4_5
= target
->arch_info
;
653 arm7_9
= armv4_5
->arch_info
;
655 /* the COMMS_CTRL bits are all contiguous */
656 if (buf_get_u32(arm7_9
->eice_cache
->reg_list
[EICE_COMMS_CTRL
].value
, 2, 4) != 6)
657 LOG_ERROR("unexpected Feroceon EICE version signature");
659 arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
].size
= 6;
660 arm7_9
->eice_cache
->reg_list
[EICE_DBG_STAT
].size
= 5;
661 arm7_9
->has_monitor_mode
= 1;
663 /* vector catch reg is not initialized on reset */
664 embeddedice_set_reg(&arm7_9
->eice_cache
->reg_list
[EICE_VEC_CATCH
], 0);
666 /* clear monitor mode, enable comparators */
667 embeddedice_read_reg(&arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
]);
668 jtag_execute_queue();
669 buf_set_u32(arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
].value
, 4, 1, 0);
670 buf_set_u32(arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
].value
, 5, 1, 0);
671 embeddedice_store_reg(&arm7_9
->eice_cache
->reg_list
[EICE_DBG_CTRL
]);
676 struct target_type feroceon_target
=
681 .arch_state
= arm926ejs_arch_state
,
683 .target_request_data
= arm7_9_target_request_data
,
686 .resume
= arm7_9_resume
,
689 .assert_reset
= feroceon_assert_reset
,
690 .deassert_reset
= arm7_9_deassert_reset
,
691 .soft_reset_halt
= arm926ejs_soft_reset_halt
,
693 .get_gdb_reg_list
= arm_get_gdb_reg_list
,
695 .read_memory
= arm7_9_read_memory
,
696 .write_memory
= arm926ejs_write_memory
,
697 .bulk_write_memory
= feroceon_bulk_write_memory
,
699 .checksum_memory
= arm_checksum_memory
,
700 .blank_check_memory
= arm_blank_check_memory
,
702 .run_algorithm
= armv4_5_run_algorithm
,
704 .add_breakpoint
= arm7_9_add_breakpoint
,
705 .remove_breakpoint
= arm7_9_remove_breakpoint
,
706 .add_watchpoint
= arm7_9_add_watchpoint
,
707 .remove_watchpoint
= arm7_9_remove_watchpoint
,
709 .commands
= arm926ejs_command_handlers
,
710 .target_create
= feroceon_target_create
,
711 .init_target
= feroceon_init_target
,
712 .examine
= feroceon_examine
,
715 struct target_type dragonite_target
=
720 .arch_state
= arm_arch_state
,
722 .target_request_data
= arm7_9_target_request_data
,
725 .resume
= arm7_9_resume
,
728 .assert_reset
= feroceon_assert_reset
,
729 .deassert_reset
= arm7_9_deassert_reset
,
730 .soft_reset_halt
= arm7_9_soft_reset_halt
,
732 .get_gdb_reg_list
= arm_get_gdb_reg_list
,
734 .read_memory
= arm7_9_read_memory
,
735 .write_memory
= arm7_9_write_memory
,
736 .bulk_write_memory
= feroceon_bulk_write_memory
,
738 .checksum_memory
= arm_checksum_memory
,
739 .blank_check_memory
= arm_blank_check_memory
,
741 .run_algorithm
= armv4_5_run_algorithm
,
743 .add_breakpoint
= arm7_9_add_breakpoint
,
744 .remove_breakpoint
= arm7_9_remove_breakpoint
,
745 .add_watchpoint
= arm7_9_add_watchpoint
,
746 .remove_watchpoint
= arm7_9_remove_watchpoint
,
748 .commands
= arm966e_command_handlers
,
749 .target_create
= dragonite_target_create
,
750 .init_target
= feroceon_init_target
,
751 .examine
= feroceon_examine
,
Linking to existing account procedure
If you already have an account and want to add another login method
you
MUST first sign in with your existing account and
then change URL to read
https://review.openocd.org/login/?link
to get to this page again but this time it'll work for linking. Thank you.
SSH host keys fingerprints
1024 SHA256:YKx8b7u5ZWdcbp7/4AeXNaqElP49m6QrwfXaqQGJAOk gerrit-code-review@openocd.zylin.com (DSA)
384 SHA256:jHIbSQa4REvwCFG4cq5LBlBLxmxSqelQPem/EXIrxjk gerrit-code-review@openocd.org (ECDSA)
521 SHA256:UAOPYkU9Fjtcao0Ul/Rrlnj/OsQvt+pgdYSZ4jOYdgs gerrit-code-review@openocd.org (ECDSA)
256 SHA256:A13M5QlnozFOvTllybRZH6vm7iSt0XLxbA48yfc2yfY gerrit-code-review@openocd.org (ECDSA)
256 SHA256:spYMBqEYoAOtK7yZBrcwE8ZpYt6b68Cfh9yEVetvbXg gerrit-code-review@openocd.org (ED25519)
+--[ED25519 256]--+
|=.. |
|+o.. . |
|*.o . . |
|+B . . . |
|Bo. = o S |
|Oo.+ + = |
|oB=.* = . o |
| =+=.+ + E |
|. .=o . o |
+----[SHA256]-----+
2048 SHA256:0Onrb7/PHjpo6iVZ7xQX2riKN83FJ3KGU0TvI0TaFG4 gerrit-code-review@openocd.zylin.com (RSA)