1 /* -*- tab-width:8 -*- */
4 Copyright (C) 2011 Peter Zotov <whitequark@whitequark.org>
5 Use of this source code is governed by a BSD-style
6 license that can be found in the LICENSE file.
13 #include <sys/types.h>
14 #include <sys/socket.h>
15 #include <netinet/in.h>
16 #include <arpa/inet.h>
17 #include "gdb-remote.h"
18 #include "stlink-hw.h"
20 static const char hex[] = "0123456789abcdef";
22 // configured for STM32F100RB
23 static const char* const c_memory_map =
24 "<?xml version=\"1.0\"?>"
25 "<!DOCTYPE memory-map PUBLIC \"+//IDN gnu.org//DTD GDB Memory Map V1.0//EN\""
26 " \"http://sourceware.org/gdb/gdb-memory-map.dtd\">"
28 " <memory type=\"rom\" start=\"0x00000000\" length=\"0x20000\"/>" // code = sram or flash
29 " <memory type=\"ram\" start=\"0x20000000\" length=\"0x2000\"/>" // sram 8k
30 " <memory type=\"flash\" start=\"0x08000000\" length=\"0x20000\">" // flash 128k
31 " <property name=\"blocksize\">0x400</property>" // 1k pages
33 " <memory type=\"ram\" start=\"0x40000000\" length=\"0x1fffffff\"/>" // peripheral regs
34 " <memory type=\"ram\" start=\"0xe0000000\" length=\"0x1fffffff\"/>" // cortex regs
37 int serve(struct stlink* sl, int port);
39 int main(int argc, char** argv) {
41 fprintf(stderr, "Usage: %s <port> /dev/sgX\n", argv[0]);
45 struct stlink *sl = stlink_quirk_open(argv[2], 0);
49 if(stlink_current_mode(sl) != STLINK_DEV_DEBUG_MODE)
50 stlink_enter_swd_mode(sl);
53 printf("Debugging ARM core %08x.\n", sl->core_id);
55 int port = atoi(argv[1]);
57 while(serve(sl, port) == 0);
64 #define CODE_BREAK_NUM 6
66 #define CODE_BREAK_LOW 0x01
67 #define CODE_BREAK_HIGH 0x02
69 struct code_hw_breakpoint {
74 struct code_hw_breakpoint code_breaks[CODE_BREAK_NUM];
76 static void init_code_breakpoints(struct stlink* sl) {
77 memset(sl->q_buf, 0, 4);
78 sl->q_buf[0] = 0x03; // KEY | ENABLE
79 stlink_write_mem32(sl, 0xe0002000, 4);
81 memset(sl->q_buf, 0, 4);
82 for(int i = 0; i < CODE_BREAK_NUM; i++) {
83 code_breaks[i].type = 0;
84 stlink_write_mem32(sl, 0xe0002008 + i * 4, 4);
88 static int update_code_breakpoint(struct stlink* sl, stm32_addr_t addr, int set) {
89 stm32_addr_t fpb_addr = addr & ~0x3;
90 int type = addr & 0x2 ? CODE_BREAK_HIGH : CODE_BREAK_LOW;
93 fprintf(stderr, "update_code_breakpoint: unaligned address %08x\n", addr);
98 for(int i = 0; i < CODE_BREAK_NUM; i++) {
99 if(fpb_addr == code_breaks[i].addr ||
100 (set && code_breaks[i].type == 0)) {
107 if(set) return -1; // Free slot not found
108 else return 0; // Breakpoint is already removed
111 struct code_hw_breakpoint* brk = &code_breaks[id];
113 brk->addr = fpb_addr;
115 if(set) brk->type |= type;
116 else brk->type &= ~type;
118 memset(sl->q_buf, 0, 4);
122 printf("clearing hw break %d\n", id);
125 stlink_write_mem32(sl, 0xe0002008 + id * 4, 4);
127 sl->q_buf[0] = ( brk->addr & 0xff) | 1;
128 sl->q_buf[1] = ((brk->addr >> 8) & 0xff);
129 sl->q_buf[2] = ((brk->addr >> 16) & 0xff);
130 sl->q_buf[3] = ((brk->addr >> 24) & 0xff) | (brk->type << 6);
133 printf("setting hw break %d at %08x (%d)\n",
134 id, brk->addr, brk->type);
135 printf("reg %02x %02x %02x %02x\n",
136 sl->q_buf[3], sl->q_buf[2], sl->q_buf[1], sl->q_buf[0]);
139 stlink_write_mem32(sl, 0xe0002008 + id * 4, 4);
145 #define FLASH_BASE 0x08000000
146 #define FLASH_PAGE 0x400
147 #define FLASH_PAGE_MASK (~((1 << 10) - 1))
148 #define FLASH_SIZE (FLASH_PAGE * 128)
155 struct flash_block* next;
158 static struct flash_block* flash_root;
160 static int flash_add_block(stm32_addr_t addr, unsigned length) {
161 if(addr < FLASH_BASE || addr + length > FLASH_BASE + FLASH_SIZE) {
162 fprintf(stderr, "flash_add_block: incorrect bounds\n");
166 if(addr % FLASH_PAGE != 0 || length % FLASH_PAGE != 0) {
167 fprintf(stderr, "flash_add_block: unaligned block\n");
171 struct flash_block* new = malloc(sizeof(struct flash_block));
172 new->next = flash_root;
175 new->length = length;
176 new->data = calloc(length, 1);
183 static int flash_populate(stm32_addr_t addr, uint8_t* data, unsigned length) {
184 int fit_blocks = 0, fit_length = 0;
186 for(struct flash_block* fb = flash_root; fb; fb = fb->next) {
187 /* Block: ------X------Y--------
191 * Block intersects with data, if:
195 unsigned X = fb->addr, Y = fb->addr + fb->length;
196 unsigned a = addr, b = addr + length;
198 // from start of the block
199 unsigned start = (a > X ? a : X) - X;
200 unsigned end = (b > Y ? Y : b) - X;
202 memcpy(fb->data + start, data, end - start);
205 fit_length += end - start;
209 if(fit_blocks == 0) {
210 fprintf(stderr, "Unfit data block %08x -> %04x\n", addr, length);
214 if(fit_length != length) {
215 fprintf(stderr, "warning: data block %08x -> %04x truncated to %04x\n",
216 addr, length, fit_length);
217 fprintf(stderr, "(this is not an error, just a GDB glitch)\n");
223 static int flash_go(struct stlink* sl) {
226 for(struct flash_block* fb = flash_root; fb; fb = fb->next) {
228 printf("flash_do: block %08x -> %04x\n", fb->addr, fb->length);
231 stlink_erase_flash_page(sl, fb->addr);
233 if(!stlink_write_flash(sl, fb->addr, fb->data, fb->length) < 0) {
234 fprintf(stderr, "Flash writing failed.\n");
242 for(struct flash_block* fb = flash_root, *next; fb; fb = next) {
253 int serve(struct stlink* sl, int port) {
254 int sock = socket(AF_INET, SOCK_STREAM, 0);
260 unsigned int val = 1;
261 setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &val, sizeof(val));
263 struct sockaddr_in serv_addr = {0};
264 serv_addr.sin_family = AF_INET;
265 serv_addr.sin_addr.s_addr = inet_addr("127.0.0.1");
266 serv_addr.sin_port = htons(port);
268 if(bind(sock, (struct sockaddr *) &serv_addr, sizeof(serv_addr)) < 0) {
273 if(listen(sock, 5) < 0) {
278 stlink_force_debug(sl);
280 init_code_breakpoints(sl);
282 printf("Listening at *:%d...\n", port);
284 int client = accept(sock, NULL, NULL);
292 printf("GDB connected.\n");
297 int status = gdb_recv_packet(client, &packet);
299 fprintf(stderr, "cannot recv: %d\n", status);
304 printf("recv: %s\n", packet);
311 if(packet[1] == 'P' || packet[1] == 'C' || packet[1] == 'L') {
316 char *separator = strstr(packet, ":"), *params = "";
317 if(separator == NULL) {
318 separator = packet + strlen(packet);
320 params = separator + 1;
323 unsigned queryNameLength = (separator - &packet[1]);
324 char* queryName = calloc(queryNameLength + 1, 1);
325 strncpy(queryName, &packet[1], queryNameLength);
328 printf("query: %s;%s\n", queryName, params);
331 if(!strcmp(queryName, "Supported")) {
332 reply = strdup("PacketSize=3fff;qXfer:memory-map:read+");
333 } else if(!strcmp(queryName, "Xfer")) {
334 char *type, *op, *annex, *s_addr, *s_length;
337 type = strsep(&tok, ":");
338 op = strsep(&tok, ":");
339 annex = strsep(&tok, ":");
340 s_addr = strsep(&tok, ",");
343 unsigned addr = strtoul(s_addr, NULL, 16),
344 length = strtoul(s_length, NULL, 16);
347 printf("Xfer: type:%s;op:%s;annex:%s;addr:%d;length:%d\n",
348 type, op, annex, addr, length);
351 const char* data = NULL;
353 if(!strcmp(type, "memory-map") && !strcmp(op, "read"))
357 unsigned data_length = strlen(data);
358 if(addr + length > data_length)
359 length = data_length - addr;
364 reply = calloc(length + 2, 1);
366 strncpy(&reply[1], data, length);
380 char *separator = strstr(packet, ":"), *params = "";
381 if(separator == NULL) {
382 separator = packet + strlen(packet);
384 params = separator + 1;
387 unsigned cmdNameLength = (separator - &packet[1]);
388 char* cmdName = calloc(cmdNameLength + 1, 1);
389 strncpy(cmdName, &packet[1], cmdNameLength);
391 if(!strcmp(cmdName, "FlashErase")) {
392 char *s_addr, *s_length;
395 s_addr = strsep(&tok, ",");
398 unsigned addr = strtoul(s_addr, NULL, 16),
399 length = strtoul(s_length, NULL, 16);
402 printf("FlashErase: addr:%08x,len:%04x\n",
406 if(flash_add_block(addr, length) < 0) {
407 reply = strdup("E00");
409 reply = strdup("OK");
411 } else if(!strcmp(cmdName, "FlashWrite")) {
415 s_addr = strsep(&tok, ":");
418 unsigned addr = strtoul(s_addr, NULL, 16);
419 unsigned data_length = status - (data - packet);
421 // Length of decoded data cannot be more than
422 // encoded, as escapes are removed.
423 // Additional byte is reserved for alignment fix.
424 uint8_t *decoded = calloc(data_length + 1, 1);
425 unsigned dec_index = 0;
426 for(int i = 0; i < data_length; i++) {
427 if(data[i] == 0x7d) {
429 decoded[dec_index++] = data[i] ^ 0x20;
431 decoded[dec_index++] = data[i];
436 if(dec_index % 2 != 0)
440 printf("binary packet %d -> %d\n", data_length, dec_index);
443 if(flash_populate(addr, decoded, dec_index) < 0) {
444 reply = strdup("E00");
446 reply = strdup("OK");
448 } else if(!strcmp(cmdName, "FlashDone")) {
449 if(flash_go(sl) < 0) {
450 reply = strdup("E00");
452 reply = strdup("OK");
469 printf("Core running, waiting for interrupt (either in chip or GDB).\n");
472 int status = gdb_check_for_interrupt(client);
474 fprintf(stderr, "cannot check for int: %d\n", status);
479 stlink_force_debug(sl);
484 if(sl->core_stat == STLINK_CORE_HALTED) {
491 reply = strdup("S05"); // TRAP
497 reply = strdup("S05"); // TRAP
501 reply = strdup("S05"); // TRAP
505 stlink_read_all_regs(sl);
507 reply = calloc(8 * 16 + 1, 1);
508 for(int i = 0; i < 16; i++)
509 sprintf(&reply[i * 8], "%08x", htonl(sl->reg.r[i]));
514 unsigned id = strtoul(&packet[1], NULL, 16), reg = 0xDEADDEAD;
517 stlink_read_reg(sl, id);
518 reg = htonl(sl->reg.r[id]);
519 } else if(id == 0x19) {
520 stlink_read_reg(sl, 16);
521 reg = htonl(sl->reg.xpsr);
523 reply = strdup("E00");
526 reply = calloc(8 + 1, 1);
527 sprintf(reply, "%08x", reg);
533 char* s_reg = &packet[1];
534 char* s_value = strstr(&packet[1], "=") + 1;
536 unsigned reg = strtoul(s_reg, NULL, 16);
537 unsigned value = strtoul(s_value, NULL, 16);
540 stlink_write_reg(sl, ntohl(value), reg);
541 } else if(reg == 0x19) {
542 stlink_write_reg(sl, ntohl(value), 16);
544 reply = strdup("E00");
548 reply = strdup("OK");
555 for(int i = 0; i < 16; i++) {
557 strncpy(str, &packet[1 + i * 8], 8);
558 uint32_t reg = strtoul(str, NULL, 16);
559 stlink_write_reg(sl, ntohl(reg), i);
562 reply = strdup("OK");
566 char* s_start = &packet[1];
567 char* s_count = strstr(&packet[1], ",") + 1;
569 stm32_addr_t start = strtoul(s_start, NULL, 16);
570 unsigned count = strtoul(s_count, NULL, 16);
572 unsigned adj_start = start % 4;
574 stlink_read_mem32(sl, start - adj_start, (count % 4 == 0) ?
575 count : count + 4 - (count % 4));
577 reply = calloc(count * 2 + 1, 1);
578 for(int i = 0; i < count; i++) {
579 reply[i * 2 + 0] = hex[sl->q_buf[i + adj_start] >> 4];
580 reply[i * 2 + 1] = hex[sl->q_buf[i + adj_start] & 0xf];
587 char* s_start = &packet[1];
588 char* s_count = strstr(&packet[1], ",") + 1;
589 char* hexdata = strstr(packet, ":") + 1;
591 stm32_addr_t start = strtoul(s_start, NULL, 16);
592 unsigned count = strtoul(s_count, NULL, 16);
594 for(int i = 0; i < count; i ++) {
595 char hex[3] = { hexdata[i*2], hexdata[i*2+1], 0 };
596 uint8_t byte = strtoul(hex, NULL, 16);
600 if((count % 4) == 0 && (start % 4) == 0) {
601 stlink_write_mem32(sl, start, count);
603 stlink_write_mem8(sl, start, count);
606 reply = strdup("OK");
612 if(packet[1] == '1') {
613 stm32_addr_t addr = strtoul(&packet[3], NULL, 16);
614 if(update_code_breakpoint(sl, addr, 1) < 0) {
615 reply = strdup("E00");
617 reply = strdup("OK");
627 if(packet[1] == '1') {
628 stm32_addr_t addr = strtoul(&packet[3], NULL, 16);
629 update_code_breakpoint(sl, addr, 0);
631 reply = strdup("OK");
640 // After this function will be entered afterwards, the
641 // chip will be reset anyway. So this is a no-op.
653 printf("send: %s\n", reply);
656 int result = gdb_send_packet(client, reply);
658 fprintf(stderr, "cannot send: %d\n", result);