2 * Copyright (C) 2005 by Dominic Rath
5 * Copyright (C) 2007,2008 Øyvind Harboe
6 * oyvind.harboe@zylin.com
8 * Copyright (C) 2008 Peter Hettkamp
9 * peter.hettkamp@htp-tel.de
11 * Copyright (C) 2009 SoftPLC Corporation. http://softplc.com
12 * Dick Hollenbeck <dick@softplc.com>
14 * This program is free software; you can redistribute it and/or modify
15 * it under the terms of the GNU General Public License as published by
16 * the Free Software Foundation; either version 2 of the License, or
17 * (at your option) any later version.
19 * This program is distributed in the hope that it will be useful,
20 * but WITHOUT ANY WARRANTY; without even the implied warranty of
21 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
22 * GNU General Public License for more details.
24 * You should have received a copy of the GNU General Public License
25 * along with this program; if not, write to the Free Software
26 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
30 /* The specification for SVF is available here:
31 * http://www.asset-intertech.com/support/svf.pdf
32 * Below, this document is refered to as the "SVF spec".
34 * The specification for XSVF is available here:
35 * http://www.xilinx.com/support/documentation/application_notes/xapp503.pdf
36 * Below, this document is refered to as the "XSVF spec".
44 #include <jtag/jtag.h>
48 /* XSVF commands, from appendix B of xapp503.pdf */
49 #define XCOMPLETE 0x00
57 #define XSETSDRMASKS 0x0A
72 /* XWAITSTATE is not in the xilinx XSVF spec, but the svf2xsvf.py translator
73 * generates this. Arguably it is needed because the XSVF XRUNTEST command
74 * was ill conceived and does not directly flow out of the SVF RUNTEST command.
75 * This XWAITSTATE does map directly from the SVF RUNTEST command.
77 #define XWAITSTATE 0x18
79 /* Lattice has extended the SVF file format, and Dick Hollenbeck's python based
80 * SVF2XSVF converter supports these 3 additional XSVF opcodes, LCOUNT, LDELAY, LSDR.
81 * Here is an example of usage of the 3 lattice opcode extensions:
83 ! Set the maximum loop count to 25.
85 ! Step to DRPAUSE give 5 clocks and wait for 1.00e + 000 SEC.
86 LDELAY DRPAUSE 5 TCK 1.00E-003 SEC;
87 ! Test for the completed status. Match means pass.
88 ! Loop back to LDELAY line if not match and loop count less than 25.
100 /* XSVF valid state values for the XSTATE command, from appendix B of xapp503.pdf */
101 #define XSV_RESET 0x00
102 #define XSV_IDLE 0x01
103 #define XSV_DRSELECT 0x02
104 #define XSV_DRCAPTURE 0x03
105 #define XSV_DRSHIFT 0x04
106 #define XSV_DREXIT1 0x05
107 #define XSV_DRPAUSE 0x06
108 #define XSV_DREXIT2 0x07
109 #define XSV_DRUPDATE 0x08
110 #define XSV_IRSELECT 0x09
111 #define XSV_IRCAPTURE 0x0A
112 #define XSV_IRSHIFT 0x0B
113 #define XSV_IREXIT1 0x0C
114 #define XSV_IRPAUSE 0x0D
115 #define XSV_IREXIT2 0x0E
116 #define XSV_IRUPDATE 0x0F
118 /* arguments to XTRST */
122 #define XTRST_ABSENT 3
124 #define XSTATE_MAX_PATH 12
127 static int xsvf_fd = 0;
130 /* map xsvf tap state to an openocd "tap_state_t" */
131 static tap_state_t xsvf_to_tap(int xsvf_state)
137 case XSV_RESET: ret = TAP_RESET; break;
138 case XSV_IDLE: ret = TAP_IDLE; break;
139 case XSV_DRSELECT: ret = TAP_DRSELECT; break;
140 case XSV_DRCAPTURE: ret = TAP_DRCAPTURE; break;
141 case XSV_DRSHIFT: ret = TAP_DRSHIFT; break;
142 case XSV_DREXIT1: ret = TAP_DREXIT1; break;
143 case XSV_DRPAUSE: ret = TAP_DRPAUSE; break;
144 case XSV_DREXIT2: ret = TAP_DREXIT2; break;
145 case XSV_DRUPDATE: ret = TAP_DRUPDATE; break;
146 case XSV_IRSELECT: ret = TAP_IRSELECT; break;
147 case XSV_IRCAPTURE: ret = TAP_IRCAPTURE; break;
148 case XSV_IRSHIFT: ret = TAP_IRSHIFT; break;
149 case XSV_IREXIT1: ret = TAP_IREXIT1; break;
150 case XSV_IRPAUSE: ret = TAP_IRPAUSE; break;
151 case XSV_IREXIT2: ret = TAP_IREXIT2; break;
152 case XSV_IRUPDATE: ret = TAP_IRUPDATE; break;
154 LOG_ERROR("UNKNOWN XSVF STATE 0x%02X", xsvf_state);
163 static int xsvf_read_buffer(int num_bits, int fd, uint8_t* buf)
167 for (num_bytes = (num_bits + 7) / 8; num_bytes > 0; num_bytes--)
169 /* reverse the order of bytes as they are read sequentially from file */
170 if (read(fd, buf + num_bytes - 1, 1) < 0)
171 return ERROR_XSVF_EOF;
178 COMMAND_HANDLER(handle_xsvf_command)
180 uint8_t *dr_out_buf = NULL; /* from host to device (TDI) */
181 uint8_t *dr_in_buf = NULL; /* from device to host (TDO) */
182 uint8_t *dr_in_mask = NULL;
185 int xruntest = 0; /* number of TCK cycles OR microseconds */
186 int xrepeat = 0; /* number of retries */
188 tap_state_t xendir = TAP_IDLE; /* see page 8 of the SVF spec, initial xendir to be TAP_IDLE */
189 tap_state_t xenddr = TAP_IDLE;
193 long file_offset = 0;
196 tap_state_t loop_state = TAP_IDLE;
202 int tdo_mismatch = 0;
206 bool collecting_path = false;
207 tap_state_t path[XSTATE_MAX_PATH];
208 unsigned pathlen = 0;
210 /* a flag telling whether to clock TCK during waits,
211 * or simply sleep, controled by virt2
213 int runtest_requires_tck = 0;
216 /* use NULL to indicate a "plain" xsvf file which accounts for
217 additional devices in the scan chain, otherwise the device
218 that should be affected
220 struct jtag_tap *tap = NULL;
224 command_print(CMD_CTX, "usage: xsvf <device#|plain> <file> [<variant>] [quiet]");
228 /* we mess with CMD_ARGV starting point below, snapshot filename here */
229 const char *filename = CMD_ARGV[1];
231 if (strcmp(CMD_ARGV[0], "plain") != 0)
233 tap = jtag_tap_by_string(CMD_ARGV[0]);
236 command_print(CMD_CTX, "Tap: %s unknown", CMD_ARGV[0]);
241 if ((xsvf_fd = open(filename, O_RDONLY)) < 0)
243 command_print(CMD_CTX, "file \"%s\" not found", filename);
247 /* if this argument is present, then interpret xruntest counts as TCK cycles rather than as usecs */
248 if ((CMD_ARGC > 2) && (strcmp(CMD_ARGV[2], "virt2") == 0))
250 runtest_requires_tck = 1;
255 if ((CMD_ARGC > 2) && (strcmp(CMD_ARGV[2], "quiet") == 0))
260 LOG_USER("xsvf processing file: \"%s\"", filename);
262 while (read(xsvf_fd, &opcode, 1) > 0)
264 /* record the position of this opcode within the file */
265 file_offset = lseek(xsvf_fd, 0, SEEK_CUR) - 1;
267 /* maybe collect another state for a pathmove();
268 * or terminate a path.
270 if (collecting_path) {
276 /* ignore/show comments between XSTATE ops */
279 /* try to collect another transition */
280 if (pathlen == XSTATE_MAX_PATH) {
281 LOG_ERROR("XSVF: path too long");
286 if (read(xsvf_fd, &uc, 1) < 0)
292 mystate = xsvf_to_tap(uc);
293 path[pathlen++] = mystate;
295 LOG_DEBUG("XSTATE 0x%02X %s", uc,
296 tap_state_name(mystate));
298 /* If path is incomplete, collect more */
299 if (!svf_tap_state_is_stable(mystate))
302 /* Else execute the path transitions we've
305 * NOTE: Punting on the saved path is not
306 * strictly correct, but we must to do this
307 * unless jtag_add_pathmove() stops rejecting
308 * paths containing RESET. This is probably
309 * harmless, since there aren't many options
310 * for going from a stable state to reset;
311 * at the worst, we may issue extra clocks
312 * once we get to RESET.
314 if (mystate == TAP_RESET) {
315 LOG_WARNING("XSVF: dodgey RESET");
321 /* Execute the path we collected
323 * NOTE: OpenOCD requires something that XSVF
324 * doesn't: the last TAP state in the path
325 * must be stable. In practice, tools that
326 * create XSVF seem to follow that rule too.
328 collecting_path = false;
330 if (path[0] == TAP_RESET)
333 jtag_add_pathmove(pathlen, path);
335 result = jtag_get_error();
336 if (result != ERROR_OK) {
337 LOG_ERROR("XSVF: pathmove error %d",
349 LOG_DEBUG("XCOMPLETE");
351 result = jtag_execute_queue();
352 if (result != ERROR_OK)
360 LOG_DEBUG("XTDOMASK");
361 if (dr_in_mask && (xsvf_read_buffer(xsdrsize, xsvf_fd, dr_in_mask) != ERROR_OK))
367 uint8_t xruntest_buf[4];
369 if (read(xsvf_fd, xruntest_buf, 4) < 0)
375 xruntest = be_to_h_u32(xruntest_buf);
376 LOG_DEBUG("XRUNTEST %d 0x%08X", xruntest, xruntest);
384 if (read(xsvf_fd, &myrepeat, 1) < 0)
389 LOG_DEBUG("XREPEAT %d", xrepeat);
396 uint8_t xsdrsize_buf[4];
398 if (read(xsvf_fd, xsdrsize_buf, 4) < 0)
404 xsdrsize = be_to_h_u32(xsdrsize_buf);
405 LOG_DEBUG("XSDRSIZE %d", xsdrsize);
407 if (dr_out_buf) free(dr_out_buf);
408 if (dr_in_buf) free(dr_in_buf);
409 if (dr_in_mask) free(dr_in_mask);
411 dr_out_buf = malloc((xsdrsize + 7) / 8);
412 dr_in_buf = malloc((xsdrsize + 7) / 8);
413 dr_in_mask = malloc((xsdrsize + 7) / 8);
417 case XSDR: /* these two are identical except for the dr_in_buf */
424 const char* op_name = (opcode == XSDR ? "XSDR" : "XSDRTDO");
426 if (xsvf_read_buffer(xsdrsize, xsvf_fd, dr_out_buf) != ERROR_OK)
432 if (opcode == XSDRTDO)
434 if (xsvf_read_buffer(xsdrsize, xsvf_fd, dr_in_buf) != ERROR_OK)
444 LOG_DEBUG("%s %d", op_name, xsdrsize);
446 for (attempt = 0; attempt < limit; ++attempt)
448 struct scan_field field;
452 /* perform the XC9500 exception handling sequence shown in xapp067.pdf and
453 illustrated in psuedo code at end of this file. We start from state
461 This sequence should be harmless for other devices, and it
462 will be skipped entirely if xrepeat is set to zero.
465 static tap_state_t exception_path[] = {
473 jtag_add_pathmove(ARRAY_SIZE(exception_path), exception_path);
476 LOG_USER("%s mismatch, xsdrsize=%d retry=%d", op_name, xsdrsize, attempt);
480 field.num_bits = xsdrsize;
481 field.out_value = dr_out_buf;
482 field.in_value = calloc(DIV_ROUND_UP(field.num_bits, 8), 1);
485 jtag_add_plain_dr_scan(1, &field, jtag_set_end_state(TAP_DRPAUSE));
487 jtag_add_dr_scan(1, &field, jtag_set_end_state(TAP_DRPAUSE));
489 jtag_check_value_mask(&field, dr_in_buf, dr_in_mask);
491 free(field.in_value);
494 /* LOG_DEBUG("FLUSHING QUEUE"); */
495 result = jtag_execute_queue();
496 if (result == ERROR_OK)
505 LOG_USER("%s mismatch", op_name);
510 /* See page 19 of XSVF spec regarding opcode "XSDR" */
513 result = svf_add_statemove(TAP_IDLE);
515 if (runtest_requires_tck)
516 jtag_add_clocks(xruntest);
518 jtag_add_sleep(xruntest);
520 else if (xendir != TAP_DRPAUSE) /* we are already in TAP_DRPAUSE */
521 result = svf_add_statemove(xenddr);
526 LOG_ERROR("unsupported XSETSDRMASKS\n");
531 LOG_ERROR("unsupported XSDRINC\n");
536 LOG_ERROR("unsupported XSDRB\n");
541 LOG_ERROR("unsupported XSDRC\n");
546 LOG_ERROR("unsupported XSDRE\n");
551 LOG_ERROR("unsupported XSDRTDOB\n");
556 LOG_ERROR("unsupported XSDRTDOC\n");
561 LOG_ERROR("unsupported XSDRTDOE\n");
570 if (read(xsvf_fd, &uc, 1) < 0)
576 mystate = xsvf_to_tap(uc);
578 LOG_DEBUG("XSTATE 0x%02X %s", uc, tap_state_name(mystate));
580 if (mystate == TAP_INVALID) {
581 LOG_ERROR("XSVF: bad XSTATE %02x", uc);
586 /* NOTE: the current state is SVF-stable! */
588 /* no change == NOP */
589 if (mystate == cmd_queue_cur_state
590 && mystate != TAP_RESET)
593 /* Hand off to SVF? */
594 if (svf_tap_state_is_stable(mystate))
596 result = svf_add_statemove(mystate);
597 if (result != ERROR_OK)
603 * A sequence of XSTATE transitions, each TAP
604 * state adjacent to the previous one. Start
607 collecting_path = true;
615 if (read(xsvf_fd, &uc, 1) < 0)
621 /* see page 22 of XSVF spec */
625 xendir = TAP_IRPAUSE;
628 LOG_ERROR("illegial XENDIR argument: 0x%02X", uc);
633 LOG_DEBUG("XENDIR 0x%02X %s", uc, tap_state_name(xendir));
638 if (read(xsvf_fd, &uc, 1) < 0)
644 /* see page 22 of XSVF spec */
648 xenddr = TAP_DRPAUSE;
651 LOG_ERROR("illegial XENDDR argument: 0x%02X", uc);
656 LOG_DEBUG("XENDDR %02X %s", uc, tap_state_name(xenddr));
662 uint8_t short_buf[2];
665 tap_state_t my_end_state = xruntest ? TAP_IDLE : xendir;
669 /* one byte bitcount */
670 if (read(xsvf_fd, short_buf, 1) < 0)
675 bitcount = short_buf[0];
676 LOG_DEBUG("XSIR %d", bitcount);
680 if (read(xsvf_fd, short_buf, 2) < 0)
685 bitcount = be_to_h_u16(short_buf);
686 LOG_DEBUG("XSIR2 %d", bitcount);
689 ir_buf = malloc((bitcount + 7) / 8);
691 if (xsvf_read_buffer(bitcount, xsvf_fd, ir_buf) != ERROR_OK)
695 struct scan_field field;
698 field.num_bits = bitcount;
699 field.out_value = ir_buf;
701 field.in_value = NULL;
707 jtag_add_plain_ir_scan(1, &field, my_end_state);
709 jtag_add_ir_scan(1, &field, my_end_state);
713 if (runtest_requires_tck)
714 jtag_add_clocks(xruntest);
716 jtag_add_sleep(xruntest);
719 /* Note that an -irmask of non-zero in your config file
720 * can cause this to fail. Setting -irmask to zero cand work
721 * around the problem.
724 /* LOG_DEBUG("FLUSHING QUEUE"); */
725 result = jtag_execute_queue();
726 if (result != ERROR_OK)
737 unsigned int ndx = 0;
742 if (read(xsvf_fd, &uc, 1) < 0)
748 if (ndx < sizeof(comment)-1)
753 comment[sizeof(comment)-1] = 0; /* regardless, terminate */
755 LOG_USER("# %s", comment);
761 /* expected in stream:
762 XWAIT <uint8_t wait_state> <uint8_t end_state> <uint32_t usecs>
767 uint8_t delay_buf[4];
769 tap_state_t wait_state;
770 tap_state_t end_state;
773 if (read(xsvf_fd, &wait, 1) < 0
774 || read(xsvf_fd, &end, 1) < 0
775 || read(xsvf_fd, delay_buf, 4) < 0)
781 wait_state = xsvf_to_tap(wait);
782 end_state = xsvf_to_tap(end);
783 delay = be_to_h_u32(delay_buf);
785 LOG_DEBUG("XWAIT %s %s usecs:%d", tap_state_name(wait_state), tap_state_name(end_state), delay);
787 if (runtest_requires_tck && wait_state == TAP_IDLE)
789 jtag_add_runtest(delay, end_state);
793 /* FIXME handle statemove errors ... */
794 result = svf_add_statemove(wait_state);
795 jtag_add_sleep(delay);
796 result = svf_add_statemove(end_state);
803 /* expected in stream:
804 XWAITSTATE <uint8_t wait_state> <uint8_t end_state> <uint32_t clock_count> <uint32_t usecs>
807 uint8_t clock_buf[4];
808 uint8_t usecs_buf[4];
811 tap_state_t wait_state;
812 tap_state_t end_state;
816 if (read(xsvf_fd, &wait, 1) < 0
817 || read(xsvf_fd, &end, 1) < 0
818 || read(xsvf_fd, clock_buf, 4) < 0
819 || read(xsvf_fd, usecs_buf, 4) < 0)
825 wait_state = xsvf_to_tap(wait);
826 end_state = xsvf_to_tap(end);
828 clock_count = be_to_h_u32(clock_buf);
829 usecs = be_to_h_u32(usecs_buf);
831 LOG_DEBUG("XWAITSTATE %s %s clocks:%i usecs:%i",
832 tap_state_name(wait_state),
833 tap_state_name(end_state),
836 /* the following states are 'stable', meaning that they have a transition
837 * in the state diagram back to themselves. This is necessary because we will
838 * be issuing a number of clocks in this state. This set of allowed states is also
839 * determined by the SVF RUNTEST command's allowed states.
841 if (!svf_tap_state_is_stable(wait_state))
843 LOG_ERROR("illegal XWAITSTATE wait_state: \"%s\"",
844 tap_state_name(wait_state));
846 /* REVISIT "break" so we won't run? */
849 /* FIXME handle statemove errors ... */
850 result = svf_add_statemove(wait_state);
852 jtag_add_clocks(clock_count);
854 jtag_add_sleep(usecs);
856 result = svf_add_statemove(end_state);
862 /* expected in stream:
863 LCOUNT <uint32_t loop_count>
865 uint8_t count_buf[4];
867 if (read(xsvf_fd, count_buf, 4) < 0)
873 loop_count = be_to_h_u32(count_buf);
874 LOG_DEBUG("LCOUNT %d", loop_count);
880 /* expected in stream:
881 LDELAY <uint8_t wait_state> <uint32_t clock_count> <uint32_t usecs_to_sleep>
884 uint8_t clock_buf[4];
885 uint8_t usecs_buf[4];
887 if (read(xsvf_fd, &state, 1) < 0
888 || read(xsvf_fd, clock_buf, 4) < 0
889 || read(xsvf_fd, usecs_buf, 4) < 0)
895 /* NOTE: loop_state must be stable! */
896 loop_state = xsvf_to_tap(state);
897 loop_clocks = be_to_h_u32(clock_buf);
898 loop_usecs = be_to_h_u32(usecs_buf);
900 LOG_DEBUG("LDELAY %s clocks:%d usecs:%d", tap_state_name(loop_state), loop_clocks, loop_usecs);
904 /* LSDR is more like XSDRTDO than it is like XSDR. It uses LDELAY which
905 * comes with clocks !AND! sleep requirements.
909 int limit = loop_count;
915 if (xsvf_read_buffer(xsdrsize, xsvf_fd, dr_out_buf) != ERROR_OK
916 || xsvf_read_buffer(xsdrsize, xsvf_fd, dr_in_buf) != ERROR_OK)
925 for (attempt = 0; attempt < limit; ++attempt)
927 struct scan_field field;
929 result = svf_add_statemove(loop_state);
930 jtag_add_clocks(loop_clocks);
931 jtag_add_sleep(loop_usecs);
934 field.num_bits = xsdrsize;
935 field.out_value = dr_out_buf;
936 field.in_value = calloc(DIV_ROUND_UP(field.num_bits, 8), 1);
938 if (attempt > 0 && verbose)
939 LOG_USER("LSDR retry %d", attempt);
942 jtag_add_plain_dr_scan(1, &field, jtag_set_end_state(TAP_DRPAUSE));
944 jtag_add_dr_scan(1, &field, jtag_set_end_state(TAP_DRPAUSE));
946 jtag_check_value_mask(&field, dr_in_buf, dr_in_mask);
948 free(field.in_value);
951 /* LOG_DEBUG("FLUSHING QUEUE"); */
952 result = jtag_execute_queue();
953 if (result == ERROR_OK)
962 LOG_USER("LSDR mismatch");
973 if (read(xsvf_fd, &trst_mode, 1) < 0)
982 jtag_add_reset(1, 0);
986 jtag_add_reset(0, 0);
991 LOG_ERROR("XTRST mode argument (0x%02X) out of range", trst_mode);
998 LOG_ERROR("unknown xsvf command (0x%02X)\n", uc);
1002 if (do_abort || unsupported || tdo_mismatch)
1004 LOG_DEBUG("xsvf failed, setting taps to reasonable state");
1006 /* upon error, return the TAPs to a reasonable state */
1007 result = svf_add_statemove(TAP_IDLE);
1008 result = jtag_execute_queue();
1015 command_print(CMD_CTX, "TDO mismatch, somewhere near offset %lu in xsvf file, aborting",
1024 off_t offset = lseek(xsvf_fd, 0, SEEK_CUR) - 1;
1025 command_print(CMD_CTX,
1026 "unsupported xsvf command (0x%02X) at offset %jd, aborting",
1027 uc, (intmax_t)offset);
1033 command_print(CMD_CTX, "premature end of xsvf file detected, aborting");
1048 command_print(CMD_CTX, "XSVF file programmed successfully");
1053 static const struct command_registration xsvf_command_handlers[] = {
1056 .handler = &handle_xsvf_command,
1057 .mode = COMMAND_EXEC,
1058 .help = "Runs a XSVF file. If 'virt2' is given, xruntest "
1059 "counts are interpreted as TCK cycles rather than "
1060 "as microseconds. Without the 'quiet' option, all "
1061 "comments, retries, and mismatches will be reported.",
1062 .usage = "<file> [virt2] [quiet]",
1064 COMMAND_REGISTRATION_DONE
1067 int xsvf_register_commands(struct command_context *cmd_ctx)
1069 return register_commands(cmd_ctx, NULL, xsvf_command_handlers);
1072 #if 0 /* this comment style used to try and keep uncrustify from adding * at begin of line */
1074 PSUEDO-Code from Xilinx Appnote XAPP067.pdf:
1076 the following pseudo code clarifies the intent of the xrepeat support. The
1077 flow given is for the entire processing of an SVF file, not an XSVF file.
1078 No idea if this is just for the XC9500/XL/XV devices or all Xilinx parts.
1080 "Pseudo-Code Algorithm for SVF-Based ISP"
1082 1. Go to Test-Logic-Reset state
1083 2. Go to Run-Test Idle state
1086 4. if SIR record then
1087 go to Shift-IR state
1090 5. else if SDR record then
1091 set <repeat count> to 0
1092 store <TDI value> as <current TDI value>
1093 store <TDO value> as <current TDO value>
1094 6. go to Shift-DR state
1095 scan in <current TDI value>
1096 if <current TDO value> is specified then
1097 if <current TDO value> does not equal <actual TDO value> then
1098 if <repeat count> > 32 then
1100 go to Run-Test Idle state
1109 increment <repeat count> by 1
1110 pause <current pause time> microseconds
1114 go to Run-Test Idle state
1117 else if RUNTEST record then
1118 pause tester for <TCK value> microseconds
1119 store <TCK value> as <current pause time>