1 /* Remote debugging interface for MIPS remote debugging protocol.
2 Copyright 1993, 1994, 1995 Free Software Foundation, Inc.
3 Contributed by Cygnus Support. Written by Ian Lance Taylor
6 This file is part of GDB.
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 2 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program; if not, write to the Free Software
20 Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. */
31 #include "remote-utils.h"
34 #ifdef ANSI_PROTOTYPES
40 extern char *mips_read_processor_type PARAMS ((void));
42 extern void mips_set_processor_type_command PARAMS ((char *, int));
45 /* Prototypes for local functions. */
47 static int mips_readchar PARAMS ((int timeout));
49 static int mips_receive_header PARAMS ((unsigned char *hdr, int *pgarbage,
50 int ch, int timeout));
52 static int mips_receive_trailer PARAMS ((unsigned char *trlr, int *pgarbage,
53 int *pch, int timeout));
55 static int mips_cksum PARAMS ((const unsigned char *hdr,
56 const unsigned char *data,
59 static void mips_send_packet PARAMS ((const char *s, int get_ack));
61 static int mips_receive_packet PARAMS ((char *buff, int throw_error,
64 static int mips_request PARAMS ((int cmd, unsigned int addr,
65 unsigned int data, int *perr, int timeout,
68 static void mips_initialize PARAMS ((void));
70 static void mips_open PARAMS ((char *name, int from_tty));
72 static void mips_close PARAMS ((int quitting));
74 static void mips_detach PARAMS ((char *args, int from_tty));
76 static void mips_resume PARAMS ((int pid, int step,
77 enum target_signal siggnal));
79 static int mips_wait PARAMS ((int pid, struct target_waitstatus *status));
81 static int mips_map_regno PARAMS ((int regno));
83 static void mips_fetch_registers PARAMS ((int regno));
85 static void mips_prepare_to_store PARAMS ((void));
87 static void mips_store_registers PARAMS ((int regno));
89 static int mips_fetch_word PARAMS ((CORE_ADDR addr));
91 static int mips_store_word PARAMS ((CORE_ADDR addr, int value,
94 static int mips_xfer_memory PARAMS ((CORE_ADDR memaddr, char *myaddr, int len,
95 int write, struct target_ops *ignore));
97 static void mips_files_info PARAMS ((struct target_ops *ignore));
99 static void mips_create_inferior PARAMS ((char *execfile, char *args,
102 static void mips_mourn_inferior PARAMS ((void));
104 static void mips_load PARAMS ((char *file, int from_tty));
106 static int mips_make_srec PARAMS ((char *buffer, int type, CORE_ADDR memaddr,
107 unsigned char *myaddr, int len));
109 static int common_breakpoint PARAMS ((int cmd, CORE_ADDR addr, CORE_ADDR mask,
111 /* A forward declaration. */
112 extern struct target_ops mips_ops;
114 /* The MIPS remote debugging interface is built on top of a simple
115 packet protocol. Each packet is organized as follows:
117 SYN The first character is always a SYN (ASCII 026, or ^V). SYN
118 may not appear anywhere else in the packet. Any time a SYN is
119 seen, a new packet should be assumed to have begun.
122 This byte contains the upper five bits of the logical length
123 of the data section, plus a single bit indicating whether this
124 is a data packet or an acknowledgement. The documentation
125 indicates that this bit is 1 for a data packet, but the actual
126 board uses 1 for an acknowledgement. The value of the byte is
127 0x40 + (ack ? 0x20 : 0) + (len >> 6)
128 (we always have 0 <= len < 1024). Acknowledgement packets do
129 not carry data, and must have a data length of 0.
131 LEN1 This byte contains the lower six bits of the logical length of
132 the data section. The value is
135 SEQ This byte contains the six bit sequence number of the packet.
138 An acknowlegment packet contains the sequence number of the
139 packet being acknowledged plus 1 modulo 64. Data packets are
140 transmitted in sequence. There may only be one outstanding
141 unacknowledged data packet at a time. The sequence numbers
142 are independent in each direction. If an acknowledgement for
143 the previous packet is received (i.e., an acknowledgement with
144 the sequence number of the packet just sent) the packet just
145 sent should be retransmitted. If no acknowledgement is
146 received within a timeout period, the packet should be
147 retransmitted. This has an unfortunate failure condition on a
148 high-latency line, as a delayed acknowledgement may lead to an
149 endless series of duplicate packets.
151 DATA The actual data bytes follow. The following characters are
152 escaped inline with DLE (ASCII 020, or ^P):
158 The additional DLE characters are not counted in the logical
159 length stored in the TYPE_LEN and LEN1 bytes.
164 These bytes contain an 18 bit checksum of the complete
165 contents of the packet excluding the SEQ byte and the
166 CSUM[123] bytes. The checksum is simply the twos complement
167 addition of all the bytes treated as unsigned characters. The
168 values of the checksum bytes are:
169 CSUM1: 0x40 + ((cksum >> 12) & 0x3f)
170 CSUM2: 0x40 + ((cksum >> 6) & 0x3f)
171 CSUM3: 0x40 + (cksum & 0x3f)
173 It happens that the MIPS remote debugging protocol always
174 communicates with ASCII strings. Because of this, this
175 implementation doesn't bother to handle the DLE quoting mechanism,
176 since it will never be required. */
178 /* The SYN character which starts each packet. */
181 /* The 0x40 used to offset each packet (this value ensures that all of
182 the header and trailer bytes, other than SYN, are printable ASCII
184 #define HDR_OFFSET 0x40
186 /* The indices of the bytes in the packet header. */
187 #define HDR_INDX_SYN 0
188 #define HDR_INDX_TYPE_LEN 1
189 #define HDR_INDX_LEN1 2
190 #define HDR_INDX_SEQ 3
193 /* The data/ack bit in the TYPE_LEN header byte. */
194 #define TYPE_LEN_DA_BIT 0x20
195 #define TYPE_LEN_DATA 0
196 #define TYPE_LEN_ACK TYPE_LEN_DA_BIT
198 /* How to compute the header bytes. */
199 #define HDR_SET_SYN(data, len, seq) (SYN)
200 #define HDR_SET_TYPE_LEN(data, len, seq) \
202 + ((data) ? TYPE_LEN_DATA : TYPE_LEN_ACK) \
203 + (((len) >> 6) & 0x1f))
204 #define HDR_SET_LEN1(data, len, seq) (HDR_OFFSET + ((len) & 0x3f))
205 #define HDR_SET_SEQ(data, len, seq) (HDR_OFFSET + (seq))
207 /* Check that a header byte is reasonable. */
208 #define HDR_CHECK(ch) (((ch) & HDR_OFFSET) == HDR_OFFSET)
210 /* Get data from the header. These macros evaluate their argument
212 #define HDR_IS_DATA(hdr) \
213 (((hdr)[HDR_INDX_TYPE_LEN] & TYPE_LEN_DA_BIT) == TYPE_LEN_DATA)
214 #define HDR_GET_LEN(hdr) \
215 ((((hdr)[HDR_INDX_TYPE_LEN] & 0x1f) << 6) + (((hdr)[HDR_INDX_LEN1] & 0x3f)))
216 #define HDR_GET_SEQ(hdr) ((hdr)[HDR_INDX_SEQ] & 0x3f)
218 /* The maximum data length. */
219 #define DATA_MAXLEN 1023
221 /* The trailer offset. */
222 #define TRLR_OFFSET HDR_OFFSET
224 /* The indices of the bytes in the packet trailer. */
225 #define TRLR_INDX_CSUM1 0
226 #define TRLR_INDX_CSUM2 1
227 #define TRLR_INDX_CSUM3 2
228 #define TRLR_LENGTH 3
230 /* How to compute the trailer bytes. */
231 #define TRLR_SET_CSUM1(cksum) (TRLR_OFFSET + (((cksum) >> 12) & 0x3f))
232 #define TRLR_SET_CSUM2(cksum) (TRLR_OFFSET + (((cksum) >> 6) & 0x3f))
233 #define TRLR_SET_CSUM3(cksum) (TRLR_OFFSET + (((cksum) ) & 0x3f))
235 /* Check that a trailer byte is reasonable. */
236 #define TRLR_CHECK(ch) (((ch) & TRLR_OFFSET) == TRLR_OFFSET)
238 /* Get data from the trailer. This evaluates its argument multiple
240 #define TRLR_GET_CKSUM(trlr) \
241 ((((trlr)[TRLR_INDX_CSUM1] & 0x3f) << 12) \
242 + (((trlr)[TRLR_INDX_CSUM2] & 0x3f) << 6) \
243 + ((trlr)[TRLR_INDX_CSUM3] & 0x3f))
245 /* The sequence number modulos. */
246 #define SEQ_MODULOS (64)
248 /* Set to 1 if the target is open. */
249 static int mips_is_open;
251 /* Set to 1 while the connection is being initialized. */
252 static int mips_initializing;
254 /* The next sequence number to send. */
255 static int mips_send_seq;
257 /* The next sequence number we expect to receive. */
258 static int mips_receive_seq;
260 /* The time to wait before retransmitting a packet, in seconds. */
261 static int mips_retransmit_wait = 3;
263 /* The number of times to try retransmitting a packet before giving up. */
264 static int mips_send_retries = 10;
266 /* The number of garbage characters to accept when looking for an
267 SYN for the next packet. */
268 static int mips_syn_garbage = 1050;
270 /* The time to wait for a packet, in seconds. */
271 static int mips_receive_wait = 5;
273 /* Set if we have sent a packet to the board but have not yet received
275 static int mips_need_reply = 0;
277 /* Handle used to access serial I/O stream. */
278 static serial_t mips_desc;
280 /* Counts the number of times the user tried to interrupt the target (usually
282 static int interrupt_count;
284 /* If non-zero, means that the target is running. */
285 static int mips_wait_flag = 0;
287 /* If non-zero, monitor supports breakpoint commands. */
288 static monitor_supports_breakpoints = 0;
290 /* Data cache header. */
292 static DCACHE *mips_dcache;
294 /* Non-zero means that we've just hit a read or write watchpoint */
295 static int hit_watchpoint;
297 /* Handle low-level error that we can't recover from. Note that just
298 error()ing out from target_wait or some such low-level place will cause
299 all hell to break loose--the rest of GDB will tend to get left in an
300 inconsistent state. */
303 #ifdef ANSI_PROTOTYPES
304 mips_error (char *string, ...)
306 mips_error (va_alist)
312 #ifdef ANSI_PROTOTYPES
313 va_start (args, string);
317 string = va_arg (args, char *);
320 target_terminal_ours ();
321 wrap_here(""); /* Force out any buffered output */
322 gdb_flush (gdb_stdout);
324 fprintf_filtered (gdb_stderr, error_pre_print);
325 vfprintf_filtered (gdb_stderr, string, args);
326 fprintf_filtered (gdb_stderr, "\n");
328 gdb_flush (gdb_stderr);
330 /* Clean up in such a way that mips_close won't try to talk to the
331 board (it almost surely won't work since we weren't able to talk to
334 SERIAL_CLOSE (mips_desc);
336 printf_unfiltered ("Ending remote MIPS debugging.\n");
337 target_mourn_inferior ();
339 return_to_top_level (RETURN_ERROR);
342 /* Wait until STRING shows up in mips_desc. Returns 1 if successful, else 0 if
356 /* Must use SERIAL_READCHAR here cuz mips_readchar would get confused if we
357 were waiting for the TARGET_MONITOR_PROMPT... */
359 c = SERIAL_READCHAR (mips_desc, 2);
361 if (c == SERIAL_TIMEOUT)
382 /* Read a character from the remote, aborting on error. Returns
383 SERIAL_TIMEOUT on timeout (since that's what SERIAL_READCHAR
384 returns). FIXME: If we see the string TARGET_MONITOR_PROMPT from
385 the board, then we are debugging on the main console port, and we
386 have somehow dropped out of remote debugging mode. In this case,
387 we automatically go back in to remote debugging mode. This is a
388 hack, put in because I can't find any way for a program running on
389 the remote board to terminate without also ending remote debugging
390 mode. I assume users won't have any trouble with this; for one
391 thing, the IDT documentation generally assumes that the remote
392 debugging port is not the console port. This is, however, very
393 convenient for DejaGnu when you only have one connected serial
397 mips_readchar (timeout)
401 static int state = 0;
402 static char nextstate[] = TARGET_MONITOR_PROMPT;
403 #ifdef MAINTENANCE_CMDS
407 if (i == -1 && watchdog > 0)
411 if (state == (sizeof(nextstate) / sizeof(char)))
413 ch = SERIAL_READCHAR (mips_desc, timeout);
414 #ifdef MAINTENANCE_CMDS
415 if (ch == SERIAL_TIMEOUT && timeout == -1) /* Watchdog went off */
417 target_mourn_inferior ();
418 error ("Watchdog has expired. Target detached.\n");
421 if (ch == SERIAL_EOF)
422 mips_error ("End of file from remote");
423 if (ch == SERIAL_ERROR)
424 mips_error ("Error reading from remote: %s", safe_strerror (errno));
425 if (remote_debug > 1)
427 /* Don't use _filtered; we can't deal with a QUIT out of
428 target_wait, and I think this might be called from there. */
429 if (ch != SERIAL_TIMEOUT)
430 printf_unfiltered ("Read '%c' %d 0x%x\n", ch, ch, ch);
432 printf_unfiltered ("Timed out in read\n");
435 /* If we have seen TARGET_MONITOR_PROMPT and we either time out, or
436 we see a @ (which was echoed from a packet we sent), reset the
437 board as described above. The first character in a packet after
438 the SYN (which is not echoed) is always an @ unless the packet is
439 more than 64 characters long, which ours never are. */
440 if ((ch == SERIAL_TIMEOUT || ch == '@')
441 && state == (sizeof(nextstate) / sizeof(char))
442 && ! mips_initializing)
444 if (remote_debug > 0)
445 /* Don't use _filtered; we can't deal with a QUIT out of
446 target_wait, and I think this might be called from there. */
447 printf_unfiltered ("Reinitializing MIPS debugging mode\n");
454 /* At this point, about the only thing we can do is abort the command
455 in progress and get back to command level as quickly as possible. */
457 error ("Remote board reset, debug protocol re-initialized.");
460 if (ch == nextstate[state])
468 /* Get a packet header, putting the data in the supplied buffer.
469 PGARBAGE is a pointer to the number of garbage characters received
470 so far. CH is the last character received. Returns 0 for success,
471 or -1 for timeout. */
474 mips_receive_header (hdr, pgarbage, ch, timeout)
484 /* Wait for a SYN. mips_syn_garbage is intended to prevent
485 sitting here indefinitely if the board sends us one garbage
486 character per second. ch may already have a value from the
487 last time through the loop. */
490 ch = mips_readchar (timeout);
491 if (ch == SERIAL_TIMEOUT)
495 /* Printing the character here lets the user of gdb see
496 what the program is outputting, if the debugging is
497 being done on the console port. Don't use _filtered;
498 we can't deal with a QUIT out of target_wait. */
499 if (! mips_initializing || remote_debug > 0)
501 if (ch < 0x20 && ch != '\n')
503 putchar_unfiltered ('^');
504 putchar_unfiltered (ch + 0x40);
507 putchar_unfiltered (ch);
508 gdb_flush (gdb_stdout);
512 if (mips_syn_garbage > 0
513 && *pgarbage > mips_syn_garbage)
514 mips_error ("Debug protocol failure: more than %d characters before a sync.",
519 /* Get the packet header following the SYN. */
520 for (i = 1; i < HDR_LENGTH; i++)
522 ch = mips_readchar (timeout);
523 if (ch == SERIAL_TIMEOUT)
526 /* Make sure this is a header byte. */
527 if (ch == SYN || ! HDR_CHECK (ch))
533 /* If we got the complete header, we can return. Otherwise we
534 loop around and keep looking for SYN. */
540 /* Get a packet header, putting the data in the supplied buffer.
541 PGARBAGE is a pointer to the number of garbage characters received
542 so far. The last character read is returned in *PCH. Returns 0
543 for success, -1 for timeout, -2 for error. */
546 mips_receive_trailer (trlr, pgarbage, pch, timeout)
555 for (i = 0; i < TRLR_LENGTH; i++)
557 ch = mips_readchar (timeout);
559 if (ch == SERIAL_TIMEOUT)
561 if (! TRLR_CHECK (ch))
568 /* Get the checksum of a packet. HDR points to the packet header.
569 DATA points to the packet data. LEN is the length of DATA. */
572 mips_cksum (hdr, data, len)
573 const unsigned char *hdr;
574 const unsigned char *data;
577 register const unsigned char *p;
583 /* The initial SYN is not included in the checksum. */
597 /* Send a packet containing the given ASCII string. */
600 mips_send_packet (s, get_ack)
605 unsigned char *packet;
610 if (len > DATA_MAXLEN)
611 mips_error ("MIPS protocol data packet too long: %s", s);
613 packet = (unsigned char *) alloca (HDR_LENGTH + len + TRLR_LENGTH + 1);
615 packet[HDR_INDX_SYN] = HDR_SET_SYN (1, len, mips_send_seq);
616 packet[HDR_INDX_TYPE_LEN] = HDR_SET_TYPE_LEN (1, len, mips_send_seq);
617 packet[HDR_INDX_LEN1] = HDR_SET_LEN1 (1, len, mips_send_seq);
618 packet[HDR_INDX_SEQ] = HDR_SET_SEQ (1, len, mips_send_seq);
620 memcpy (packet + HDR_LENGTH, s, len);
622 cksum = mips_cksum (packet, packet + HDR_LENGTH, len);
623 packet[HDR_LENGTH + len + TRLR_INDX_CSUM1] = TRLR_SET_CSUM1 (cksum);
624 packet[HDR_LENGTH + len + TRLR_INDX_CSUM2] = TRLR_SET_CSUM2 (cksum);
625 packet[HDR_LENGTH + len + TRLR_INDX_CSUM3] = TRLR_SET_CSUM3 (cksum);
627 /* Increment the sequence number. This will set mips_send_seq to
628 the sequence number we expect in the acknowledgement. */
629 mips_send_seq = (mips_send_seq + 1) % SEQ_MODULOS;
631 /* We can only have one outstanding data packet, so we just wait for
632 the acknowledgement here. Keep retransmitting the packet until
633 we get one, or until we've tried too many times. */
634 for (try = 0; try < mips_send_retries; try++)
639 if (remote_debug > 0)
641 /* Don't use _filtered; we can't deal with a QUIT out of
642 target_wait, and I think this might be called from there. */
643 packet[HDR_LENGTH + len + TRLR_LENGTH] = '\0';
644 printf_unfiltered ("Writing \"%s\"\n", packet + 1);
647 if (SERIAL_WRITE (mips_desc, packet,
648 HDR_LENGTH + len + TRLR_LENGTH) != 0)
649 mips_error ("write to target failed: %s", safe_strerror (errno));
658 unsigned char hdr[HDR_LENGTH + 1];
659 unsigned char trlr[TRLR_LENGTH + 1];
663 /* Get the packet header. If we time out, resend the data
665 err = mips_receive_header (hdr, &garbage, ch, mips_retransmit_wait);
671 /* If we get a data packet, assume it is a duplicate and
672 ignore it. FIXME: If the acknowledgement is lost, this
673 data packet may be the packet the remote sends after the
675 if (HDR_IS_DATA (hdr))
678 /* If the length is not 0, this is a garbled packet. */
679 if (HDR_GET_LEN (hdr) != 0)
682 /* Get the packet trailer. */
683 err = mips_receive_trailer (trlr, &garbage, &ch,
684 mips_retransmit_wait);
686 /* If we timed out, resend the data packet. */
690 /* If we got a bad character, reread the header. */
694 /* If the checksum does not match the trailer checksum, this
695 is a bad packet; ignore it. */
696 if (mips_cksum (hdr, (unsigned char *) NULL, 0)
697 != TRLR_GET_CKSUM (trlr))
700 if (remote_debug > 0)
702 hdr[HDR_LENGTH] = '\0';
703 trlr[TRLR_LENGTH] = '\0';
704 /* Don't use _filtered; we can't deal with a QUIT out of
705 target_wait, and I think this might be called from there. */
706 printf_unfiltered ("Got ack %d \"%s%s\"\n",
707 HDR_GET_SEQ (hdr), hdr + 1, trlr);
710 /* If this ack is for the current packet, we're done. */
711 seq = HDR_GET_SEQ (hdr);
712 if (seq == mips_send_seq)
715 /* If this ack is for the last packet, resend the current
717 if ((seq + 1) % SEQ_MODULOS == mips_send_seq)
720 /* Otherwise this is a bad ack; ignore it. Increment the
721 garbage count to ensure that we do not stay in this loop
727 mips_error ("Remote did not acknowledge packet");
730 /* Receive and acknowledge a packet, returning the data in BUFF (which
731 should be DATA_MAXLEN + 1 bytes). The protocol documentation
732 implies that only the sender retransmits packets, so this code just
733 waits silently for a packet. It returns the length of the received
734 packet. If THROW_ERROR is nonzero, call error() on errors. If not,
735 don't print an error message and return -1. */
738 mips_receive_packet (buff, throw_error, timeout)
746 unsigned char ack[HDR_LENGTH + TRLR_LENGTH + 1];
753 unsigned char hdr[HDR_LENGTH];
754 unsigned char trlr[TRLR_LENGTH];
758 if (mips_receive_header (hdr, &garbage, ch, timeout) != 0)
761 mips_error ("Timed out waiting for remote packet");
768 /* An acknowledgement is probably a duplicate; ignore it. */
769 if (! HDR_IS_DATA (hdr))
771 /* Don't use _filtered; we can't deal with a QUIT out of
772 target_wait, and I think this might be called from there. */
773 if (remote_debug > 0)
774 printf_unfiltered ("Ignoring unexpected ACK\n");
778 /* If this is the wrong sequence number, ignore it. */
779 if (HDR_GET_SEQ (hdr) != mips_receive_seq)
781 /* Don't use _filtered; we can't deal with a QUIT out of
782 target_wait, and I think this might be called from there. */
783 if (remote_debug > 0)
784 printf_unfiltered ("Ignoring sequence number %d (want %d)\n",
785 HDR_GET_SEQ (hdr), mips_receive_seq);
789 len = HDR_GET_LEN (hdr);
791 for (i = 0; i < len; i++)
795 rch = mips_readchar (timeout);
801 if (rch == SERIAL_TIMEOUT)
804 mips_error ("Timed out waiting for remote packet");
813 /* Don't use _filtered; we can't deal with a QUIT out of
814 target_wait, and I think this might be called from there. */
815 if (remote_debug > 0)
816 printf_unfiltered ("Got new SYN after %d chars (wanted %d)\n",
821 err = mips_receive_trailer (trlr, &garbage, &ch, timeout);
825 mips_error ("Timed out waiting for packet");
831 /* Don't use _filtered; we can't deal with a QUIT out of
832 target_wait, and I think this might be called from there. */
833 if (remote_debug > 0)
834 printf_unfiltered ("Got SYN when wanted trailer\n");
838 if (mips_cksum (hdr, buff, len) == TRLR_GET_CKSUM (trlr))
841 if (remote_debug > 0)
842 /* Don't use _filtered; we can't deal with a QUIT out of
843 target_wait, and I think this might be called from there. */
844 printf_unfiltered ("Bad checksum; data %d, trailer %d\n",
845 mips_cksum (hdr, buff, len),
846 TRLR_GET_CKSUM (trlr));
848 /* The checksum failed. Send an acknowledgement for the
849 previous packet to tell the remote to resend the packet. */
850 ack[HDR_INDX_SYN] = HDR_SET_SYN (0, 0, mips_receive_seq);
851 ack[HDR_INDX_TYPE_LEN] = HDR_SET_TYPE_LEN (0, 0, mips_receive_seq);
852 ack[HDR_INDX_LEN1] = HDR_SET_LEN1 (0, 0, mips_receive_seq);
853 ack[HDR_INDX_SEQ] = HDR_SET_SEQ (0, 0, mips_receive_seq);
855 cksum = mips_cksum (ack, (unsigned char *) NULL, 0);
857 ack[HDR_LENGTH + TRLR_INDX_CSUM1] = TRLR_SET_CSUM1 (cksum);
858 ack[HDR_LENGTH + TRLR_INDX_CSUM2] = TRLR_SET_CSUM2 (cksum);
859 ack[HDR_LENGTH + TRLR_INDX_CSUM3] = TRLR_SET_CSUM3 (cksum);
861 if (remote_debug > 0)
863 ack[HDR_LENGTH + TRLR_LENGTH] = '\0';
864 /* Don't use _filtered; we can't deal with a QUIT out of
865 target_wait, and I think this might be called from there. */
866 printf_unfiltered ("Writing ack %d \"%s\"\n", mips_receive_seq,
870 if (SERIAL_WRITE (mips_desc, ack, HDR_LENGTH + TRLR_LENGTH) != 0)
873 mips_error ("write to target failed: %s", safe_strerror (errno));
879 if (remote_debug > 0)
882 /* Don't use _filtered; we can't deal with a QUIT out of
883 target_wait, and I think this might be called from there. */
884 printf_unfiltered ("Got packet \"%s\"\n", buff);
887 /* We got the packet. Send an acknowledgement. */
888 mips_receive_seq = (mips_receive_seq + 1) % SEQ_MODULOS;
890 ack[HDR_INDX_SYN] = HDR_SET_SYN (0, 0, mips_receive_seq);
891 ack[HDR_INDX_TYPE_LEN] = HDR_SET_TYPE_LEN (0, 0, mips_receive_seq);
892 ack[HDR_INDX_LEN1] = HDR_SET_LEN1 (0, 0, mips_receive_seq);
893 ack[HDR_INDX_SEQ] = HDR_SET_SEQ (0, 0, mips_receive_seq);
895 cksum = mips_cksum (ack, (unsigned char *) NULL, 0);
897 ack[HDR_LENGTH + TRLR_INDX_CSUM1] = TRLR_SET_CSUM1 (cksum);
898 ack[HDR_LENGTH + TRLR_INDX_CSUM2] = TRLR_SET_CSUM2 (cksum);
899 ack[HDR_LENGTH + TRLR_INDX_CSUM3] = TRLR_SET_CSUM3 (cksum);
901 if (remote_debug > 0)
903 ack[HDR_LENGTH + TRLR_LENGTH] = '\0';
904 /* Don't use _filtered; we can't deal with a QUIT out of
905 target_wait, and I think this might be called from there. */
906 printf_unfiltered ("Writing ack %d \"%s\"\n", mips_receive_seq,
910 if (SERIAL_WRITE (mips_desc, ack, HDR_LENGTH + TRLR_LENGTH) != 0)
913 mips_error ("write to target failed: %s", safe_strerror (errno));
921 /* Optionally send a request to the remote system and optionally wait
922 for the reply. This implements the remote debugging protocol,
923 which is built on top of the packet protocol defined above. Each
924 request has an ADDR argument and a DATA argument. The following
925 requests are defined:
927 \0 don't send a request; just wait for a reply
928 i read word from instruction space at ADDR
929 d read word from data space at ADDR
930 I write DATA to instruction space at ADDR
931 D write DATA to data space at ADDR
932 r read register number ADDR
933 R set register number ADDR to value DATA
934 c continue execution (if ADDR != 1, set pc to ADDR)
935 s single step (if ADDR != 1, set pc to ADDR)
937 The read requests return the value requested. The write requests
938 return the previous value in the changed location. The execution
939 requests return a UNIX wait value (the approximate signal which
940 caused execution to stop is in the upper eight bits).
942 If PERR is not NULL, this function waits for a reply. If an error
943 occurs, it sets *PERR to 1 and sets errno according to what the
944 target board reports. */
947 mips_request (cmd, addr, data, perr, timeout, buff)
955 char myBuff[DATA_MAXLEN + 1];
962 if (buff == (char *) NULL)
968 fatal ("mips_request: Trying to send command before reply");
969 sprintf (buff, "0x0 %c 0x%x 0x%x", cmd, addr, data);
970 mips_send_packet (buff, 1);
974 if (perr == (int *) NULL)
977 if (! mips_need_reply)
978 fatal ("mips_request: Trying to get reply before command");
982 len = mips_receive_packet (buff, 1, timeout);
985 if (sscanf (buff, "0x%x %c 0x%x 0x%x",
986 &rpid, &rcmd, &rerrflg, &rresponse) != 4
987 || (cmd != '\0' && rcmd != cmd))
988 mips_error ("Bad response from remote board");
994 /* FIXME: This will returns MIPS errno numbers, which may or may
995 not be the same as errno values used on other systems. If
996 they stick to common errno values, they will be the same, but
997 if they don't, they must be translated. */
1008 mips_initialize_cleanups (arg)
1011 mips_initializing = 0;
1014 /* Initialize a new connection to the MIPS board, and make sure we are
1015 really connected. */
1020 char buff[DATA_MAXLEN + 1];
1022 struct cleanup *old_cleanups = make_cleanup (mips_initialize_cleanups, NULL);
1025 /* What is this code doing here? I don't see any way it can happen, and
1026 it might mean mips_initializing didn't get cleared properly.
1027 So I'll make it a warning. */
1029 if (mips_initializing)
1031 warning ("internal error: mips_initialize called twice");
1036 mips_initializing = 1;
1039 mips_receive_seq = 0;
1041 /* At this point, the packit protocol isn't responding. We'll try getting
1042 into the monitor, and restarting the protocol. */
1044 /* Force the system into the IDT monitor. After this we *should* be at the
1047 for (j = 1; j <= 4; j++)
1051 case 1: /* First, try sending a break */
1052 SERIAL_SEND_BREAK (mips_desc);
1054 case 2: /* Then, try a ^C */
1055 SERIAL_WRITE (mips_desc, "\003", 1);
1057 case 3: /* Then, try escaping from download */
1062 /* We are possibly in binary download mode, having aborted in the
1063 middle of an S-record. ^C won't work because of binary mode.
1064 The only reliable way out is to send enough termination packets
1065 (8 bytes) to fill up and then overflow the largest size S-record
1066 (255 bytes in this case). This amounts to 256/8 + 1 packets.
1069 mips_make_srec (srec, '7', 0, NULL, 0);
1071 for (i = 1; i <= 33; i++)
1073 SERIAL_WRITE (mips_desc, srec, 8);
1075 if (SERIAL_READCHAR (mips_desc, 0) >= 0)
1076 break; /* Break immediatly if we get something from
1082 mips_error ("Failed to initialize.");
1085 if (mips_expect (TARGET_MONITOR_PROMPT))
1089 SERIAL_WRITE (mips_desc, "db tty0\015", sizeof "db tty0\015" - 1);
1090 mips_expect ("db tty0\015\012"); /* Eat the echo */
1092 SERIAL_WRITE (mips_desc, "\015", sizeof "\015" - 1);
1094 if (mips_receive_packet (buff, 1, 3) < 0)
1095 mips_error ("Failed to initialize (didn't receive packet).");
1097 if (common_breakpoint ('b', -1, 0, NULL)) /* Clear all breakpoints */
1098 monitor_supports_breakpoints = 0; /* Failed, don't use it anymore */
1100 monitor_supports_breakpoints = 1;
1102 do_cleanups (old_cleanups);
1104 /* If this doesn't call error, we have connected; we don't care if
1105 the request itself succeeds or fails. */
1107 mips_request ('r', (unsigned int) 0, (unsigned int) 0, &err,
1108 mips_receive_wait, NULL);
1109 set_current_frame (create_new_frame (read_fp (), read_pc ()));
1110 select_frame (get_current_frame (), 0);
1113 /* Open a connection to the remote board. */
1116 mips_open (name, from_tty)
1124 "To open a MIPS remote debugging connection, you need to specify what serial\n\
1125 device is attached to the target board (e.g., /dev/ttya).");
1127 target_preopen (from_tty);
1130 unpush_target (&mips_ops);
1132 mips_desc = SERIAL_OPEN (name);
1133 if (mips_desc == (serial_t) NULL)
1134 perror_with_name (name);
1136 if (baud_rate != -1)
1138 if (SERIAL_SETBAUDRATE (mips_desc, baud_rate))
1140 SERIAL_CLOSE (mips_desc);
1141 perror_with_name (name);
1145 SERIAL_RAW (mips_desc);
1152 printf_unfiltered ("Remote MIPS debugging using %s\n", name);
1154 /* Switch to using remote target now. */
1155 push_target (&mips_ops);
1157 /* FIXME: Should we call start_remote here? */
1159 /* Try to figure out the processor model if possible. */
1160 ptype = mips_read_processor_type ();
1162 mips_set_processor_type_command (strsave (ptype), 0);
1164 /* This is really the job of start_remote however, that makes an assumption
1165 that the target is about to print out a status message of some sort. That
1166 doesn't happen here (in fact, it may not be possible to get the monitor to
1167 send the appropriate packet). */
1169 flush_cached_frames ();
1170 registers_changed ();
1171 stop_pc = read_pc ();
1172 set_current_frame (create_new_frame (read_fp (), stop_pc));
1173 select_frame (get_current_frame (), 0);
1174 print_stack_frame (selected_frame, -1, 1);
1177 /* Close a connection to the remote board. */
1180 mips_close (quitting)
1189 /* Get the board out of remote debugging mode. */
1190 mips_request ('x', (unsigned int) 0, (unsigned int) 0, &err,
1191 mips_receive_wait, NULL);
1193 SERIAL_CLOSE (mips_desc);
1197 /* Detach from the remote board. */
1200 mips_detach (args, from_tty)
1205 error ("Argument given to \"detach\" when remotely debugging.");
1212 printf_unfiltered ("Ending remote MIPS debugging.\n");
1215 /* Tell the target board to resume. This does not wait for a reply
1219 mips_resume (pid, step, siggnal)
1221 enum target_signal siggnal;
1224 /* start-sanitize-gm */
1225 #ifndef GENERAL_MAGIC
1226 if (siggnal != TARGET_SIGNAL_0)
1228 ("Can't send signals to a remote system. Try `handle %s ignore'.",
1229 target_signal_to_name (siggnal));
1230 #endif /* GENERAL_MAGIC */
1231 /* end-sanitize-gm */
1233 mips_request (step ? 's' : 'c',
1235 (unsigned int) siggnal,
1237 mips_receive_wait, NULL);
1240 /* Return the signal corresponding to SIG, where SIG is the number which
1241 the MIPS protocol uses for the signal. */
1243 mips_signal_from_protocol (sig)
1246 /* We allow a few more signals than the IDT board actually returns, on
1247 the theory that there is at least *some* hope that perhaps the numbering
1248 for these signals is widely agreed upon. */
1251 return TARGET_SIGNAL_UNKNOWN;
1253 /* Don't want to use target_signal_from_host because we are converting
1254 from MIPS signal numbers, not host ones. Our internal numbers
1255 match the MIPS numbers for the signals the board can return, which
1256 are: SIGINT, SIGSEGV, SIGBUS, SIGILL, SIGFPE, SIGTRAP. */
1257 return (enum target_signal) sig;
1260 /* Wait until the remote stops, and return a wait status. */
1263 mips_wait (pid, status)
1265 struct target_waitstatus *status;
1269 char buff[DATA_MAXLEN];
1274 interrupt_count = 0;
1277 /* If we have not sent a single step or continue command, then the
1278 board is waiting for us to do something. Return a status
1279 indicating that it is stopped. */
1280 if (! mips_need_reply)
1282 status->kind = TARGET_WAITKIND_STOPPED;
1283 status->value.sig = TARGET_SIGNAL_TRAP;
1287 /* No timeout; we sit here as long as the program continues to execute. */
1289 rstatus = mips_request ('\000', (unsigned int) 0, (unsigned int) 0, &err, -1,
1293 mips_error ("Remote failure: %s", safe_strerror (errno));
1295 nfields = sscanf (buff, "0x%*x %*c 0x%*x 0x%*x 0x%x 0x%x 0x%x 0x%*x %s",
1296 &rpc, &rfp, &rsp, flags);
1298 /* See if we got back extended status. If so, pick out the pc, fp, sp, etc... */
1300 if (nfields == 7 || nfields == 9)
1302 char buf[MAX_REGISTER_RAW_SIZE];
1304 store_unsigned_integer (buf, REGISTER_RAW_SIZE (PC_REGNUM), rpc);
1305 supply_register (PC_REGNUM, buf);
1307 store_unsigned_integer (buf, REGISTER_RAW_SIZE (PC_REGNUM), rfp);
1308 supply_register (30, buf); /* This register they are avoiding and so it is unnamed */
1310 store_unsigned_integer (buf, REGISTER_RAW_SIZE (SP_REGNUM), rsp);
1311 supply_register (SP_REGNUM, buf);
1313 store_unsigned_integer (buf, REGISTER_RAW_SIZE (FP_REGNUM), 0);
1314 supply_register (FP_REGNUM, buf);
1320 for (i = 0; i <= 2; i++)
1321 if (flags[i] == 'r' || flags[i] == 'w')
1323 else if (flags[i] == '\000')
1328 /* Translate a MIPS waitstatus. We use constants here rather than WTERMSIG
1329 and so on, because the constants we want here are determined by the
1330 MIPS protocol and have nothing to do with what host we are running on. */
1331 if ((rstatus & 0377) == 0)
1333 status->kind = TARGET_WAITKIND_EXITED;
1334 status->value.integer = (((rstatus) >> 8) & 0377);
1336 else if ((rstatus & 0377) == 0177)
1338 status->kind = TARGET_WAITKIND_STOPPED;
1339 status->value.sig = mips_signal_from_protocol (((rstatus) >> 8) & 0377);
1343 status->kind = TARGET_WAITKIND_SIGNALLED;
1344 status->value.sig = mips_signal_from_protocol (rstatus & 0177);
1350 /* We have to map between the register numbers used by gdb and the
1351 register numbers used by the debugging protocol. This function
1352 assumes that we are using tm-mips.h. */
1354 #define REGNO_OFFSET 96
1357 mips_map_regno (regno)
1362 if (regno >= FP0_REGNUM && regno < FP0_REGNUM + 32)
1363 return regno - FP0_REGNUM + 32;
1367 return REGNO_OFFSET + 0;
1369 return REGNO_OFFSET + 1;
1371 return REGNO_OFFSET + 2;
1373 return REGNO_OFFSET + 3;
1375 return REGNO_OFFSET + 4;
1377 return REGNO_OFFSET + 5;
1379 /* FIXME: Is there a way to get the status register? */
1384 /* Fetch the remote registers. */
1387 mips_fetch_registers (regno)
1390 unsigned LONGEST val;
1395 for (regno = 0; regno < NUM_REGS; regno++)
1396 mips_fetch_registers (regno);
1400 if (regno == FP_REGNUM || regno == ZERO_REGNUM)
1401 /* FP_REGNUM on the mips is a hack which is just supposed to read
1402 zero (see also mips-nat.c). */
1406 val = mips_request ('r', (unsigned int) mips_map_regno (regno),
1407 (unsigned int) 0, &err, mips_receive_wait, NULL);
1409 mips_error ("Can't read register %d: %s", regno,
1410 safe_strerror (errno));
1414 char buf[MAX_REGISTER_RAW_SIZE];
1416 /* We got the number the register holds, but gdb expects to see a
1417 value in the target byte ordering. */
1418 store_unsigned_integer (buf, REGISTER_RAW_SIZE (regno), val);
1419 supply_register (regno, buf);
1423 /* Prepare to store registers. The MIPS protocol can store individual
1424 registers, so this function doesn't have to do anything. */
1427 mips_prepare_to_store ()
1431 /* Store remote register(s). */
1434 mips_store_registers (regno)
1441 for (regno = 0; regno < NUM_REGS; regno++)
1442 mips_store_registers (regno);
1446 mips_request ('R', (unsigned int) mips_map_regno (regno),
1447 (unsigned int) read_register (regno),
1448 &err, mips_receive_wait, NULL);
1450 mips_error ("Can't write register %d: %s", regno, safe_strerror (errno));
1453 /* Fetch a word from the target board. */
1456 mips_fetch_word (addr)
1462 val = mips_request ('d', (unsigned int) addr, (unsigned int) 0, &err,
1463 mips_receive_wait, NULL);
1466 /* Data space failed; try instruction space. */
1467 val = mips_request ('i', (unsigned int) addr, (unsigned int) 0, &err,
1468 mips_receive_wait, NULL);
1470 mips_error ("Can't read address 0x%x: %s", addr, safe_strerror (errno));
1475 /* Store a word to the target board. Returns errno code or zero for
1476 success. If OLD_CONTENTS is non-NULL, put the old contents of that
1477 memory location there. */
1480 mips_store_word (addr, val, old_contents)
1486 unsigned int oldcontents;
1488 oldcontents = mips_request ('D', (unsigned int) addr, (unsigned int) val,
1490 mips_receive_wait, NULL);
1493 /* Data space failed; try instruction space. */
1494 oldcontents = mips_request ('I', (unsigned int) addr,
1495 (unsigned int) val, &err,
1496 mips_receive_wait, NULL);
1500 if (old_contents != NULL)
1501 store_unsigned_integer (old_contents, 4, oldcontents);
1505 /* Read or write LEN bytes from inferior memory at MEMADDR,
1506 transferring to or from debugger address MYADDR. Write to inferior
1507 if SHOULD_WRITE is nonzero. Returns length of data written or
1508 read; 0 for error. Note that protocol gives us the correct value
1509 for a longword, since it transfers values in ASCII. We want the
1510 byte values, so we have to swap the longword values. */
1513 mips_xfer_memory (memaddr, myaddr, len, write, ignore)
1518 struct target_ops *ignore;
1521 /* Round starting address down to longword boundary. */
1522 register CORE_ADDR addr = memaddr &~ 3;
1523 /* Round ending address up; get number of longwords that makes. */
1524 register int count = (((memaddr + len) - addr) + 3) / 4;
1525 /* Allocate buffer of that many longwords. */
1526 register char *buffer = alloca (count * 4);
1532 /* Fill start and end extra bytes of buffer with existing data. */
1533 if (addr != memaddr || len < 4)
1535 /* Need part of initial word -- fetch it. */
1536 store_unsigned_integer (&buffer[0], 4, mips_fetch_word (addr));
1541 /* Need part of last word -- fetch it. FIXME: we do this even
1542 if we don't need it. */
1543 store_unsigned_integer (&buffer[(count - 1) * 4], 4,
1544 mips_fetch_word (addr + (count - 1) * 4));
1547 /* Copy data to be written over corresponding part of buffer */
1549 memcpy ((char *) buffer + (memaddr & 3), myaddr, len);
1551 /* Write the entire buffer. */
1553 for (i = 0; i < count; i++, addr += 4)
1555 status = mips_store_word (addr,
1556 extract_unsigned_integer (&buffer[i*4], 4),
1558 /* Report each kilobyte (we download 32-bit words at a time) */
1561 printf_unfiltered ("*");
1569 /* FIXME: Do we want a QUIT here? */
1572 printf_unfiltered ("\n");
1576 /* Read all the longwords */
1577 for (i = 0; i < count; i++, addr += 4)
1579 store_unsigned_integer (&buffer[i*4], 4, mips_fetch_word (addr));
1583 /* Copy appropriate bytes out of the buffer. */
1584 memcpy (myaddr, buffer + (memaddr & 3), len);
1589 /* Print info on this target. */
1592 mips_files_info (ignore)
1593 struct target_ops *ignore;
1595 printf_unfiltered ("Debugging a MIPS board over a serial line.\n");
1598 /* Kill the process running on the board. This will actually only
1599 work if we are doing remote debugging over the console input. I
1600 think that if IDT/sim had the remote debug interrupt enabled on the
1601 right port, we could interrupt the process with a break signal. */
1606 if (!mips_wait_flag)
1611 if (interrupt_count >= 2)
1613 interrupt_count = 0;
1615 target_terminal_ours ();
1617 if (query ("Interrupted while waiting for the program.\n\
1618 Give up (and stop debugging it)? "))
1620 /* Clean up in such a way that mips_close won't try to talk to the
1621 board (it almost surely won't work since we weren't able to talk to
1625 SERIAL_CLOSE (mips_desc);
1627 printf_unfiltered ("Ending remote MIPS debugging.\n");
1628 target_mourn_inferior ();
1630 return_to_top_level (RETURN_QUIT);
1633 target_terminal_inferior ();
1636 if (remote_debug > 0)
1637 printf_unfiltered ("Sending break\n");
1639 SERIAL_SEND_BREAK (mips_desc);
1648 SERIAL_WRITE (mips_desc, &cc, 1);
1650 target_mourn_inferior ();
1655 /* Start running on the target board. */
1658 mips_create_inferior (execfile, args, env)
1668 Can't pass arguments to remote MIPS board; arguments ignored.");
1669 /* And don't try to use them on the next "run" command. */
1670 execute_command ("set args", 0);
1673 if (execfile == 0 || exec_bfd == 0)
1674 error ("No executable file specified");
1676 entry_pt = (CORE_ADDR) bfd_get_start_address (exec_bfd);
1678 init_wait_for_inferior ();
1680 /* FIXME: Should we set inferior_pid here? */
1682 /* start-sanitize-gm */
1683 #ifdef GENERAL_MAGIC
1684 magic_create_inferior_hook ();
1685 proceed (entry_pt, TARGET_SIGNAL_PWR, 0);
1687 /* end-sanitize-gm */
1688 proceed (entry_pt, TARGET_SIGNAL_DEFAULT, 0);
1689 /* start-sanitize-gm */
1690 #endif /* GENERAL_MAGIC */
1691 /* end-sanitize-gm */
1694 /* Clean up after a process. Actually nothing to do. */
1697 mips_mourn_inferior ()
1699 unpush_target (&mips_ops);
1700 generic_mourn_inferior ();
1703 /* We can write a breakpoint and read the shadow contents in one
1706 /* The IDT board uses an unusual breakpoint value, and sometimes gets
1707 confused when it sees the usual MIPS breakpoint instruction. */
1709 #define BREAK_INSN (0x00000a0d)
1710 #define BREAK_INSN_SIZE (4)
1712 /* Insert a breakpoint on targets that don't have any better breakpoint
1713 support. We read the contents of the target location and stash it,
1714 then overwrite it with a breakpoint instruction. ADDR is the target
1715 location in the target machine. CONTENTS_CACHE is a pointer to
1716 memory allocated for saving the target contents. It is guaranteed
1717 by the caller to be long enough to save sizeof BREAKPOINT bytes (this
1718 is accomplished via BREAKPOINT_MAX). */
1721 mips_insert_breakpoint (addr, contents_cache)
1723 char *contents_cache;
1727 if (monitor_supports_breakpoints)
1728 return common_breakpoint ('B', addr, 0x3, "f");
1730 return mips_store_word (addr, BREAK_INSN, contents_cache);
1734 mips_remove_breakpoint (addr, contents_cache)
1736 char *contents_cache;
1738 if (monitor_supports_breakpoints)
1739 return common_breakpoint ('b', addr, 0, NULL);
1741 return target_write_memory (addr, contents_cache, BREAK_INSN_SIZE);
1744 /* Compute a don't care mask for the region bounding ADDR and ADDR + LEN - 1.
1745 This is used for memory ref breakpoints. */
1747 static unsigned long
1748 calculate_mask (addr, len)
1755 mask = addr ^ (addr + len - 1);
1757 for (i = 32; i >= 0; i--)
1763 mask = (unsigned long) 0xffffffff >> i;
1768 /* Set a data watchpoint. ADDR and LEN should be obvious. TYPE is either 1
1769 for a read watchpoint, or 2 for a read/write watchpoint. */
1772 remote_mips_set_watchpoint (addr, len, type)
1777 CORE_ADDR first_addr;
1781 mask = calculate_mask (addr, len);
1783 first_addr = addr & ~mask;
1793 case 2: /* read/write */
1800 if (common_breakpoint ('B', first_addr, mask, flags))
1807 remote_mips_remove_watchpoint (addr, len, type)
1812 CORE_ADDR first_addr;
1815 mask = calculate_mask (addr, len);
1817 first_addr = addr & ~mask;
1819 if (common_breakpoint ('b', first_addr, 0, NULL))
1826 remote_mips_stopped_by_watchpoint ()
1828 return hit_watchpoint;
1831 /* This routine generates the a breakpoint command of the form:
1833 0x0 <CMD> <ADDR> <MASK> <FLAGS>
1835 Where <CMD> is one of: `B' to set, or `b' to clear a breakpoint. <ADDR> is
1836 the address of the breakpoint. <MASK> is a don't care mask for addresses.
1837 <FLAGS> is any combination of `r', `w', or `f' for read/write/or fetch. */
1840 common_breakpoint (cmd, addr, mask, flags)
1847 char buf[DATA_MAXLEN + 1];
1849 int rpid, rerrflg, rresponse;
1853 sprintf (buf, "0x0 %c 0x%x 0x%x %s", cmd, addr, mask, flags);
1855 sprintf (buf, "0x0 %c 0x%x", cmd, addr);
1857 mips_send_packet (buf, 1);
1859 len = mips_receive_packet (buf, 1, mips_receive_wait);
1861 nfields = sscanf (buf, "0x%x %c 0x%x 0x%x", &rpid, &rcmd, &rerrflg, &rresponse);
1865 mips_error ("common_breakpoint: Bad response from remote board: %s", buf);
1869 if (rresponse != EINVAL)
1870 fprintf_unfiltered (stderr, "common_breakpoint (0x%x): Got error: 0x%x\n",
1879 send_srec (srec, len, addr)
1888 SERIAL_WRITE (mips_desc, srec, len);
1890 ch = mips_readchar (2);
1894 case SERIAL_TIMEOUT:
1895 error ("Timeout during download.");
1899 case 0x15: /* NACK */
1900 fprintf_unfiltered (gdb_stderr, "Download got a NACK at byte %d! Retrying.\n", addr);
1903 error ("Download got unexpected ack char: 0x%x, retrying.\n", ch);
1908 /* Download a binary file by converting it to S records. */
1911 mips_load_srec (args)
1916 char *buffer, srec[1024];
1918 int srec_frame = 200;
1920 static int hashmark = 1;
1922 buffer = alloca (srec_frame * 2 + 256);
1924 abfd = bfd_openr (args, 0);
1927 printf_filtered ("Unable to open file %s\n", args);
1931 if (bfd_check_format (abfd, bfd_object) == 0)
1933 printf_filtered ("File is not an object file\n");
1937 #define LOAD_CMD "load -b -s tty0\015"
1939 SERIAL_WRITE (mips_desc, LOAD_CMD, sizeof LOAD_CMD - 1);
1941 mips_expect (LOAD_CMD);
1942 mips_expect ("\012");
1944 for (s = abfd->sections; s; s = s->next)
1946 if (s->flags & SEC_LOAD)
1950 printf_filtered ("%s\t: 0x%4x .. 0x%4x ", s->name, s->vma,
1951 s->vma + s->_raw_size);
1952 gdb_flush (gdb_stdout);
1954 for (i = 0; i < s->_raw_size; i += numbytes)
1956 numbytes = min (srec_frame, s->_raw_size - i);
1958 bfd_get_section_contents (abfd, s, buffer, i, numbytes);
1960 reclen = mips_make_srec (srec, '3', s->vma + i, buffer, numbytes);
1961 send_srec (srec, reclen, s->vma + i);
1965 putchar_unfiltered ('#');
1966 gdb_flush (gdb_stdout);
1969 } /* Per-packet (or S-record) loop */
1971 putchar_unfiltered ('\n');
1972 } /* Loadable sections */
1975 putchar_unfiltered ('\n');
1977 /* Write a type 7 terminator record. no data for a type 7, and there
1978 is no data, so len is 0. */
1980 reclen = mips_make_srec (srec, '7', abfd->start_address, NULL, 0);
1982 send_srec (srec, reclen, abfd->start_address);
1984 SERIAL_FLUSH_INPUT (mips_desc);
1988 * mips_make_srec -- make an srecord. This writes each line, one at a
1989 * time, each with it's own header and trailer line.
1990 * An srecord looks like this:
1992 * byte count-+ address
1993 * start ---+ | | data +- checksum
1995 * S01000006F6B692D746573742E73726563E4
1996 * S315000448600000000000000000FC00005900000000E9
1997 * S31A0004000023C1400037DE00F023604000377B009020825000348D
1998 * S30B0004485A0000000000004E
2001 * S<type><length><address><data><checksum>
2005 * is the number of bytes following upto the checksum. Note that
2006 * this is not the number of chars following, since it takes two
2007 * chars to represent a byte.
2011 * 1) two byte address data record
2012 * 2) three byte address data record
2013 * 3) four byte address data record
2014 * 7) four byte address termination record
2015 * 8) three byte address termination record
2016 * 9) two byte address termination record
2019 * is the start address of the data following, or in the case of
2020 * a termination record, the start address of the image
2024 * is the sum of all the raw byte data in the record, from the length
2025 * upwards, modulo 256 and subtracted from 255.
2027 * This routine returns the length of the S-record.
2032 mips_make_srec (buf, type, memaddr, myaddr, len)
2036 unsigned char *myaddr;
2039 unsigned char checksum;
2042 /* Create the header for the srec. addr_size is the number of bytes in the address,
2043 and 1 is the number of bytes in the count. */
2047 buf[2] = len + 4 + 1; /* len + 4 byte address + 1 byte checksum */
2048 buf[3] = memaddr >> 24;
2049 buf[4] = memaddr >> 16;
2050 buf[5] = memaddr >> 8;
2052 memcpy (&buf[7], myaddr, len);
2054 /* Note that the checksum is calculated on the raw data, not the hexified
2055 data. It includes the length, address and the data portions of the
2059 buf += 2; /* Point at length byte */
2060 for (i = 0; i < len + 4 + 1; i++)
2068 /* mips_load -- download a file. */
2071 mips_load (file, from_tty)
2077 /* Get the board out of remote debugging mode. */
2079 mips_request ('x', (unsigned int) 0, (unsigned int) 0, &err,
2080 mips_receive_wait, NULL);
2082 if (!mips_expect ("\015\012") || !mips_expect (TARGET_MONITOR_PROMPT))
2083 error ("mips_load: Couldn't get into monitor mode.");
2085 mips_load_srec (file);
2089 /* Finally, make the PC point at the start address */
2092 write_pc (bfd_get_start_address (exec_bfd));
2094 inferior_pid = 0; /* No process now */
2096 /* This is necessary because many things were based on the PC at the time that
2097 we attached to the monitor, which is no longer valid now that we have loaded
2098 new code (and just changed the PC). Another way to do this might be to call
2099 normal_stop, except that the stack may not be valid, and things would get
2100 horribly confused... */
2102 clear_symtab_users ();
2105 /* The target vector. */
2107 struct target_ops mips_ops =
2109 "mips", /* to_shortname */
2110 "Remote MIPS debugging over serial line", /* to_longname */
2112 Debug a board using the MIPS remote debugging protocol over a serial line.\n\
2113 The argument is the device it is connected to or, if it contains a colon,\n\
2114 HOST:PORT to access a board over a network", /* to_doc */
2115 mips_open, /* to_open */
2116 mips_close, /* to_close */
2117 NULL, /* to_attach */
2118 mips_detach, /* to_detach */
2119 mips_resume, /* to_resume */
2120 mips_wait, /* to_wait */
2121 mips_fetch_registers, /* to_fetch_registers */
2122 mips_store_registers, /* to_store_registers */
2123 mips_prepare_to_store, /* to_prepare_to_store */
2124 mips_xfer_memory, /* to_xfer_memory */
2125 mips_files_info, /* to_files_info */
2126 mips_insert_breakpoint, /* to_insert_breakpoint */
2127 mips_remove_breakpoint, /* to_remove_breakpoint */
2128 NULL, /* to_terminal_init */
2129 NULL, /* to_terminal_inferior */
2130 NULL, /* to_terminal_ours_for_output */
2131 NULL, /* to_terminal_ours */
2132 NULL, /* to_terminal_info */
2133 mips_kill, /* to_kill */
2134 mips_load, /* to_load */
2135 NULL, /* to_lookup_symbol */
2136 mips_create_inferior, /* to_create_inferior */
2137 mips_mourn_inferior, /* to_mourn_inferior */
2138 NULL, /* to_can_run */
2139 NULL, /* to_notice_signals */
2140 0, /* to_thread_alive */
2142 process_stratum, /* to_stratum */
2144 1, /* to_has_all_memory */
2145 1, /* to_has_memory */
2146 1, /* to_has_stack */
2147 1, /* to_has_registers */
2148 1, /* to_has_execution */
2149 NULL, /* sections */
2150 NULL, /* sections_end */
2151 OPS_MAGIC /* to_magic */
2155 _initialize_remote_mips ()
2157 add_target (&mips_ops);
2160 add_set_cmd ("timeout", no_class, var_zinteger,
2161 (char *) &mips_receive_wait,
2162 "Set timeout in seconds for remote MIPS serial I/O.",
2167 add_set_cmd ("retransmit-timeout", no_class, var_zinteger,
2168 (char *) &mips_retransmit_wait,
2169 "Set retransmit timeout in seconds for remote MIPS serial I/O.\n\
2170 This is the number of seconds to wait for an acknowledgement to a packet\n\
2171 before resending the packet.", &setlist),
2175 add_set_cmd ("syn-garbage-limit", no_class, var_zinteger,
2176 (char *) &mips_syn_garbage,
2177 "Set the maximum number of characters to ignore when scanning for a SYN.\n\
2178 This is the maximum number of characters GDB will ignore when trying to\n\
2179 synchronize with the remote system. A value of -1 means that there is no limit\n\
2180 (Note that these characters are printed out even though they are ignored.)",