4 * Copyright (c) 2003-2005 Fabrice Bellard
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
20 #include "qemu-common.h"
21 #ifdef CONFIG_USER_ONLY
32 #include "monitor/monitor.h"
33 #include "char/char.h"
34 #include "sysemu/sysemu.h"
35 #include "exec/gdbstub.h"
38 #define MAX_PACKET_LENGTH 4096
41 #include "qemu/sockets.h"
42 #include "sysemu/kvm.h"
43 #include "qemu/bitops.h"
45 #ifndef TARGET_CPU_MEMORY_RW_DEBUG
46 static inline int target_memory_rw_debug(CPUArchState
*env
, target_ulong addr
,
47 uint8_t *buf
, int len
, int is_write
)
49 return cpu_memory_rw_debug(env
, addr
, buf
, len
, is_write
);
52 /* target_memory_rw_debug() defined in cpu.h */
64 GDB_SIGNAL_UNKNOWN
= 143
67 #ifdef CONFIG_USER_ONLY
69 /* Map target signal numbers to GDB protocol signal numbers and vice
70 * versa. For user emulation's currently supported systems, we can
71 * assume most signals are defined.
74 static int gdb_signal_table
[] = {
234 /* In system mode we only need SIGINT and SIGTRAP; other signals
235 are not yet supported. */
242 static int gdb_signal_table
[] = {
252 #ifdef CONFIG_USER_ONLY
253 static int target_signal_to_gdb (int sig
)
256 for (i
= 0; i
< ARRAY_SIZE (gdb_signal_table
); i
++)
257 if (gdb_signal_table
[i
] == sig
)
259 return GDB_SIGNAL_UNKNOWN
;
263 static int gdb_signal_to_target (int sig
)
265 if (sig
< ARRAY_SIZE (gdb_signal_table
))
266 return gdb_signal_table
[sig
];
273 typedef struct GDBRegisterState
{
279 struct GDBRegisterState
*next
;
289 typedef struct GDBState
{
290 CPUArchState
*c_cpu
; /* current CPU for step/continue ops */
291 CPUArchState
*g_cpu
; /* current CPU for other ops */
292 CPUArchState
*query_cpu
; /* for q{f|s}ThreadInfo */
293 enum RSState state
; /* parsing state */
294 char line_buf
[MAX_PACKET_LENGTH
];
297 uint8_t last_packet
[MAX_PACKET_LENGTH
+ 4];
300 #ifdef CONFIG_USER_ONLY
304 CharDriverState
*chr
;
305 CharDriverState
*mon_chr
;
307 char syscall_buf
[256];
308 gdb_syscall_complete_cb current_syscall_cb
;
311 /* By default use no IRQs and no timers while single stepping so as to
312 * make single stepping like an ICE HW step.
314 static int sstep_flags
= SSTEP_ENABLE
|SSTEP_NOIRQ
|SSTEP_NOTIMER
;
316 static GDBState
*gdbserver_state
;
318 /* This is an ugly hack to cope with both new and old gdb.
319 If gdb sends qXfer:features:read then assume we're talking to a newish
320 gdb that understands target descriptions. */
321 static int gdb_has_xml
;
323 #ifdef CONFIG_USER_ONLY
324 /* XXX: This is not thread safe. Do we care? */
325 static int gdbserver_fd
= -1;
327 static int get_char(GDBState
*s
)
333 ret
= qemu_recv(s
->fd
, &ch
, 1, 0);
335 if (errno
== ECONNRESET
)
337 if (errno
!= EINTR
&& errno
!= EAGAIN
)
339 } else if (ret
== 0) {
357 /* If gdb is connected when the first semihosting syscall occurs then use
358 remote gdb syscalls. Otherwise use native file IO. */
359 int use_gdb_syscalls(void)
361 if (gdb_syscall_mode
== GDB_SYS_UNKNOWN
) {
362 gdb_syscall_mode
= (gdbserver_state
? GDB_SYS_ENABLED
365 return gdb_syscall_mode
== GDB_SYS_ENABLED
;
368 /* Resume execution. */
369 static inline void gdb_continue(GDBState
*s
)
371 #ifdef CONFIG_USER_ONLY
372 s
->running_state
= 1;
378 static void put_buffer(GDBState
*s
, const uint8_t *buf
, int len
)
380 #ifdef CONFIG_USER_ONLY
384 ret
= send(s
->fd
, buf
, len
, 0);
386 if (errno
!= EINTR
&& errno
!= EAGAIN
)
394 qemu_chr_fe_write(s
->chr
, buf
, len
);
398 static inline int fromhex(int v
)
400 if (v
>= '0' && v
<= '9')
402 else if (v
>= 'A' && v
<= 'F')
404 else if (v
>= 'a' && v
<= 'f')
410 static inline int tohex(int v
)
418 static void memtohex(char *buf
, const uint8_t *mem
, int len
)
423 for(i
= 0; i
< len
; i
++) {
425 *q
++ = tohex(c
>> 4);
426 *q
++ = tohex(c
& 0xf);
431 static void hextomem(uint8_t *mem
, const char *buf
, int len
)
435 for(i
= 0; i
< len
; i
++) {
436 mem
[i
] = (fromhex(buf
[0]) << 4) | fromhex(buf
[1]);
441 /* return -1 if error, 0 if OK */
442 static int put_packet_binary(GDBState
*s
, const char *buf
, int len
)
453 for(i
= 0; i
< len
; i
++) {
457 *(p
++) = tohex((csum
>> 4) & 0xf);
458 *(p
++) = tohex((csum
) & 0xf);
460 s
->last_packet_len
= p
- s
->last_packet
;
461 put_buffer(s
, (uint8_t *)s
->last_packet
, s
->last_packet_len
);
463 #ifdef CONFIG_USER_ONLY
476 /* return -1 if error, 0 if OK */
477 static int put_packet(GDBState
*s
, const char *buf
)
480 printf("reply='%s'\n", buf
);
483 return put_packet_binary(s
, buf
, strlen(buf
));
486 /* The GDB remote protocol transfers values in target byte order. This means
487 we can use the raw memory access routines to access the value buffer.
488 Conveniently, these also handle the case where the buffer is mis-aligned.
490 #define GET_REG8(val) do { \
491 stb_p(mem_buf, val); \
494 #define GET_REG16(val) do { \
495 stw_p(mem_buf, val); \
498 #define GET_REG32(val) do { \
499 stl_p(mem_buf, val); \
502 #define GET_REG64(val) do { \
503 stq_p(mem_buf, val); \
507 #if TARGET_LONG_BITS == 64
508 #define GET_REGL(val) GET_REG64(val)
509 #define ldtul_p(addr) ldq_p(addr)
511 #define GET_REGL(val) GET_REG32(val)
512 #define ldtul_p(addr) ldl_p(addr)
515 #if defined(TARGET_I386)
518 static const int gpr_map
[16] = {
519 R_EAX
, R_EBX
, R_ECX
, R_EDX
, R_ESI
, R_EDI
, R_EBP
, R_ESP
,
520 8, 9, 10, 11, 12, 13, 14, 15
523 #define gpr_map gpr_map32
525 static const int gpr_map32
[8] = { 0, 1, 2, 3, 4, 5, 6, 7 };
527 #define NUM_CORE_REGS (CPU_NB_REGS * 2 + 25)
529 #define IDX_IP_REG CPU_NB_REGS
530 #define IDX_FLAGS_REG (IDX_IP_REG + 1)
531 #define IDX_SEG_REGS (IDX_FLAGS_REG + 1)
532 #define IDX_FP_REGS (IDX_SEG_REGS + 6)
533 #define IDX_XMM_REGS (IDX_FP_REGS + 16)
534 #define IDX_MXCSR_REG (IDX_XMM_REGS + CPU_NB_REGS)
536 static int cpu_gdb_read_register(CPUX86State
*env
, uint8_t *mem_buf
, int n
)
538 if (n
< CPU_NB_REGS
) {
539 if (TARGET_LONG_BITS
== 64 && env
->hflags
& HF_CS64_MASK
) {
540 GET_REG64(env
->regs
[gpr_map
[n
]]);
541 } else if (n
< CPU_NB_REGS32
) {
542 GET_REG32(env
->regs
[gpr_map32
[n
]]);
544 } else if (n
>= IDX_FP_REGS
&& n
< IDX_FP_REGS
+ 8) {
545 #ifdef USE_X86LDOUBLE
546 /* FIXME: byteswap float values - after fixing fpregs layout. */
547 memcpy(mem_buf
, &env
->fpregs
[n
- IDX_FP_REGS
], 10);
549 memset(mem_buf
, 0, 10);
552 } else if (n
>= IDX_XMM_REGS
&& n
< IDX_XMM_REGS
+ CPU_NB_REGS
) {
554 if (n
< CPU_NB_REGS32
||
555 (TARGET_LONG_BITS
== 64 && env
->hflags
& HF_CS64_MASK
)) {
556 stq_p(mem_buf
, env
->xmm_regs
[n
].XMM_Q(0));
557 stq_p(mem_buf
+ 8, env
->xmm_regs
[n
].XMM_Q(1));
563 if (TARGET_LONG_BITS
== 64 && env
->hflags
& HF_CS64_MASK
) {
568 case IDX_FLAGS_REG
: GET_REG32(env
->eflags
);
570 case IDX_SEG_REGS
: GET_REG32(env
->segs
[R_CS
].selector
);
571 case IDX_SEG_REGS
+ 1: GET_REG32(env
->segs
[R_SS
].selector
);
572 case IDX_SEG_REGS
+ 2: GET_REG32(env
->segs
[R_DS
].selector
);
573 case IDX_SEG_REGS
+ 3: GET_REG32(env
->segs
[R_ES
].selector
);
574 case IDX_SEG_REGS
+ 4: GET_REG32(env
->segs
[R_FS
].selector
);
575 case IDX_SEG_REGS
+ 5: GET_REG32(env
->segs
[R_GS
].selector
);
577 case IDX_FP_REGS
+ 8: GET_REG32(env
->fpuc
);
578 case IDX_FP_REGS
+ 9: GET_REG32((env
->fpus
& ~0x3800) |
579 (env
->fpstt
& 0x7) << 11);
580 case IDX_FP_REGS
+ 10: GET_REG32(0); /* ftag */
581 case IDX_FP_REGS
+ 11: GET_REG32(0); /* fiseg */
582 case IDX_FP_REGS
+ 12: GET_REG32(0); /* fioff */
583 case IDX_FP_REGS
+ 13: GET_REG32(0); /* foseg */
584 case IDX_FP_REGS
+ 14: GET_REG32(0); /* fooff */
585 case IDX_FP_REGS
+ 15: GET_REG32(0); /* fop */
587 case IDX_MXCSR_REG
: GET_REG32(env
->mxcsr
);
593 static int cpu_x86_gdb_load_seg(CPUX86State
*env
, int sreg
, uint8_t *mem_buf
)
595 uint16_t selector
= ldl_p(mem_buf
);
597 if (selector
!= env
->segs
[sreg
].selector
) {
598 #if defined(CONFIG_USER_ONLY)
599 cpu_x86_load_seg(env
, sreg
, selector
);
601 unsigned int limit
, flags
;
604 if (!(env
->cr
[0] & CR0_PE_MASK
) || (env
->eflags
& VM_MASK
)) {
605 base
= selector
<< 4;
609 if (!cpu_x86_get_descr_debug(env
, selector
, &base
, &limit
, &flags
))
612 cpu_x86_load_seg_cache(env
, sreg
, selector
, base
, limit
, flags
);
618 static int cpu_gdb_write_register(CPUX86State
*env
, uint8_t *mem_buf
, int n
)
622 if (n
< CPU_NB_REGS
) {
623 if (TARGET_LONG_BITS
== 64 && env
->hflags
& HF_CS64_MASK
) {
624 env
->regs
[gpr_map
[n
]] = ldtul_p(mem_buf
);
625 return sizeof(target_ulong
);
626 } else if (n
< CPU_NB_REGS32
) {
628 env
->regs
[n
] &= ~0xffffffffUL
;
629 env
->regs
[n
] |= (uint32_t)ldl_p(mem_buf
);
632 } else if (n
>= IDX_FP_REGS
&& n
< IDX_FP_REGS
+ 8) {
633 #ifdef USE_X86LDOUBLE
634 /* FIXME: byteswap float values - after fixing fpregs layout. */
635 memcpy(&env
->fpregs
[n
- IDX_FP_REGS
], mem_buf
, 10);
638 } else if (n
>= IDX_XMM_REGS
&& n
< IDX_XMM_REGS
+ CPU_NB_REGS
) {
640 if (n
< CPU_NB_REGS32
||
641 (TARGET_LONG_BITS
== 64 && env
->hflags
& HF_CS64_MASK
)) {
642 env
->xmm_regs
[n
].XMM_Q(0) = ldq_p(mem_buf
);
643 env
->xmm_regs
[n
].XMM_Q(1) = ldq_p(mem_buf
+ 8);
649 if (TARGET_LONG_BITS
== 64 && env
->hflags
& HF_CS64_MASK
) {
650 env
->eip
= ldq_p(mem_buf
);
653 env
->eip
&= ~0xffffffffUL
;
654 env
->eip
|= (uint32_t)ldl_p(mem_buf
);
658 env
->eflags
= ldl_p(mem_buf
);
661 case IDX_SEG_REGS
: return cpu_x86_gdb_load_seg(env
, R_CS
, mem_buf
);
662 case IDX_SEG_REGS
+ 1: return cpu_x86_gdb_load_seg(env
, R_SS
, mem_buf
);
663 case IDX_SEG_REGS
+ 2: return cpu_x86_gdb_load_seg(env
, R_DS
, mem_buf
);
664 case IDX_SEG_REGS
+ 3: return cpu_x86_gdb_load_seg(env
, R_ES
, mem_buf
);
665 case IDX_SEG_REGS
+ 4: return cpu_x86_gdb_load_seg(env
, R_FS
, mem_buf
);
666 case IDX_SEG_REGS
+ 5: return cpu_x86_gdb_load_seg(env
, R_GS
, mem_buf
);
668 case IDX_FP_REGS
+ 8:
669 env
->fpuc
= ldl_p(mem_buf
);
671 case IDX_FP_REGS
+ 9:
672 tmp
= ldl_p(mem_buf
);
673 env
->fpstt
= (tmp
>> 11) & 7;
674 env
->fpus
= tmp
& ~0x3800;
676 case IDX_FP_REGS
+ 10: /* ftag */ return 4;
677 case IDX_FP_REGS
+ 11: /* fiseg */ return 4;
678 case IDX_FP_REGS
+ 12: /* fioff */ return 4;
679 case IDX_FP_REGS
+ 13: /* foseg */ return 4;
680 case IDX_FP_REGS
+ 14: /* fooff */ return 4;
681 case IDX_FP_REGS
+ 15: /* fop */ return 4;
684 env
->mxcsr
= ldl_p(mem_buf
);
688 /* Unrecognised register. */
692 #elif defined (TARGET_PPC)
694 /* Old gdb always expects FP registers. Newer (xml-aware) gdb only
695 expects whatever the target description contains. Due to a
696 historical mishap the FP registers appear in between core integer
697 regs and PC, MSR, CR, and so forth. We hack round this by giving the
698 FP regs zero size when talking to a newer gdb. */
699 #define NUM_CORE_REGS 71
700 #if defined (TARGET_PPC64)
701 #define GDB_CORE_XML "power64-core.xml"
703 #define GDB_CORE_XML "power-core.xml"
706 static int cpu_gdb_read_register(CPUPPCState
*env
, uint8_t *mem_buf
, int n
)
710 GET_REGL(env
->gpr
[n
]);
715 stfq_p(mem_buf
, env
->fpr
[n
-32]);
719 case 64: GET_REGL(env
->nip
);
720 case 65: GET_REGL(env
->msr
);
725 for (i
= 0; i
< 8; i
++)
726 cr
|= env
->crf
[i
] << (32 - ((i
+ 1) * 4));
729 case 67: GET_REGL(env
->lr
);
730 case 68: GET_REGL(env
->ctr
);
731 case 69: GET_REGL(env
->xer
);
736 GET_REG32(env
->fpscr
);
743 static int cpu_gdb_write_register(CPUPPCState
*env
, uint8_t *mem_buf
, int n
)
747 env
->gpr
[n
] = ldtul_p(mem_buf
);
748 return sizeof(target_ulong
);
753 env
->fpr
[n
-32] = ldfq_p(mem_buf
);
758 env
->nip
= ldtul_p(mem_buf
);
759 return sizeof(target_ulong
);
761 ppc_store_msr(env
, ldtul_p(mem_buf
));
762 return sizeof(target_ulong
);
765 uint32_t cr
= ldl_p(mem_buf
);
767 for (i
= 0; i
< 8; i
++)
768 env
->crf
[i
] = (cr
>> (32 - ((i
+ 1) * 4))) & 0xF;
772 env
->lr
= ldtul_p(mem_buf
);
773 return sizeof(target_ulong
);
775 env
->ctr
= ldtul_p(mem_buf
);
776 return sizeof(target_ulong
);
778 env
->xer
= ldtul_p(mem_buf
);
779 return sizeof(target_ulong
);
784 store_fpscr(env
, ldtul_p(mem_buf
), 0xffffffff);
785 return sizeof(target_ulong
);
791 #elif defined (TARGET_SPARC)
793 #if defined(TARGET_SPARC64) && !defined(TARGET_ABI32)
794 #define NUM_CORE_REGS 86
796 #define NUM_CORE_REGS 72
800 #define GET_REGA(val) GET_REG32(val)
802 #define GET_REGA(val) GET_REGL(val)
805 static int cpu_gdb_read_register(CPUSPARCState
*env
, uint8_t *mem_buf
, int n
)
809 GET_REGA(env
->gregs
[n
]);
812 /* register window */
813 GET_REGA(env
->regwptr
[n
- 8]);
815 #if defined(TARGET_ABI32) || !defined(TARGET_SPARC64)
819 GET_REG32(env
->fpr
[(n
- 32) / 2].l
.lower
);
821 GET_REG32(env
->fpr
[(n
- 32) / 2].l
.upper
);
824 /* Y, PSR, WIM, TBR, PC, NPC, FPSR, CPSR */
826 case 64: GET_REGA(env
->y
);
827 case 65: GET_REGA(cpu_get_psr(env
));
828 case 66: GET_REGA(env
->wim
);
829 case 67: GET_REGA(env
->tbr
);
830 case 68: GET_REGA(env
->pc
);
831 case 69: GET_REGA(env
->npc
);
832 case 70: GET_REGA(env
->fsr
);
833 case 71: GET_REGA(0); /* csr */
834 default: GET_REGA(0);
840 GET_REG32(env
->fpr
[(n
- 32) / 2].l
.lower
);
842 GET_REG32(env
->fpr
[(n
- 32) / 2].l
.upper
);
846 /* f32-f62 (double width, even numbers only) */
847 GET_REG64(env
->fpr
[(n
- 32) / 2].ll
);
850 case 80: GET_REGL(env
->pc
);
851 case 81: GET_REGL(env
->npc
);
852 case 82: GET_REGL((cpu_get_ccr(env
) << 32) |
853 ((env
->asi
& 0xff) << 24) |
854 ((env
->pstate
& 0xfff) << 8) |
856 case 83: GET_REGL(env
->fsr
);
857 case 84: GET_REGL(env
->fprs
);
858 case 85: GET_REGL(env
->y
);
864 static int cpu_gdb_write_register(CPUSPARCState
*env
, uint8_t *mem_buf
, int n
)
866 #if defined(TARGET_ABI32)
869 tmp
= ldl_p(mem_buf
);
873 tmp
= ldtul_p(mem_buf
);
880 /* register window */
881 env
->regwptr
[n
- 8] = tmp
;
883 #if defined(TARGET_ABI32) || !defined(TARGET_SPARC64)
888 env
->fpr
[(n
- 32) / 2].l
.lower
= tmp
;
890 env
->fpr
[(n
- 32) / 2].l
.upper
= tmp
;
893 /* Y, PSR, WIM, TBR, PC, NPC, FPSR, CPSR */
895 case 64: env
->y
= tmp
; break;
896 case 65: cpu_put_psr(env
, tmp
); break;
897 case 66: env
->wim
= tmp
; break;
898 case 67: env
->tbr
= tmp
; break;
899 case 68: env
->pc
= tmp
; break;
900 case 69: env
->npc
= tmp
; break;
901 case 70: env
->fsr
= tmp
; break;
909 tmp
= ldl_p(mem_buf
);
911 env
->fpr
[(n
- 32) / 2].l
.lower
= tmp
;
913 env
->fpr
[(n
- 32) / 2].l
.upper
= tmp
;
917 /* f32-f62 (double width, even numbers only) */
918 env
->fpr
[(n
- 32) / 2].ll
= tmp
;
921 case 80: env
->pc
= tmp
; break;
922 case 81: env
->npc
= tmp
; break;
924 cpu_put_ccr(env
, tmp
>> 32);
925 env
->asi
= (tmp
>> 24) & 0xff;
926 env
->pstate
= (tmp
>> 8) & 0xfff;
927 cpu_put_cwp64(env
, tmp
& 0xff);
929 case 83: env
->fsr
= tmp
; break;
930 case 84: env
->fprs
= tmp
; break;
931 case 85: env
->y
= tmp
; break;
938 #elif defined (TARGET_ARM)
940 /* Old gdb always expect FPA registers. Newer (xml-aware) gdb only expect
941 whatever the target description contains. Due to a historical mishap
942 the FPA registers appear in between core integer regs and the CPSR.
943 We hack round this by giving the FPA regs zero size when talking to a
945 #define NUM_CORE_REGS 26
946 #define GDB_CORE_XML "arm-core.xml"
948 static int cpu_gdb_read_register(CPUARMState
*env
, uint8_t *mem_buf
, int n
)
951 /* Core integer register. */
952 GET_REG32(env
->regs
[n
]);
958 memset(mem_buf
, 0, 12);
963 /* FPA status register. */
969 GET_REG32(cpsr_read(env
));
971 /* Unknown register. */
975 static int cpu_gdb_write_register(CPUARMState
*env
, uint8_t *mem_buf
, int n
)
979 tmp
= ldl_p(mem_buf
);
981 /* Mask out low bit of PC to workaround gdb bugs. This will probably
982 cause problems if we ever implement the Jazelle DBX extensions. */
987 /* Core integer register. */
991 if (n
< 24) { /* 16-23 */
992 /* FPA registers (ignored). */
999 /* FPA status register (ignored). */
1005 cpsr_write (env
, tmp
, 0xffffffff);
1008 /* Unknown register. */
1012 #elif defined (TARGET_M68K)
1014 #define NUM_CORE_REGS 18
1016 #define GDB_CORE_XML "cf-core.xml"
1018 static int cpu_gdb_read_register(CPUM68KState
*env
, uint8_t *mem_buf
, int n
)
1022 GET_REG32(env
->dregs
[n
]);
1023 } else if (n
< 16) {
1025 GET_REG32(env
->aregs
[n
- 8]);
1028 case 16: GET_REG32(env
->sr
);
1029 case 17: GET_REG32(env
->pc
);
1032 /* FP registers not included here because they vary between
1033 ColdFire and m68k. Use XML bits for these. */
1037 static int cpu_gdb_write_register(CPUM68KState
*env
, uint8_t *mem_buf
, int n
)
1041 tmp
= ldl_p(mem_buf
);
1045 env
->dregs
[n
] = tmp
;
1046 } else if (n
< 16) {
1048 env
->aregs
[n
- 8] = tmp
;
1051 case 16: env
->sr
= tmp
; break;
1052 case 17: env
->pc
= tmp
; break;
1058 #elif defined (TARGET_MIPS)
1060 #define NUM_CORE_REGS 73
1062 static int cpu_gdb_read_register(CPUMIPSState
*env
, uint8_t *mem_buf
, int n
)
1065 GET_REGL(env
->active_tc
.gpr
[n
]);
1067 if (env
->CP0_Config1
& (1 << CP0C1_FP
)) {
1068 if (n
>= 38 && n
< 70) {
1069 if (env
->CP0_Status
& (1 << CP0St_FR
))
1070 GET_REGL(env
->active_fpu
.fpr
[n
- 38].d
);
1072 GET_REGL(env
->active_fpu
.fpr
[n
- 38].w
[FP_ENDIAN_IDX
]);
1075 case 70: GET_REGL((int32_t)env
->active_fpu
.fcr31
);
1076 case 71: GET_REGL((int32_t)env
->active_fpu
.fcr0
);
1080 case 32: GET_REGL((int32_t)env
->CP0_Status
);
1081 case 33: GET_REGL(env
->active_tc
.LO
[0]);
1082 case 34: GET_REGL(env
->active_tc
.HI
[0]);
1083 case 35: GET_REGL(env
->CP0_BadVAddr
);
1084 case 36: GET_REGL((int32_t)env
->CP0_Cause
);
1085 case 37: GET_REGL(env
->active_tc
.PC
| !!(env
->hflags
& MIPS_HFLAG_M16
));
1086 case 72: GET_REGL(0); /* fp */
1087 case 89: GET_REGL((int32_t)env
->CP0_PRid
);
1089 if (n
>= 73 && n
<= 88) {
1090 /* 16 embedded regs. */
1097 /* convert MIPS rounding mode in FCR31 to IEEE library */
1098 static unsigned int ieee_rm
[] =
1100 float_round_nearest_even
,
1101 float_round_to_zero
,
1105 #define RESTORE_ROUNDING_MODE \
1106 set_float_rounding_mode(ieee_rm[env->active_fpu.fcr31 & 3], &env->active_fpu.fp_status)
1108 static int cpu_gdb_write_register(CPUMIPSState
*env
, uint8_t *mem_buf
, int n
)
1112 tmp
= ldtul_p(mem_buf
);
1115 env
->active_tc
.gpr
[n
] = tmp
;
1116 return sizeof(target_ulong
);
1118 if (env
->CP0_Config1
& (1 << CP0C1_FP
)
1119 && n
>= 38 && n
< 73) {
1121 if (env
->CP0_Status
& (1 << CP0St_FR
))
1122 env
->active_fpu
.fpr
[n
- 38].d
= tmp
;
1124 env
->active_fpu
.fpr
[n
- 38].w
[FP_ENDIAN_IDX
] = tmp
;
1128 env
->active_fpu
.fcr31
= tmp
& 0xFF83FFFF;
1129 /* set rounding mode */
1130 RESTORE_ROUNDING_MODE
;
1132 case 71: env
->active_fpu
.fcr0
= tmp
; break;
1134 return sizeof(target_ulong
);
1137 case 32: env
->CP0_Status
= tmp
; break;
1138 case 33: env
->active_tc
.LO
[0] = tmp
; break;
1139 case 34: env
->active_tc
.HI
[0] = tmp
; break;
1140 case 35: env
->CP0_BadVAddr
= tmp
; break;
1141 case 36: env
->CP0_Cause
= tmp
; break;
1143 env
->active_tc
.PC
= tmp
& ~(target_ulong
)1;
1145 env
->hflags
|= MIPS_HFLAG_M16
;
1147 env
->hflags
&= ~(MIPS_HFLAG_M16
);
1150 case 72: /* fp, ignored */ break;
1154 /* Other registers are readonly. Ignore writes. */
1158 return sizeof(target_ulong
);
1160 #elif defined(TARGET_OPENRISC)
1162 #define NUM_CORE_REGS (32 + 3)
1164 static int cpu_gdb_read_register(CPUOpenRISCState
*env
, uint8_t *mem_buf
, int n
)
1167 GET_REG32(env
->gpr
[n
]);
1171 GET_REG32(env
->ppc
);
1175 GET_REG32(env
->npc
);
1189 static int cpu_gdb_write_register(CPUOpenRISCState
*env
,
1190 uint8_t *mem_buf
, int n
)
1194 if (n
> NUM_CORE_REGS
) {
1198 tmp
= ldl_p(mem_buf
);
1222 #elif defined (TARGET_SH4)
1224 /* Hint: Use "set architecture sh4" in GDB to see fpu registers */
1225 /* FIXME: We should use XML for this. */
1227 #define NUM_CORE_REGS 59
1229 static int cpu_gdb_read_register(CPUSH4State
*env
, uint8_t *mem_buf
, int n
)
1233 if ((env
->sr
& (SR_MD
| SR_RB
)) == (SR_MD
| SR_RB
)) {
1234 GET_REGL(env
->gregs
[n
+ 16]);
1236 GET_REGL(env
->gregs
[n
]);
1239 GET_REGL(env
->gregs
[n
]);
1249 GET_REGL(env
->mach
);
1251 GET_REGL(env
->macl
);
1255 GET_REGL(env
->fpul
);
1257 GET_REGL(env
->fpscr
);
1259 if (env
->fpscr
& FPSCR_FR
) {
1260 stfl_p(mem_buf
, env
->fregs
[n
- 9]);
1262 stfl_p(mem_buf
, env
->fregs
[n
- 25]);
1270 GET_REGL(env
->gregs
[n
- 43]);
1272 GET_REGL(env
->gregs
[n
- (51 - 16)]);
1278 static int cpu_gdb_write_register(CPUSH4State
*env
, uint8_t *mem_buf
, int n
)
1282 if ((env
->sr
& (SR_MD
| SR_RB
)) == (SR_MD
| SR_RB
)) {
1283 env
->gregs
[n
+ 16] = ldl_p(mem_buf
);
1285 env
->gregs
[n
] = ldl_p(mem_buf
);
1289 env
->gregs
[n
] = ldl_p(mem_buf
);
1292 env
->pc
= ldl_p(mem_buf
);
1295 env
->pr
= ldl_p(mem_buf
);
1298 env
->gbr
= ldl_p(mem_buf
);
1301 env
->vbr
= ldl_p(mem_buf
);
1304 env
->mach
= ldl_p(mem_buf
);
1307 env
->macl
= ldl_p(mem_buf
);
1310 env
->sr
= ldl_p(mem_buf
);
1313 env
->fpul
= ldl_p(mem_buf
);
1316 env
->fpscr
= ldl_p(mem_buf
);
1319 if (env
->fpscr
& FPSCR_FR
) {
1320 env
->fregs
[n
- 9] = ldfl_p(mem_buf
);
1322 env
->fregs
[n
- 25] = ldfl_p(mem_buf
);
1326 env
->ssr
= ldl_p(mem_buf
);
1329 env
->spc
= ldl_p(mem_buf
);
1332 env
->gregs
[n
- 43] = ldl_p(mem_buf
);
1335 env
->gregs
[n
- (51 - 16)] = ldl_p(mem_buf
);
1342 #elif defined (TARGET_MICROBLAZE)
1344 #define NUM_CORE_REGS (32 + 5)
1346 static int cpu_gdb_read_register(CPUMBState
*env
, uint8_t *mem_buf
, int n
)
1349 GET_REG32(env
->regs
[n
]);
1351 GET_REG32(env
->sregs
[n
- 32]);
1356 static int cpu_gdb_write_register(CPUMBState
*env
, uint8_t *mem_buf
, int n
)
1360 if (n
> NUM_CORE_REGS
)
1363 tmp
= ldl_p(mem_buf
);
1368 env
->sregs
[n
- 32] = tmp
;
1372 #elif defined (TARGET_CRIS)
1374 #define NUM_CORE_REGS 49
1377 read_register_crisv10(CPUCRISState
*env
, uint8_t *mem_buf
, int n
)
1380 GET_REG32(env
->regs
[n
]);
1390 GET_REG8(env
->pregs
[n
- 16]);
1393 GET_REG8(env
->pregs
[n
- 16]);
1397 GET_REG16(env
->pregs
[n
- 16]);
1401 GET_REG32(env
->pregs
[n
- 16]);
1409 static int cpu_gdb_read_register(CPUCRISState
*env
, uint8_t *mem_buf
, int n
)
1413 if (env
->pregs
[PR_VR
] < 32)
1414 return read_register_crisv10(env
, mem_buf
, n
);
1416 srs
= env
->pregs
[PR_SRS
];
1418 GET_REG32(env
->regs
[n
]);
1421 if (n
>= 21 && n
< 32) {
1422 GET_REG32(env
->pregs
[n
- 16]);
1424 if (n
>= 33 && n
< 49) {
1425 GET_REG32(env
->sregs
[srs
][n
- 33]);
1428 case 16: GET_REG8(env
->pregs
[0]);
1429 case 17: GET_REG8(env
->pregs
[1]);
1430 case 18: GET_REG32(env
->pregs
[2]);
1431 case 19: GET_REG8(srs
);
1432 case 20: GET_REG16(env
->pregs
[4]);
1433 case 32: GET_REG32(env
->pc
);
1439 static int cpu_gdb_write_register(CPUCRISState
*env
, uint8_t *mem_buf
, int n
)
1446 tmp
= ldl_p(mem_buf
);
1452 if (n
>= 21 && n
< 32) {
1453 env
->pregs
[n
- 16] = tmp
;
1456 /* FIXME: Should support function regs be writable? */
1460 case 18: env
->pregs
[PR_PID
] = tmp
; break;
1463 case 32: env
->pc
= tmp
; break;
1468 #elif defined (TARGET_ALPHA)
1470 #define NUM_CORE_REGS 67
1472 static int cpu_gdb_read_register(CPUAlphaState
*env
, uint8_t *mem_buf
, int n
)
1482 d
.d
= env
->fir
[n
- 32];
1486 val
= cpu_alpha_load_fpcr(env
);
1496 /* 31 really is the zero register; 65 is unassigned in the
1497 gdb protocol, but is still required to occupy 8 bytes. */
1506 static int cpu_gdb_write_register(CPUAlphaState
*env
, uint8_t *mem_buf
, int n
)
1508 target_ulong tmp
= ldtul_p(mem_buf
);
1517 env
->fir
[n
- 32] = d
.d
;
1520 cpu_alpha_store_fpcr(env
, tmp
);
1530 /* 31 really is the zero register; 65 is unassigned in the
1531 gdb protocol, but is still required to occupy 8 bytes. */
1538 #elif defined (TARGET_S390X)
1540 #define NUM_CORE_REGS S390_NUM_REGS
1542 static int cpu_gdb_read_register(CPUS390XState
*env
, uint8_t *mem_buf
, int n
)
1548 case S390_PSWM_REGNUM
:
1549 cc_op
= calc_cc(env
, env
->cc_op
, env
->cc_src
, env
->cc_dst
, env
->cc_vr
);
1550 val
= deposit64(env
->psw
.mask
, 44, 2, cc_op
);
1553 case S390_PSWA_REGNUM
:
1554 GET_REGL(env
->psw
.addr
);
1556 case S390_R0_REGNUM
... S390_R15_REGNUM
:
1557 GET_REGL(env
->regs
[n
-S390_R0_REGNUM
]);
1559 case S390_A0_REGNUM
... S390_A15_REGNUM
:
1560 GET_REG32(env
->aregs
[n
-S390_A0_REGNUM
]);
1562 case S390_FPC_REGNUM
:
1563 GET_REG32(env
->fpc
);
1565 case S390_F0_REGNUM
... S390_F15_REGNUM
:
1566 GET_REG64(env
->fregs
[n
-S390_F0_REGNUM
].ll
);
1573 static int cpu_gdb_write_register(CPUS390XState
*env
, uint8_t *mem_buf
, int n
)
1578 tmpl
= ldtul_p(mem_buf
);
1579 tmp32
= ldl_p(mem_buf
);
1582 case S390_PSWM_REGNUM
:
1583 env
->psw
.mask
= tmpl
;
1584 env
->cc_op
= extract64(tmpl
, 44, 2);
1586 case S390_PSWA_REGNUM
:
1587 env
->psw
.addr
= tmpl
;
1589 case S390_R0_REGNUM
... S390_R15_REGNUM
:
1590 env
->regs
[n
-S390_R0_REGNUM
] = tmpl
;
1592 case S390_A0_REGNUM
... S390_A15_REGNUM
:
1593 env
->aregs
[n
-S390_A0_REGNUM
] = tmp32
;
1596 case S390_FPC_REGNUM
:
1600 case S390_F0_REGNUM
... S390_F15_REGNUM
:
1601 env
->fregs
[n
-S390_F0_REGNUM
].ll
= tmpl
;
1608 #elif defined (TARGET_LM32)
1610 #include "hw/lm32_pic.h"
1611 #define NUM_CORE_REGS (32 + 7)
1613 static int cpu_gdb_read_register(CPULM32State
*env
, uint8_t *mem_buf
, int n
)
1616 GET_REG32(env
->regs
[n
]);
1622 /* FIXME: put in right exception ID */
1627 GET_REG32(env
->eba
);
1630 GET_REG32(env
->deba
);
1636 GET_REG32(lm32_pic_get_im(env
->pic_state
));
1639 GET_REG32(lm32_pic_get_ip(env
->pic_state
));
1646 static int cpu_gdb_write_register(CPULM32State
*env
, uint8_t *mem_buf
, int n
)
1650 if (n
> NUM_CORE_REGS
) {
1654 tmp
= ldl_p(mem_buf
);
1673 lm32_pic_set_im(env
->pic_state
, tmp
);
1676 lm32_pic_set_ip(env
->pic_state
, tmp
);
1682 #elif defined(TARGET_XTENSA)
1684 /* Use num_core_regs to see only non-privileged registers in an unmodified gdb.
1685 * Use num_regs to see all registers. gdb modification is required for that:
1686 * reset bit 0 in the 'flags' field of the registers definitions in the
1687 * gdb/xtensa-config.c inside gdb source tree or inside gdb overlay.
1689 #define NUM_CORE_REGS (env->config->gdb_regmap.num_regs)
1690 #define num_g_regs NUM_CORE_REGS
1692 static int cpu_gdb_read_register(CPUXtensaState
*env
, uint8_t *mem_buf
, int n
)
1694 const XtensaGdbReg
*reg
= env
->config
->gdb_regmap
.reg
+ n
;
1696 if (n
< 0 || n
>= env
->config
->gdb_regmap
.num_regs
) {
1700 switch (reg
->type
) {
1706 xtensa_sync_phys_from_window(env
);
1707 GET_REG32(env
->phys_regs
[(reg
->targno
& 0xff) % env
->config
->nareg
]);
1711 GET_REG32(env
->sregs
[reg
->targno
& 0xff]);
1715 GET_REG32(env
->uregs
[reg
->targno
& 0xff]);
1719 GET_REG32(float32_val(env
->fregs
[reg
->targno
& 0x0f]));
1723 GET_REG32(env
->regs
[reg
->targno
& 0x0f]);
1727 qemu_log("%s from reg %d of unsupported type %d\n",
1728 __func__
, n
, reg
->type
);
1733 static int cpu_gdb_write_register(CPUXtensaState
*env
, uint8_t *mem_buf
, int n
)
1736 const XtensaGdbReg
*reg
= env
->config
->gdb_regmap
.reg
+ n
;
1738 if (n
< 0 || n
>= env
->config
->gdb_regmap
.num_regs
) {
1742 tmp
= ldl_p(mem_buf
);
1744 switch (reg
->type
) {
1750 env
->phys_regs
[(reg
->targno
& 0xff) % env
->config
->nareg
] = tmp
;
1751 xtensa_sync_window_from_phys(env
);
1755 env
->sregs
[reg
->targno
& 0xff] = tmp
;
1759 env
->uregs
[reg
->targno
& 0xff] = tmp
;
1763 env
->fregs
[reg
->targno
& 0x0f] = make_float32(tmp
);
1767 env
->regs
[reg
->targno
& 0x0f] = tmp
;
1771 qemu_log("%s to reg %d of unsupported type %d\n",
1772 __func__
, n
, reg
->type
);
1780 #define NUM_CORE_REGS 0
1782 static int cpu_gdb_read_register(CPUArchState
*env
, uint8_t *mem_buf
, int n
)
1787 static int cpu_gdb_write_register(CPUArchState
*env
, uint8_t *mem_buf
, int n
)
1794 #if !defined(TARGET_XTENSA)
1795 static int num_g_regs
= NUM_CORE_REGS
;
1799 /* Encode data using the encoding for 'x' packets. */
1800 static int memtox(char *buf
, const char *mem
, int len
)
1808 case '#': case '$': case '*': case '}':
1820 static const char *get_feature_xml(const char *p
, const char **newp
)
1825 static char target_xml
[1024];
1828 while (p
[len
] && p
[len
] != ':')
1833 if (strncmp(p
, "target.xml", len
) == 0) {
1834 /* Generate the XML description for this CPU. */
1835 if (!target_xml
[0]) {
1836 GDBRegisterState
*r
;
1838 snprintf(target_xml
, sizeof(target_xml
),
1839 "<?xml version=\"1.0\"?>"
1840 "<!DOCTYPE target SYSTEM \"gdb-target.dtd\">"
1842 "<xi:include href=\"%s\"/>",
1845 for (r
= first_cpu
->gdb_regs
; r
; r
= r
->next
) {
1846 pstrcat(target_xml
, sizeof(target_xml
), "<xi:include href=\"");
1847 pstrcat(target_xml
, sizeof(target_xml
), r
->xml
);
1848 pstrcat(target_xml
, sizeof(target_xml
), "\"/>");
1850 pstrcat(target_xml
, sizeof(target_xml
), "</target>");
1854 for (i
= 0; ; i
++) {
1855 name
= xml_builtin
[i
][0];
1856 if (!name
|| (strncmp(name
, p
, len
) == 0 && strlen(name
) == len
))
1859 return name
? xml_builtin
[i
][1] : NULL
;
1863 static int gdb_read_register(CPUArchState
*env
, uint8_t *mem_buf
, int reg
)
1865 GDBRegisterState
*r
;
1867 if (reg
< NUM_CORE_REGS
)
1868 return cpu_gdb_read_register(env
, mem_buf
, reg
);
1870 for (r
= env
->gdb_regs
; r
; r
= r
->next
) {
1871 if (r
->base_reg
<= reg
&& reg
< r
->base_reg
+ r
->num_regs
) {
1872 return r
->get_reg(env
, mem_buf
, reg
- r
->base_reg
);
1878 static int gdb_write_register(CPUArchState
*env
, uint8_t *mem_buf
, int reg
)
1880 GDBRegisterState
*r
;
1882 if (reg
< NUM_CORE_REGS
)
1883 return cpu_gdb_write_register(env
, mem_buf
, reg
);
1885 for (r
= env
->gdb_regs
; r
; r
= r
->next
) {
1886 if (r
->base_reg
<= reg
&& reg
< r
->base_reg
+ r
->num_regs
) {
1887 return r
->set_reg(env
, mem_buf
, reg
- r
->base_reg
);
1893 #if !defined(TARGET_XTENSA)
1894 /* Register a supplemental set of CPU registers. If g_pos is nonzero it
1895 specifies the first register number and these registers are included in
1896 a standard "g" packet. Direction is relative to gdb, i.e. get_reg is
1897 gdb reading a CPU register, and set_reg is gdb modifying a CPU register.
1900 void gdb_register_coprocessor(CPUArchState
* env
,
1901 gdb_reg_cb get_reg
, gdb_reg_cb set_reg
,
1902 int num_regs
, const char *xml
, int g_pos
)
1904 GDBRegisterState
*s
;
1905 GDBRegisterState
**p
;
1906 static int last_reg
= NUM_CORE_REGS
;
1910 /* Check for duplicates. */
1911 if (strcmp((*p
)->xml
, xml
) == 0)
1916 s
= g_new0(GDBRegisterState
, 1);
1917 s
->base_reg
= last_reg
;
1918 s
->num_regs
= num_regs
;
1919 s
->get_reg
= get_reg
;
1920 s
->set_reg
= set_reg
;
1923 /* Add to end of list. */
1924 last_reg
+= num_regs
;
1927 if (g_pos
!= s
->base_reg
) {
1928 fprintf(stderr
, "Error: Bad gdb register numbering for '%s'\n"
1929 "Expected %d got %d\n", xml
, g_pos
, s
->base_reg
);
1931 num_g_regs
= last_reg
;
1937 #ifndef CONFIG_USER_ONLY
1938 static const int xlat_gdb_type
[] = {
1939 [GDB_WATCHPOINT_WRITE
] = BP_GDB
| BP_MEM_WRITE
,
1940 [GDB_WATCHPOINT_READ
] = BP_GDB
| BP_MEM_READ
,
1941 [GDB_WATCHPOINT_ACCESS
] = BP_GDB
| BP_MEM_ACCESS
,
1945 static int gdb_breakpoint_insert(target_ulong addr
, target_ulong len
, int type
)
1951 return kvm_insert_breakpoint(gdbserver_state
->c_cpu
, addr
, len
, type
);
1954 case GDB_BREAKPOINT_SW
:
1955 case GDB_BREAKPOINT_HW
:
1956 for (env
= first_cpu
; env
!= NULL
; env
= env
->next_cpu
) {
1957 err
= cpu_breakpoint_insert(env
, addr
, BP_GDB
, NULL
);
1962 #ifndef CONFIG_USER_ONLY
1963 case GDB_WATCHPOINT_WRITE
:
1964 case GDB_WATCHPOINT_READ
:
1965 case GDB_WATCHPOINT_ACCESS
:
1966 for (env
= first_cpu
; env
!= NULL
; env
= env
->next_cpu
) {
1967 err
= cpu_watchpoint_insert(env
, addr
, len
, xlat_gdb_type
[type
],
1979 static int gdb_breakpoint_remove(target_ulong addr
, target_ulong len
, int type
)
1985 return kvm_remove_breakpoint(gdbserver_state
->c_cpu
, addr
, len
, type
);
1988 case GDB_BREAKPOINT_SW
:
1989 case GDB_BREAKPOINT_HW
:
1990 for (env
= first_cpu
; env
!= NULL
; env
= env
->next_cpu
) {
1991 err
= cpu_breakpoint_remove(env
, addr
, BP_GDB
);
1996 #ifndef CONFIG_USER_ONLY
1997 case GDB_WATCHPOINT_WRITE
:
1998 case GDB_WATCHPOINT_READ
:
1999 case GDB_WATCHPOINT_ACCESS
:
2000 for (env
= first_cpu
; env
!= NULL
; env
= env
->next_cpu
) {
2001 err
= cpu_watchpoint_remove(env
, addr
, len
, xlat_gdb_type
[type
]);
2012 static void gdb_breakpoint_remove_all(void)
2016 if (kvm_enabled()) {
2017 kvm_remove_all_breakpoints(gdbserver_state
->c_cpu
);
2021 for (env
= first_cpu
; env
!= NULL
; env
= env
->next_cpu
) {
2022 cpu_breakpoint_remove_all(env
, BP_GDB
);
2023 #ifndef CONFIG_USER_ONLY
2024 cpu_watchpoint_remove_all(env
, BP_GDB
);
2029 static void gdb_set_cpu_pc(GDBState
*s
, target_ulong pc
)
2031 cpu_synchronize_state(s
->c_cpu
);
2032 #if defined(TARGET_I386)
2034 #elif defined (TARGET_PPC)
2036 #elif defined (TARGET_SPARC)
2038 s
->c_cpu
->npc
= pc
+ 4;
2039 #elif defined (TARGET_ARM)
2040 s
->c_cpu
->regs
[15] = pc
;
2041 #elif defined (TARGET_SH4)
2043 #elif defined (TARGET_MIPS)
2044 s
->c_cpu
->active_tc
.PC
= pc
& ~(target_ulong
)1;
2046 s
->c_cpu
->hflags
|= MIPS_HFLAG_M16
;
2048 s
->c_cpu
->hflags
&= ~(MIPS_HFLAG_M16
);
2050 #elif defined (TARGET_MICROBLAZE)
2051 s
->c_cpu
->sregs
[SR_PC
] = pc
;
2052 #elif defined(TARGET_OPENRISC)
2054 #elif defined (TARGET_CRIS)
2056 #elif defined (TARGET_ALPHA)
2058 #elif defined (TARGET_S390X)
2059 s
->c_cpu
->psw
.addr
= pc
;
2060 #elif defined (TARGET_LM32)
2062 #elif defined(TARGET_XTENSA)
2067 static CPUArchState
*find_cpu(uint32_t thread_id
)
2072 for (env
= first_cpu
; env
!= NULL
; env
= env
->next_cpu
) {
2073 cpu
= ENV_GET_CPU(env
);
2074 if (cpu_index(cpu
) == thread_id
) {
2082 static int gdb_handle_packet(GDBState
*s
, const char *line_buf
)
2087 int ch
, reg_size
, type
, res
;
2088 char buf
[MAX_PACKET_LENGTH
];
2089 uint8_t mem_buf
[MAX_PACKET_LENGTH
];
2091 target_ulong addr
, len
;
2094 printf("command='%s'\n", line_buf
);
2100 /* TODO: Make this return the correct value for user-mode. */
2101 snprintf(buf
, sizeof(buf
), "T%02xthread:%02x;", GDB_SIGNAL_TRAP
,
2102 cpu_index(ENV_GET_CPU(s
->c_cpu
)));
2104 /* Remove all the breakpoints when this query is issued,
2105 * because gdb is doing and initial connect and the state
2106 * should be cleaned up.
2108 gdb_breakpoint_remove_all();
2112 addr
= strtoull(p
, (char **)&p
, 16);
2113 gdb_set_cpu_pc(s
, addr
);
2119 s
->signal
= gdb_signal_to_target (strtoul(p
, (char **)&p
, 16));
2120 if (s
->signal
== -1)
2125 if (strncmp(p
, "Cont", 4) == 0) {
2126 int res_signal
, res_thread
;
2130 put_packet(s
, "vCont;c;C;s;S");
2145 if (action
== 'C' || action
== 'S') {
2146 signal
= strtoul(p
, (char **)&p
, 16);
2147 } else if (action
!= 'c' && action
!= 's') {
2153 thread
= strtoull(p
+1, (char **)&p
, 16);
2155 action
= tolower(action
);
2156 if (res
== 0 || (res
== 'c' && action
== 's')) {
2158 res_signal
= signal
;
2159 res_thread
= thread
;
2163 if (res_thread
!= -1 && res_thread
!= 0) {
2164 env
= find_cpu(res_thread
);
2166 put_packet(s
, "E22");
2172 cpu_single_step(s
->c_cpu
, sstep_flags
);
2174 s
->signal
= res_signal
;
2180 goto unknown_command
;
2183 #ifdef CONFIG_USER_ONLY
2184 /* Kill the target */
2185 fprintf(stderr
, "\nQEMU: Terminated via GDBstub\n");
2190 gdb_breakpoint_remove_all();
2191 gdb_syscall_mode
= GDB_SYS_DISABLED
;
2193 put_packet(s
, "OK");
2197 addr
= strtoull(p
, (char **)&p
, 16);
2198 gdb_set_cpu_pc(s
, addr
);
2200 cpu_single_step(s
->c_cpu
, sstep_flags
);
2208 ret
= strtoull(p
, (char **)&p
, 16);
2211 err
= strtoull(p
, (char **)&p
, 16);
2218 if (s
->current_syscall_cb
) {
2219 s
->current_syscall_cb(s
->c_cpu
, ret
, err
);
2220 s
->current_syscall_cb
= NULL
;
2223 put_packet(s
, "T02");
2230 cpu_synchronize_state(s
->g_cpu
);
2233 for (addr
= 0; addr
< num_g_regs
; addr
++) {
2234 reg_size
= gdb_read_register(s
->g_cpu
, mem_buf
+ len
, addr
);
2237 memtohex(buf
, mem_buf
, len
);
2241 cpu_synchronize_state(s
->g_cpu
);
2243 registers
= mem_buf
;
2244 len
= strlen(p
) / 2;
2245 hextomem((uint8_t *)registers
, p
, len
);
2246 for (addr
= 0; addr
< num_g_regs
&& len
> 0; addr
++) {
2247 reg_size
= gdb_write_register(s
->g_cpu
, registers
, addr
);
2249 registers
+= reg_size
;
2251 put_packet(s
, "OK");
2254 addr
= strtoull(p
, (char **)&p
, 16);
2257 len
= strtoull(p
, NULL
, 16);
2258 if (target_memory_rw_debug(s
->g_cpu
, addr
, mem_buf
, len
, 0) != 0) {
2259 put_packet (s
, "E14");
2261 memtohex(buf
, mem_buf
, len
);
2266 addr
= strtoull(p
, (char **)&p
, 16);
2269 len
= strtoull(p
, (char **)&p
, 16);
2272 hextomem(mem_buf
, p
, len
);
2273 if (target_memory_rw_debug(s
->g_cpu
, addr
, mem_buf
, len
, 1) != 0) {
2274 put_packet(s
, "E14");
2276 put_packet(s
, "OK");
2280 /* Older gdb are really dumb, and don't use 'g' if 'p' is avaialable.
2281 This works, but can be very slow. Anything new enough to
2282 understand XML also knows how to use this properly. */
2284 goto unknown_command
;
2285 addr
= strtoull(p
, (char **)&p
, 16);
2286 reg_size
= gdb_read_register(s
->g_cpu
, mem_buf
, addr
);
2288 memtohex(buf
, mem_buf
, reg_size
);
2291 put_packet(s
, "E14");
2296 goto unknown_command
;
2297 addr
= strtoull(p
, (char **)&p
, 16);
2300 reg_size
= strlen(p
) / 2;
2301 hextomem(mem_buf
, p
, reg_size
);
2302 gdb_write_register(s
->g_cpu
, mem_buf
, addr
);
2303 put_packet(s
, "OK");
2307 type
= strtoul(p
, (char **)&p
, 16);
2310 addr
= strtoull(p
, (char **)&p
, 16);
2313 len
= strtoull(p
, (char **)&p
, 16);
2315 res
= gdb_breakpoint_insert(addr
, len
, type
);
2317 res
= gdb_breakpoint_remove(addr
, len
, type
);
2319 put_packet(s
, "OK");
2320 else if (res
== -ENOSYS
)
2323 put_packet(s
, "E22");
2327 thread
= strtoull(p
, (char **)&p
, 16);
2328 if (thread
== -1 || thread
== 0) {
2329 put_packet(s
, "OK");
2332 env
= find_cpu(thread
);
2334 put_packet(s
, "E22");
2340 put_packet(s
, "OK");
2344 put_packet(s
, "OK");
2347 put_packet(s
, "E22");
2352 thread
= strtoull(p
, (char **)&p
, 16);
2353 env
= find_cpu(thread
);
2356 put_packet(s
, "OK");
2358 put_packet(s
, "E22");
2363 /* parse any 'q' packets here */
2364 if (!strcmp(p
,"qemu.sstepbits")) {
2365 /* Query Breakpoint bit definitions */
2366 snprintf(buf
, sizeof(buf
), "ENABLE=%x,NOIRQ=%x,NOTIMER=%x",
2372 } else if (strncmp(p
,"qemu.sstep",10) == 0) {
2373 /* Display or change the sstep_flags */
2376 /* Display current setting */
2377 snprintf(buf
, sizeof(buf
), "0x%x", sstep_flags
);
2382 type
= strtoul(p
, (char **)&p
, 16);
2384 put_packet(s
, "OK");
2386 } else if (strcmp(p
,"C") == 0) {
2387 /* "Current thread" remains vague in the spec, so always return
2388 * the first CPU (gdb returns the first thread). */
2389 put_packet(s
, "QC1");
2391 } else if (strcmp(p
,"fThreadInfo") == 0) {
2392 s
->query_cpu
= first_cpu
;
2393 goto report_cpuinfo
;
2394 } else if (strcmp(p
,"sThreadInfo") == 0) {
2397 snprintf(buf
, sizeof(buf
), "m%x",
2398 cpu_index(ENV_GET_CPU(s
->query_cpu
)));
2400 s
->query_cpu
= s
->query_cpu
->next_cpu
;
2404 } else if (strncmp(p
,"ThreadExtraInfo,", 16) == 0) {
2405 thread
= strtoull(p
+16, (char **)&p
, 16);
2406 env
= find_cpu(thread
);
2408 CPUState
*cpu
= ENV_GET_CPU(env
);
2409 cpu_synchronize_state(env
);
2410 len
= snprintf((char *)mem_buf
, sizeof(mem_buf
),
2411 "CPU#%d [%s]", cpu
->cpu_index
,
2412 cpu
->halted
? "halted " : "running");
2413 memtohex(buf
, mem_buf
, len
);
2418 #ifdef CONFIG_USER_ONLY
2419 else if (strncmp(p
, "Offsets", 7) == 0) {
2420 TaskState
*ts
= s
->c_cpu
->opaque
;
2422 snprintf(buf
, sizeof(buf
),
2423 "Text=" TARGET_ABI_FMT_lx
";Data=" TARGET_ABI_FMT_lx
2424 ";Bss=" TARGET_ABI_FMT_lx
,
2425 ts
->info
->code_offset
,
2426 ts
->info
->data_offset
,
2427 ts
->info
->data_offset
);
2431 #else /* !CONFIG_USER_ONLY */
2432 else if (strncmp(p
, "Rcmd,", 5) == 0) {
2433 int len
= strlen(p
+ 5);
2435 if ((len
% 2) != 0) {
2436 put_packet(s
, "E01");
2439 hextomem(mem_buf
, p
+ 5, len
);
2442 qemu_chr_be_write(s
->mon_chr
, mem_buf
, len
);
2443 put_packet(s
, "OK");
2446 #endif /* !CONFIG_USER_ONLY */
2447 if (strncmp(p
, "Supported", 9) == 0) {
2448 snprintf(buf
, sizeof(buf
), "PacketSize=%x", MAX_PACKET_LENGTH
);
2450 pstrcat(buf
, sizeof(buf
), ";qXfer:features:read+");
2456 if (strncmp(p
, "Xfer:features:read:", 19) == 0) {
2458 target_ulong total_len
;
2462 xml
= get_feature_xml(p
, &p
);
2464 snprintf(buf
, sizeof(buf
), "E00");
2471 addr
= strtoul(p
, (char **)&p
, 16);
2474 len
= strtoul(p
, (char **)&p
, 16);
2476 total_len
= strlen(xml
);
2477 if (addr
> total_len
) {
2478 snprintf(buf
, sizeof(buf
), "E00");
2482 if (len
> (MAX_PACKET_LENGTH
- 5) / 2)
2483 len
= (MAX_PACKET_LENGTH
- 5) / 2;
2484 if (len
< total_len
- addr
) {
2486 len
= memtox(buf
+ 1, xml
+ addr
, len
);
2489 len
= memtox(buf
+ 1, xml
+ addr
, total_len
- addr
);
2491 put_packet_binary(s
, buf
, len
+ 1);
2495 /* Unrecognised 'q' command. */
2496 goto unknown_command
;
2500 /* put empty packet */
2508 void gdb_set_stop_cpu(CPUArchState
*env
)
2510 gdbserver_state
->c_cpu
= env
;
2511 gdbserver_state
->g_cpu
= env
;
2514 #ifndef CONFIG_USER_ONLY
2515 static void gdb_vm_state_change(void *opaque
, int running
, RunState state
)
2517 GDBState
*s
= gdbserver_state
;
2518 CPUArchState
*env
= s
->c_cpu
;
2519 CPUState
*cpu
= ENV_GET_CPU(env
);
2524 if (running
|| s
->state
== RS_INACTIVE
) {
2527 /* Is there a GDB syscall waiting to be sent? */
2528 if (s
->current_syscall_cb
) {
2529 put_packet(s
, s
->syscall_buf
);
2533 case RUN_STATE_DEBUG
:
2534 if (env
->watchpoint_hit
) {
2535 switch (env
->watchpoint_hit
->flags
& BP_MEM_ACCESS
) {
2546 snprintf(buf
, sizeof(buf
),
2547 "T%02xthread:%02x;%swatch:" TARGET_FMT_lx
";",
2548 GDB_SIGNAL_TRAP
, cpu_index(cpu
), type
,
2549 env
->watchpoint_hit
->vaddr
);
2550 env
->watchpoint_hit
= NULL
;
2554 ret
= GDB_SIGNAL_TRAP
;
2556 case RUN_STATE_PAUSED
:
2557 ret
= GDB_SIGNAL_INT
;
2559 case RUN_STATE_SHUTDOWN
:
2560 ret
= GDB_SIGNAL_QUIT
;
2562 case RUN_STATE_IO_ERROR
:
2563 ret
= GDB_SIGNAL_IO
;
2565 case RUN_STATE_WATCHDOG
:
2566 ret
= GDB_SIGNAL_ALRM
;
2568 case RUN_STATE_INTERNAL_ERROR
:
2569 ret
= GDB_SIGNAL_ABRT
;
2571 case RUN_STATE_SAVE_VM
:
2572 case RUN_STATE_RESTORE_VM
:
2574 case RUN_STATE_FINISH_MIGRATE
:
2575 ret
= GDB_SIGNAL_XCPU
;
2578 ret
= GDB_SIGNAL_UNKNOWN
;
2581 snprintf(buf
, sizeof(buf
), "T%02xthread:%02x;", ret
, cpu_index(cpu
));
2586 /* disable single step if it was enabled */
2587 cpu_single_step(env
, 0);
2591 /* Send a gdb syscall request.
2592 This accepts limited printf-style format specifiers, specifically:
2593 %x - target_ulong argument printed in hex.
2594 %lx - 64-bit argument printed in hex.
2595 %s - string pointer (target_ulong) and length (int) pair. */
2596 void gdb_do_syscall(gdb_syscall_complete_cb cb
, const char *fmt
, ...)
2605 s
= gdbserver_state
;
2608 s
->current_syscall_cb
= cb
;
2609 #ifndef CONFIG_USER_ONLY
2610 vm_stop(RUN_STATE_DEBUG
);
2614 p_end
= &s
->syscall_buf
[sizeof(s
->syscall_buf
)];
2621 addr
= va_arg(va
, target_ulong
);
2622 p
+= snprintf(p
, p_end
- p
, TARGET_FMT_lx
, addr
);
2625 if (*(fmt
++) != 'x')
2627 i64
= va_arg(va
, uint64_t);
2628 p
+= snprintf(p
, p_end
- p
, "%" PRIx64
, i64
);
2631 addr
= va_arg(va
, target_ulong
);
2632 p
+= snprintf(p
, p_end
- p
, TARGET_FMT_lx
"/%x",
2633 addr
, va_arg(va
, int));
2637 fprintf(stderr
, "gdbstub: Bad syscall format string '%s'\n",
2647 #ifdef CONFIG_USER_ONLY
2648 put_packet(s
, s
->syscall_buf
);
2649 gdb_handlesig(s
->c_cpu
, 0);
2651 /* In this case wait to send the syscall packet until notification that
2652 the CPU has stopped. This must be done because if the packet is sent
2653 now the reply from the syscall request could be received while the CPU
2654 is still in the running state, which can cause packets to be dropped
2655 and state transition 'T' packets to be sent while the syscall is still
2661 static void gdb_read_byte(GDBState
*s
, int ch
)
2666 #ifndef CONFIG_USER_ONLY
2667 if (s
->last_packet_len
) {
2668 /* Waiting for a response to the last packet. If we see the start
2669 of a new command then abandon the previous response. */
2672 printf("Got NACK, retransmitting\n");
2674 put_buffer(s
, (uint8_t *)s
->last_packet
, s
->last_packet_len
);
2678 printf("Got ACK\n");
2680 printf("Got '%c' when expecting ACK/NACK\n", ch
);
2682 if (ch
== '+' || ch
== '$')
2683 s
->last_packet_len
= 0;
2687 if (runstate_is_running()) {
2688 /* when the CPU is running, we cannot do anything except stop
2689 it when receiving a char */
2690 vm_stop(RUN_STATE_PAUSED
);
2697 s
->line_buf_index
= 0;
2698 s
->state
= RS_GETLINE
;
2703 s
->state
= RS_CHKSUM1
;
2704 } else if (s
->line_buf_index
>= sizeof(s
->line_buf
) - 1) {
2707 s
->line_buf
[s
->line_buf_index
++] = ch
;
2711 s
->line_buf
[s
->line_buf_index
] = '\0';
2712 s
->line_csum
= fromhex(ch
) << 4;
2713 s
->state
= RS_CHKSUM2
;
2716 s
->line_csum
|= fromhex(ch
);
2718 for(i
= 0; i
< s
->line_buf_index
; i
++) {
2719 csum
+= s
->line_buf
[i
];
2721 if (s
->line_csum
!= (csum
& 0xff)) {
2723 put_buffer(s
, &reply
, 1);
2727 put_buffer(s
, &reply
, 1);
2728 s
->state
= gdb_handle_packet(s
, s
->line_buf
);
2737 /* Tell the remote gdb that the process has exited. */
2738 void gdb_exit(CPUArchState
*env
, int code
)
2743 s
= gdbserver_state
;
2747 #ifdef CONFIG_USER_ONLY
2748 if (gdbserver_fd
< 0 || s
->fd
< 0) {
2753 snprintf(buf
, sizeof(buf
), "W%02x", (uint8_t)code
);
2756 #ifndef CONFIG_USER_ONLY
2758 qemu_chr_delete(s
->chr
);
2763 #ifdef CONFIG_USER_ONLY
2769 s
= gdbserver_state
;
2771 if (gdbserver_fd
< 0 || s
->fd
< 0)
2778 gdb_handlesig (CPUArchState
*env
, int sig
)
2784 s
= gdbserver_state
;
2785 if (gdbserver_fd
< 0 || s
->fd
< 0)
2788 /* disable single step if it was enabled */
2789 cpu_single_step(env
, 0);
2794 snprintf(buf
, sizeof(buf
), "S%02x", target_signal_to_gdb (sig
));
2797 /* put_packet() might have detected that the peer terminated the
2804 s
->running_state
= 0;
2805 while (s
->running_state
== 0) {
2806 n
= read (s
->fd
, buf
, 256);
2811 for (i
= 0; i
< n
; i
++)
2812 gdb_read_byte (s
, buf
[i
]);
2814 else if (n
== 0 || errno
!= EAGAIN
)
2816 /* XXX: Connection closed. Should probably wait for another
2817 connection before continuing. */
2826 /* Tell the remote gdb that the process has exited due to SIG. */
2827 void gdb_signalled(CPUArchState
*env
, int sig
)
2832 s
= gdbserver_state
;
2833 if (gdbserver_fd
< 0 || s
->fd
< 0)
2836 snprintf(buf
, sizeof(buf
), "X%02x", target_signal_to_gdb (sig
));
2840 static void gdb_accept(void)
2843 struct sockaddr_in sockaddr
;
2848 len
= sizeof(sockaddr
);
2849 fd
= accept(gdbserver_fd
, (struct sockaddr
*)&sockaddr
, &len
);
2850 if (fd
< 0 && errno
!= EINTR
) {
2853 } else if (fd
>= 0) {
2855 fcntl(fd
, F_SETFD
, FD_CLOEXEC
);
2861 /* set short latency */
2862 socket_set_nodelay(fd
);
2864 s
= g_malloc0(sizeof(GDBState
));
2865 s
->c_cpu
= first_cpu
;
2866 s
->g_cpu
= first_cpu
;
2870 gdbserver_state
= s
;
2872 fcntl(fd
, F_SETFL
, O_NONBLOCK
);
2875 static int gdbserver_open(int port
)
2877 struct sockaddr_in sockaddr
;
2880 fd
= socket(PF_INET
, SOCK_STREAM
, 0);
2886 fcntl(fd
, F_SETFD
, FD_CLOEXEC
);
2889 /* allow fast reuse */
2891 setsockopt(fd
, SOL_SOCKET
, SO_REUSEADDR
, (char *)&val
, sizeof(val
));
2893 sockaddr
.sin_family
= AF_INET
;
2894 sockaddr
.sin_port
= htons(port
);
2895 sockaddr
.sin_addr
.s_addr
= 0;
2896 ret
= bind(fd
, (struct sockaddr
*)&sockaddr
, sizeof(sockaddr
));
2902 ret
= listen(fd
, 0);
2911 int gdbserver_start(int port
)
2913 gdbserver_fd
= gdbserver_open(port
);
2914 if (gdbserver_fd
< 0)
2916 /* accept connections */
2921 /* Disable gdb stub for child processes. */
2922 void gdbserver_fork(CPUArchState
*env
)
2924 GDBState
*s
= gdbserver_state
;
2925 if (gdbserver_fd
< 0 || s
->fd
< 0)
2929 cpu_breakpoint_remove_all(env
, BP_GDB
);
2930 cpu_watchpoint_remove_all(env
, BP_GDB
);
2933 static int gdb_chr_can_receive(void *opaque
)
2935 /* We can handle an arbitrarily large amount of data.
2936 Pick the maximum packet size, which is as good as anything. */
2937 return MAX_PACKET_LENGTH
;
2940 static void gdb_chr_receive(void *opaque
, const uint8_t *buf
, int size
)
2944 for (i
= 0; i
< size
; i
++) {
2945 gdb_read_byte(gdbserver_state
, buf
[i
]);
2949 static void gdb_chr_event(void *opaque
, int event
)
2952 case CHR_EVENT_OPENED
:
2953 vm_stop(RUN_STATE_PAUSED
);
2961 static void gdb_monitor_output(GDBState
*s
, const char *msg
, int len
)
2963 char buf
[MAX_PACKET_LENGTH
];
2966 if (len
> (MAX_PACKET_LENGTH
/2) - 1)
2967 len
= (MAX_PACKET_LENGTH
/2) - 1;
2968 memtohex(buf
+ 1, (uint8_t *)msg
, len
);
2972 static int gdb_monitor_write(CharDriverState
*chr
, const uint8_t *buf
, int len
)
2974 const char *p
= (const char *)buf
;
2977 max_sz
= (sizeof(gdbserver_state
->last_packet
) - 2) / 2;
2979 if (len
<= max_sz
) {
2980 gdb_monitor_output(gdbserver_state
, p
, len
);
2983 gdb_monitor_output(gdbserver_state
, p
, max_sz
);
2991 static void gdb_sigterm_handler(int signal
)
2993 if (runstate_is_running()) {
2994 vm_stop(RUN_STATE_PAUSED
);
2999 int gdbserver_start(const char *device
)
3002 char gdbstub_device_name
[128];
3003 CharDriverState
*chr
= NULL
;
3004 CharDriverState
*mon_chr
;
3008 if (strcmp(device
, "none") != 0) {
3009 if (strstart(device
, "tcp:", NULL
)) {
3010 /* enforce required TCP attributes */
3011 snprintf(gdbstub_device_name
, sizeof(gdbstub_device_name
),
3012 "%s,nowait,nodelay,server", device
);
3013 device
= gdbstub_device_name
;
3016 else if (strcmp(device
, "stdio") == 0) {
3017 struct sigaction act
;
3019 memset(&act
, 0, sizeof(act
));
3020 act
.sa_handler
= gdb_sigterm_handler
;
3021 sigaction(SIGINT
, &act
, NULL
);
3024 chr
= qemu_chr_new("gdb", device
, NULL
);
3028 qemu_chr_add_handlers(chr
, gdb_chr_can_receive
, gdb_chr_receive
,
3029 gdb_chr_event
, NULL
);
3032 s
= gdbserver_state
;
3034 s
= g_malloc0(sizeof(GDBState
));
3035 gdbserver_state
= s
;
3037 qemu_add_vm_change_state_handler(gdb_vm_state_change
, NULL
);
3039 /* Initialize a monitor terminal for gdb */
3040 mon_chr
= g_malloc0(sizeof(*mon_chr
));
3041 mon_chr
->chr_write
= gdb_monitor_write
;
3042 monitor_init(mon_chr
, 0);
3045 qemu_chr_delete(s
->chr
);
3046 mon_chr
= s
->mon_chr
;
3047 memset(s
, 0, sizeof(GDBState
));
3049 s
->c_cpu
= first_cpu
;
3050 s
->g_cpu
= first_cpu
;
3052 s
->state
= chr
? RS_IDLE
: RS_INACTIVE
;
3053 s
->mon_chr
= mon_chr
;
3054 s
->current_syscall_cb
= NULL
;