|  | /* | 
|  | * gdb server stub | 
|  | * | 
|  | * Copyright (c) 2003-2005 Fabrice Bellard | 
|  | * | 
|  | * This library is free software; you can redistribute it and/or | 
|  | * modify it under the terms of the GNU Lesser General Public | 
|  | * License as published by the Free Software Foundation; either | 
|  | * version 2 of the License, or (at your option) any later version. | 
|  | * | 
|  | * This library is distributed in the hope that it will be useful, | 
|  | * but WITHOUT ANY WARRANTY; without even the implied warranty of | 
|  | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU | 
|  | * Lesser General Public License for more details. | 
|  | * | 
|  | * You should have received a copy of the GNU Lesser General Public | 
|  | * License along with this library; if not, see <http://www.gnu.org/licenses/>. | 
|  | */ | 
|  | #include "config.h" | 
|  | #include "qemu-common.h" | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | #include <stdlib.h> | 
|  | #include <stdio.h> | 
|  | #include <stdarg.h> | 
|  | #include <string.h> | 
|  | #include <errno.h> | 
|  | #include <unistd.h> | 
|  | #include <fcntl.h> | 
|  |  | 
|  | #include "qemu.h" | 
|  | #else | 
|  | #include "monitor/monitor.h" | 
|  | #include "sysemu/char.h" | 
|  | #include "sysemu/sysemu.h" | 
|  | #include "exec/gdbstub.h" | 
|  | #endif | 
|  |  | 
|  | #define MAX_PACKET_LENGTH 4096 | 
|  |  | 
|  | #include "cpu.h" | 
|  | #include "qemu/sockets.h" | 
|  | #include "sysemu/kvm.h" | 
|  |  | 
|  | static inline int target_memory_rw_debug(CPUState *cpu, target_ulong addr, | 
|  | uint8_t *buf, int len, bool is_write) | 
|  | { | 
|  | CPUClass *cc = CPU_GET_CLASS(cpu); | 
|  |  | 
|  | if (cc->memory_rw_debug) { | 
|  | return cc->memory_rw_debug(cpu, addr, buf, len, is_write); | 
|  | } | 
|  | return cpu_memory_rw_debug(cpu, addr, buf, len, is_write); | 
|  | } | 
|  |  | 
|  | enum { | 
|  | GDB_SIGNAL_0 = 0, | 
|  | GDB_SIGNAL_INT = 2, | 
|  | GDB_SIGNAL_QUIT = 3, | 
|  | GDB_SIGNAL_TRAP = 5, | 
|  | GDB_SIGNAL_ABRT = 6, | 
|  | GDB_SIGNAL_ALRM = 14, | 
|  | GDB_SIGNAL_IO = 23, | 
|  | GDB_SIGNAL_XCPU = 24, | 
|  | GDB_SIGNAL_UNKNOWN = 143 | 
|  | }; | 
|  |  | 
|  | #ifdef CONFIG_USER_ONLY | 
|  |  | 
|  | /* Map target signal numbers to GDB protocol signal numbers and vice | 
|  | * versa.  For user emulation's currently supported systems, we can | 
|  | * assume most signals are defined. | 
|  | */ | 
|  |  | 
|  | static int gdb_signal_table[] = { | 
|  | 0, | 
|  | TARGET_SIGHUP, | 
|  | TARGET_SIGINT, | 
|  | TARGET_SIGQUIT, | 
|  | TARGET_SIGILL, | 
|  | TARGET_SIGTRAP, | 
|  | TARGET_SIGABRT, | 
|  | -1, /* SIGEMT */ | 
|  | TARGET_SIGFPE, | 
|  | TARGET_SIGKILL, | 
|  | TARGET_SIGBUS, | 
|  | TARGET_SIGSEGV, | 
|  | TARGET_SIGSYS, | 
|  | TARGET_SIGPIPE, | 
|  | TARGET_SIGALRM, | 
|  | TARGET_SIGTERM, | 
|  | TARGET_SIGURG, | 
|  | TARGET_SIGSTOP, | 
|  | TARGET_SIGTSTP, | 
|  | TARGET_SIGCONT, | 
|  | TARGET_SIGCHLD, | 
|  | TARGET_SIGTTIN, | 
|  | TARGET_SIGTTOU, | 
|  | TARGET_SIGIO, | 
|  | TARGET_SIGXCPU, | 
|  | TARGET_SIGXFSZ, | 
|  | TARGET_SIGVTALRM, | 
|  | TARGET_SIGPROF, | 
|  | TARGET_SIGWINCH, | 
|  | -1, /* SIGLOST */ | 
|  | TARGET_SIGUSR1, | 
|  | TARGET_SIGUSR2, | 
|  | #ifdef TARGET_SIGPWR | 
|  | TARGET_SIGPWR, | 
|  | #else | 
|  | -1, | 
|  | #endif | 
|  | -1, /* SIGPOLL */ | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | #ifdef __SIGRTMIN | 
|  | __SIGRTMIN + 1, | 
|  | __SIGRTMIN + 2, | 
|  | __SIGRTMIN + 3, | 
|  | __SIGRTMIN + 4, | 
|  | __SIGRTMIN + 5, | 
|  | __SIGRTMIN + 6, | 
|  | __SIGRTMIN + 7, | 
|  | __SIGRTMIN + 8, | 
|  | __SIGRTMIN + 9, | 
|  | __SIGRTMIN + 10, | 
|  | __SIGRTMIN + 11, | 
|  | __SIGRTMIN + 12, | 
|  | __SIGRTMIN + 13, | 
|  | __SIGRTMIN + 14, | 
|  | __SIGRTMIN + 15, | 
|  | __SIGRTMIN + 16, | 
|  | __SIGRTMIN + 17, | 
|  | __SIGRTMIN + 18, | 
|  | __SIGRTMIN + 19, | 
|  | __SIGRTMIN + 20, | 
|  | __SIGRTMIN + 21, | 
|  | __SIGRTMIN + 22, | 
|  | __SIGRTMIN + 23, | 
|  | __SIGRTMIN + 24, | 
|  | __SIGRTMIN + 25, | 
|  | __SIGRTMIN + 26, | 
|  | __SIGRTMIN + 27, | 
|  | __SIGRTMIN + 28, | 
|  | __SIGRTMIN + 29, | 
|  | __SIGRTMIN + 30, | 
|  | __SIGRTMIN + 31, | 
|  | -1, /* SIGCANCEL */ | 
|  | __SIGRTMIN, | 
|  | __SIGRTMIN + 32, | 
|  | __SIGRTMIN + 33, | 
|  | __SIGRTMIN + 34, | 
|  | __SIGRTMIN + 35, | 
|  | __SIGRTMIN + 36, | 
|  | __SIGRTMIN + 37, | 
|  | __SIGRTMIN + 38, | 
|  | __SIGRTMIN + 39, | 
|  | __SIGRTMIN + 40, | 
|  | __SIGRTMIN + 41, | 
|  | __SIGRTMIN + 42, | 
|  | __SIGRTMIN + 43, | 
|  | __SIGRTMIN + 44, | 
|  | __SIGRTMIN + 45, | 
|  | __SIGRTMIN + 46, | 
|  | __SIGRTMIN + 47, | 
|  | __SIGRTMIN + 48, | 
|  | __SIGRTMIN + 49, | 
|  | __SIGRTMIN + 50, | 
|  | __SIGRTMIN + 51, | 
|  | __SIGRTMIN + 52, | 
|  | __SIGRTMIN + 53, | 
|  | __SIGRTMIN + 54, | 
|  | __SIGRTMIN + 55, | 
|  | __SIGRTMIN + 56, | 
|  | __SIGRTMIN + 57, | 
|  | __SIGRTMIN + 58, | 
|  | __SIGRTMIN + 59, | 
|  | __SIGRTMIN + 60, | 
|  | __SIGRTMIN + 61, | 
|  | __SIGRTMIN + 62, | 
|  | __SIGRTMIN + 63, | 
|  | __SIGRTMIN + 64, | 
|  | __SIGRTMIN + 65, | 
|  | __SIGRTMIN + 66, | 
|  | __SIGRTMIN + 67, | 
|  | __SIGRTMIN + 68, | 
|  | __SIGRTMIN + 69, | 
|  | __SIGRTMIN + 70, | 
|  | __SIGRTMIN + 71, | 
|  | __SIGRTMIN + 72, | 
|  | __SIGRTMIN + 73, | 
|  | __SIGRTMIN + 74, | 
|  | __SIGRTMIN + 75, | 
|  | __SIGRTMIN + 76, | 
|  | __SIGRTMIN + 77, | 
|  | __SIGRTMIN + 78, | 
|  | __SIGRTMIN + 79, | 
|  | __SIGRTMIN + 80, | 
|  | __SIGRTMIN + 81, | 
|  | __SIGRTMIN + 82, | 
|  | __SIGRTMIN + 83, | 
|  | __SIGRTMIN + 84, | 
|  | __SIGRTMIN + 85, | 
|  | __SIGRTMIN + 86, | 
|  | __SIGRTMIN + 87, | 
|  | __SIGRTMIN + 88, | 
|  | __SIGRTMIN + 89, | 
|  | __SIGRTMIN + 90, | 
|  | __SIGRTMIN + 91, | 
|  | __SIGRTMIN + 92, | 
|  | __SIGRTMIN + 93, | 
|  | __SIGRTMIN + 94, | 
|  | __SIGRTMIN + 95, | 
|  | -1, /* SIGINFO */ | 
|  | -1, /* UNKNOWN */ | 
|  | -1, /* DEFAULT */ | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | -1, | 
|  | -1 | 
|  | #endif | 
|  | }; | 
|  | #else | 
|  | /* In system mode we only need SIGINT and SIGTRAP; other signals | 
|  | are not yet supported.  */ | 
|  |  | 
|  | enum { | 
|  | TARGET_SIGINT = 2, | 
|  | TARGET_SIGTRAP = 5 | 
|  | }; | 
|  |  | 
|  | static int gdb_signal_table[] = { | 
|  | -1, | 
|  | -1, | 
|  | TARGET_SIGINT, | 
|  | -1, | 
|  | -1, | 
|  | TARGET_SIGTRAP | 
|  | }; | 
|  | #endif | 
|  |  | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | static int target_signal_to_gdb (int sig) | 
|  | { | 
|  | int i; | 
|  | for (i = 0; i < ARRAY_SIZE (gdb_signal_table); i++) | 
|  | if (gdb_signal_table[i] == sig) | 
|  | return i; | 
|  | return GDB_SIGNAL_UNKNOWN; | 
|  | } | 
|  | #endif | 
|  |  | 
|  | static int gdb_signal_to_target (int sig) | 
|  | { | 
|  | if (sig < ARRAY_SIZE (gdb_signal_table)) | 
|  | return gdb_signal_table[sig]; | 
|  | else | 
|  | return -1; | 
|  | } | 
|  |  | 
|  | //#define DEBUG_GDB | 
|  |  | 
|  | typedef struct GDBRegisterState { | 
|  | int base_reg; | 
|  | int num_regs; | 
|  | gdb_reg_cb get_reg; | 
|  | gdb_reg_cb set_reg; | 
|  | const char *xml; | 
|  | struct GDBRegisterState *next; | 
|  | } GDBRegisterState; | 
|  |  | 
|  | enum RSState { | 
|  | RS_INACTIVE, | 
|  | RS_IDLE, | 
|  | RS_GETLINE, | 
|  | RS_CHKSUM1, | 
|  | RS_CHKSUM2, | 
|  | }; | 
|  | typedef struct GDBState { | 
|  | CPUState *c_cpu; /* current CPU for step/continue ops */ | 
|  | CPUState *g_cpu; /* current CPU for other ops */ | 
|  | CPUState *query_cpu; /* for q{f|s}ThreadInfo */ | 
|  | enum RSState state; /* parsing state */ | 
|  | char line_buf[MAX_PACKET_LENGTH]; | 
|  | int line_buf_index; | 
|  | int line_csum; | 
|  | uint8_t last_packet[MAX_PACKET_LENGTH + 4]; | 
|  | int last_packet_len; | 
|  | int signal; | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | int fd; | 
|  | int running_state; | 
|  | #else | 
|  | CharDriverState *chr; | 
|  | CharDriverState *mon_chr; | 
|  | #endif | 
|  | char syscall_buf[256]; | 
|  | gdb_syscall_complete_cb current_syscall_cb; | 
|  | } GDBState; | 
|  |  | 
|  | /* By default use no IRQs and no timers while single stepping so as to | 
|  | * make single stepping like an ICE HW step. | 
|  | */ | 
|  | static int sstep_flags = SSTEP_ENABLE|SSTEP_NOIRQ|SSTEP_NOTIMER; | 
|  |  | 
|  | static GDBState *gdbserver_state; | 
|  |  | 
|  | bool gdb_has_xml; | 
|  |  | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | /* XXX: This is not thread safe.  Do we care?  */ | 
|  | static int gdbserver_fd = -1; | 
|  |  | 
|  | static int get_char(GDBState *s) | 
|  | { | 
|  | uint8_t ch; | 
|  | int ret; | 
|  |  | 
|  | for(;;) { | 
|  | ret = qemu_recv(s->fd, &ch, 1, 0); | 
|  | if (ret < 0) { | 
|  | if (errno == ECONNRESET) | 
|  | s->fd = -1; | 
|  | if (errno != EINTR && errno != EAGAIN) | 
|  | return -1; | 
|  | } else if (ret == 0) { | 
|  | close(s->fd); | 
|  | s->fd = -1; | 
|  | return -1; | 
|  | } else { | 
|  | break; | 
|  | } | 
|  | } | 
|  | return ch; | 
|  | } | 
|  | #endif | 
|  |  | 
|  | static enum { | 
|  | GDB_SYS_UNKNOWN, | 
|  | GDB_SYS_ENABLED, | 
|  | GDB_SYS_DISABLED, | 
|  | } gdb_syscall_mode; | 
|  |  | 
|  | /* If gdb is connected when the first semihosting syscall occurs then use | 
|  | remote gdb syscalls.  Otherwise use native file IO.  */ | 
|  | int use_gdb_syscalls(void) | 
|  | { | 
|  | if (gdb_syscall_mode == GDB_SYS_UNKNOWN) { | 
|  | gdb_syscall_mode = (gdbserver_state ? GDB_SYS_ENABLED | 
|  | : GDB_SYS_DISABLED); | 
|  | } | 
|  | return gdb_syscall_mode == GDB_SYS_ENABLED; | 
|  | } | 
|  |  | 
|  | /* Resume execution.  */ | 
|  | static inline void gdb_continue(GDBState *s) | 
|  | { | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | s->running_state = 1; | 
|  | #else | 
|  | if (!runstate_needs_reset()) { | 
|  | vm_start(); | 
|  | } | 
|  | #endif | 
|  | } | 
|  |  | 
|  | static void put_buffer(GDBState *s, const uint8_t *buf, int len) | 
|  | { | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | int ret; | 
|  |  | 
|  | while (len > 0) { | 
|  | ret = send(s->fd, buf, len, 0); | 
|  | if (ret < 0) { | 
|  | if (errno != EINTR && errno != EAGAIN) | 
|  | return; | 
|  | } else { | 
|  | buf += ret; | 
|  | len -= ret; | 
|  | } | 
|  | } | 
|  | #else | 
|  | qemu_chr_fe_write(s->chr, buf, len); | 
|  | #endif | 
|  | } | 
|  |  | 
|  | static inline int fromhex(int v) | 
|  | { | 
|  | if (v >= '0' && v <= '9') | 
|  | return v - '0'; | 
|  | else if (v >= 'A' && v <= 'F') | 
|  | return v - 'A' + 10; | 
|  | else if (v >= 'a' && v <= 'f') | 
|  | return v - 'a' + 10; | 
|  | else | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | static inline int tohex(int v) | 
|  | { | 
|  | if (v < 10) | 
|  | return v + '0'; | 
|  | else | 
|  | return v - 10 + 'a'; | 
|  | } | 
|  |  | 
|  | static void memtohex(char *buf, const uint8_t *mem, int len) | 
|  | { | 
|  | int i, c; | 
|  | char *q; | 
|  | q = buf; | 
|  | for(i = 0; i < len; i++) { | 
|  | c = mem[i]; | 
|  | *q++ = tohex(c >> 4); | 
|  | *q++ = tohex(c & 0xf); | 
|  | } | 
|  | *q = '\0'; | 
|  | } | 
|  |  | 
|  | static void hextomem(uint8_t *mem, const char *buf, int len) | 
|  | { | 
|  | int i; | 
|  |  | 
|  | for(i = 0; i < len; i++) { | 
|  | mem[i] = (fromhex(buf[0]) << 4) | fromhex(buf[1]); | 
|  | buf += 2; | 
|  | } | 
|  | } | 
|  |  | 
|  | /* return -1 if error, 0 if OK */ | 
|  | static int put_packet_binary(GDBState *s, const char *buf, int len) | 
|  | { | 
|  | int csum, i; | 
|  | uint8_t *p; | 
|  |  | 
|  | for(;;) { | 
|  | p = s->last_packet; | 
|  | *(p++) = '$'; | 
|  | memcpy(p, buf, len); | 
|  | p += len; | 
|  | csum = 0; | 
|  | for(i = 0; i < len; i++) { | 
|  | csum += buf[i]; | 
|  | } | 
|  | *(p++) = '#'; | 
|  | *(p++) = tohex((csum >> 4) & 0xf); | 
|  | *(p++) = tohex((csum) & 0xf); | 
|  |  | 
|  | s->last_packet_len = p - s->last_packet; | 
|  | put_buffer(s, (uint8_t *)s->last_packet, s->last_packet_len); | 
|  |  | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | i = get_char(s); | 
|  | if (i < 0) | 
|  | return -1; | 
|  | if (i == '+') | 
|  | break; | 
|  | #else | 
|  | break; | 
|  | #endif | 
|  | } | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | /* return -1 if error, 0 if OK */ | 
|  | static int put_packet(GDBState *s, const char *buf) | 
|  | { | 
|  | #ifdef DEBUG_GDB | 
|  | printf("reply='%s'\n", buf); | 
|  | #endif | 
|  |  | 
|  | return put_packet_binary(s, buf, strlen(buf)); | 
|  | } | 
|  |  | 
|  | /* Encode data using the encoding for 'x' packets.  */ | 
|  | static int memtox(char *buf, const char *mem, int len) | 
|  | { | 
|  | char *p = buf; | 
|  | char c; | 
|  |  | 
|  | while (len--) { | 
|  | c = *(mem++); | 
|  | switch (c) { | 
|  | case '#': case '$': case '*': case '}': | 
|  | *(p++) = '}'; | 
|  | *(p++) = c ^ 0x20; | 
|  | break; | 
|  | default: | 
|  | *(p++) = c; | 
|  | break; | 
|  | } | 
|  | } | 
|  | return p - buf; | 
|  | } | 
|  |  | 
|  | static const char *get_feature_xml(const char *p, const char **newp, | 
|  | CPUClass *cc) | 
|  | { | 
|  | size_t len; | 
|  | int i; | 
|  | const char *name; | 
|  | static char target_xml[1024]; | 
|  |  | 
|  | len = 0; | 
|  | while (p[len] && p[len] != ':') | 
|  | len++; | 
|  | *newp = p + len; | 
|  |  | 
|  | name = NULL; | 
|  | if (strncmp(p, "target.xml", len) == 0) { | 
|  | /* Generate the XML description for this CPU.  */ | 
|  | if (!target_xml[0]) { | 
|  | GDBRegisterState *r; | 
|  | CPUState *cpu = first_cpu; | 
|  |  | 
|  | snprintf(target_xml, sizeof(target_xml), | 
|  | "<?xml version=\"1.0\"?>" | 
|  | "<!DOCTYPE target SYSTEM \"gdb-target.dtd\">" | 
|  | "<target>" | 
|  | "<xi:include href=\"%s\"/>", | 
|  | cc->gdb_core_xml_file); | 
|  |  | 
|  | for (r = cpu->gdb_regs; r; r = r->next) { | 
|  | pstrcat(target_xml, sizeof(target_xml), "<xi:include href=\""); | 
|  | pstrcat(target_xml, sizeof(target_xml), r->xml); | 
|  | pstrcat(target_xml, sizeof(target_xml), "\"/>"); | 
|  | } | 
|  | pstrcat(target_xml, sizeof(target_xml), "</target>"); | 
|  | } | 
|  | return target_xml; | 
|  | } | 
|  | for (i = 0; ; i++) { | 
|  | name = xml_builtin[i][0]; | 
|  | if (!name || (strncmp(name, p, len) == 0 && strlen(name) == len)) | 
|  | break; | 
|  | } | 
|  | return name ? xml_builtin[i][1] : NULL; | 
|  | } | 
|  |  | 
|  | static int gdb_read_register(CPUState *cpu, uint8_t *mem_buf, int reg) | 
|  | { | 
|  | CPUClass *cc = CPU_GET_CLASS(cpu); | 
|  | CPUArchState *env = cpu->env_ptr; | 
|  | GDBRegisterState *r; | 
|  |  | 
|  | if (reg < cc->gdb_num_core_regs) { | 
|  | return cc->gdb_read_register(cpu, mem_buf, reg); | 
|  | } | 
|  |  | 
|  | for (r = cpu->gdb_regs; r; r = r->next) { | 
|  | if (r->base_reg <= reg && reg < r->base_reg + r->num_regs) { | 
|  | return r->get_reg(env, mem_buf, reg - r->base_reg); | 
|  | } | 
|  | } | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | static int gdb_write_register(CPUState *cpu, uint8_t *mem_buf, int reg) | 
|  | { | 
|  | CPUClass *cc = CPU_GET_CLASS(cpu); | 
|  | CPUArchState *env = cpu->env_ptr; | 
|  | GDBRegisterState *r; | 
|  |  | 
|  | if (reg < cc->gdb_num_core_regs) { | 
|  | return cc->gdb_write_register(cpu, mem_buf, reg); | 
|  | } | 
|  |  | 
|  | for (r = cpu->gdb_regs; r; r = r->next) { | 
|  | if (r->base_reg <= reg && reg < r->base_reg + r->num_regs) { | 
|  | return r->set_reg(env, mem_buf, reg - r->base_reg); | 
|  | } | 
|  | } | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | /* Register a supplemental set of CPU registers.  If g_pos is nonzero it | 
|  | specifies the first register number and these registers are included in | 
|  | a standard "g" packet.  Direction is relative to gdb, i.e. get_reg is | 
|  | gdb reading a CPU register, and set_reg is gdb modifying a CPU register. | 
|  | */ | 
|  |  | 
|  | void gdb_register_coprocessor(CPUState *cpu, | 
|  | gdb_reg_cb get_reg, gdb_reg_cb set_reg, | 
|  | int num_regs, const char *xml, int g_pos) | 
|  | { | 
|  | GDBRegisterState *s; | 
|  | GDBRegisterState **p; | 
|  |  | 
|  | p = &cpu->gdb_regs; | 
|  | while (*p) { | 
|  | /* Check for duplicates.  */ | 
|  | if (strcmp((*p)->xml, xml) == 0) | 
|  | return; | 
|  | p = &(*p)->next; | 
|  | } | 
|  |  | 
|  | s = g_new0(GDBRegisterState, 1); | 
|  | s->base_reg = cpu->gdb_num_regs; | 
|  | s->num_regs = num_regs; | 
|  | s->get_reg = get_reg; | 
|  | s->set_reg = set_reg; | 
|  | s->xml = xml; | 
|  |  | 
|  | /* Add to end of list.  */ | 
|  | cpu->gdb_num_regs += num_regs; | 
|  | *p = s; | 
|  | if (g_pos) { | 
|  | if (g_pos != s->base_reg) { | 
|  | fprintf(stderr, "Error: Bad gdb register numbering for '%s'\n" | 
|  | "Expected %d got %d\n", xml, g_pos, s->base_reg); | 
|  | } else { | 
|  | cpu->gdb_num_g_regs = cpu->gdb_num_regs; | 
|  | } | 
|  | } | 
|  | } | 
|  |  | 
|  | #ifndef CONFIG_USER_ONLY | 
|  | static const int xlat_gdb_type[] = { | 
|  | [GDB_WATCHPOINT_WRITE]  = BP_GDB | BP_MEM_WRITE, | 
|  | [GDB_WATCHPOINT_READ]   = BP_GDB | BP_MEM_READ, | 
|  | [GDB_WATCHPOINT_ACCESS] = BP_GDB | BP_MEM_ACCESS, | 
|  | }; | 
|  | #endif | 
|  |  | 
|  | static int gdb_breakpoint_insert(target_ulong addr, target_ulong len, int type) | 
|  | { | 
|  | CPUState *cpu; | 
|  | CPUArchState *env; | 
|  | int err = 0; | 
|  |  | 
|  | if (kvm_enabled()) { | 
|  | return kvm_insert_breakpoint(gdbserver_state->c_cpu, addr, len, type); | 
|  | } | 
|  |  | 
|  | switch (type) { | 
|  | case GDB_BREAKPOINT_SW: | 
|  | case GDB_BREAKPOINT_HW: | 
|  | CPU_FOREACH(cpu) { | 
|  | env = cpu->env_ptr; | 
|  | err = cpu_breakpoint_insert(env, addr, BP_GDB, NULL); | 
|  | if (err) | 
|  | break; | 
|  | } | 
|  | return err; | 
|  | #ifndef CONFIG_USER_ONLY | 
|  | case GDB_WATCHPOINT_WRITE: | 
|  | case GDB_WATCHPOINT_READ: | 
|  | case GDB_WATCHPOINT_ACCESS: | 
|  | CPU_FOREACH(cpu) { | 
|  | env = cpu->env_ptr; | 
|  | err = cpu_watchpoint_insert(env, addr, len, xlat_gdb_type[type], | 
|  | NULL); | 
|  | if (err) | 
|  | break; | 
|  | } | 
|  | return err; | 
|  | #endif | 
|  | default: | 
|  | return -ENOSYS; | 
|  | } | 
|  | } | 
|  |  | 
|  | static int gdb_breakpoint_remove(target_ulong addr, target_ulong len, int type) | 
|  | { | 
|  | CPUState *cpu; | 
|  | CPUArchState *env; | 
|  | int err = 0; | 
|  |  | 
|  | if (kvm_enabled()) { | 
|  | return kvm_remove_breakpoint(gdbserver_state->c_cpu, addr, len, type); | 
|  | } | 
|  |  | 
|  | switch (type) { | 
|  | case GDB_BREAKPOINT_SW: | 
|  | case GDB_BREAKPOINT_HW: | 
|  | CPU_FOREACH(cpu) { | 
|  | env = cpu->env_ptr; | 
|  | err = cpu_breakpoint_remove(env, addr, BP_GDB); | 
|  | if (err) | 
|  | break; | 
|  | } | 
|  | return err; | 
|  | #ifndef CONFIG_USER_ONLY | 
|  | case GDB_WATCHPOINT_WRITE: | 
|  | case GDB_WATCHPOINT_READ: | 
|  | case GDB_WATCHPOINT_ACCESS: | 
|  | CPU_FOREACH(cpu) { | 
|  | env = cpu->env_ptr; | 
|  | err = cpu_watchpoint_remove(env, addr, len, xlat_gdb_type[type]); | 
|  | if (err) | 
|  | break; | 
|  | } | 
|  | return err; | 
|  | #endif | 
|  | default: | 
|  | return -ENOSYS; | 
|  | } | 
|  | } | 
|  |  | 
|  | static void gdb_breakpoint_remove_all(void) | 
|  | { | 
|  | CPUState *cpu; | 
|  | CPUArchState *env; | 
|  |  | 
|  | if (kvm_enabled()) { | 
|  | kvm_remove_all_breakpoints(gdbserver_state->c_cpu); | 
|  | return; | 
|  | } | 
|  |  | 
|  | CPU_FOREACH(cpu) { | 
|  | env = cpu->env_ptr; | 
|  | cpu_breakpoint_remove_all(env, BP_GDB); | 
|  | #ifndef CONFIG_USER_ONLY | 
|  | cpu_watchpoint_remove_all(env, BP_GDB); | 
|  | #endif | 
|  | } | 
|  | } | 
|  |  | 
|  | static void gdb_set_cpu_pc(GDBState *s, target_ulong pc) | 
|  | { | 
|  | CPUState *cpu = s->c_cpu; | 
|  | CPUClass *cc = CPU_GET_CLASS(cpu); | 
|  |  | 
|  | cpu_synchronize_state(cpu); | 
|  | if (cc->set_pc) { | 
|  | cc->set_pc(cpu, pc); | 
|  | } | 
|  | } | 
|  |  | 
|  | static CPUState *find_cpu(uint32_t thread_id) | 
|  | { | 
|  | CPUState *cpu; | 
|  |  | 
|  | CPU_FOREACH(cpu) { | 
|  | if (cpu_index(cpu) == thread_id) { | 
|  | return cpu; | 
|  | } | 
|  | } | 
|  |  | 
|  | return NULL; | 
|  | } | 
|  |  | 
|  | static int gdb_handle_packet(GDBState *s, const char *line_buf) | 
|  | { | 
|  | CPUState *cpu; | 
|  | CPUClass *cc; | 
|  | const char *p; | 
|  | uint32_t thread; | 
|  | int ch, reg_size, type, res; | 
|  | char buf[MAX_PACKET_LENGTH]; | 
|  | uint8_t mem_buf[MAX_PACKET_LENGTH]; | 
|  | uint8_t *registers; | 
|  | target_ulong addr, len; | 
|  |  | 
|  | #ifdef DEBUG_GDB | 
|  | printf("command='%s'\n", line_buf); | 
|  | #endif | 
|  | p = line_buf; | 
|  | ch = *p++; | 
|  | switch(ch) { | 
|  | case '?': | 
|  | /* TODO: Make this return the correct value for user-mode.  */ | 
|  | snprintf(buf, sizeof(buf), "T%02xthread:%02x;", GDB_SIGNAL_TRAP, | 
|  | cpu_index(s->c_cpu)); | 
|  | put_packet(s, buf); | 
|  | /* Remove all the breakpoints when this query is issued, | 
|  | * because gdb is doing and initial connect and the state | 
|  | * should be cleaned up. | 
|  | */ | 
|  | gdb_breakpoint_remove_all(); | 
|  | break; | 
|  | case 'c': | 
|  | if (*p != '\0') { | 
|  | addr = strtoull(p, (char **)&p, 16); | 
|  | gdb_set_cpu_pc(s, addr); | 
|  | } | 
|  | s->signal = 0; | 
|  | gdb_continue(s); | 
|  | return RS_IDLE; | 
|  | case 'C': | 
|  | s->signal = gdb_signal_to_target (strtoul(p, (char **)&p, 16)); | 
|  | if (s->signal == -1) | 
|  | s->signal = 0; | 
|  | gdb_continue(s); | 
|  | return RS_IDLE; | 
|  | case 'v': | 
|  | if (strncmp(p, "Cont", 4) == 0) { | 
|  | int res_signal, res_thread; | 
|  |  | 
|  | p += 4; | 
|  | if (*p == '?') { | 
|  | put_packet(s, "vCont;c;C;s;S"); | 
|  | break; | 
|  | } | 
|  | res = 0; | 
|  | res_signal = 0; | 
|  | res_thread = 0; | 
|  | while (*p) { | 
|  | int action, signal; | 
|  |  | 
|  | if (*p++ != ';') { | 
|  | res = 0; | 
|  | break; | 
|  | } | 
|  | action = *p++; | 
|  | signal = 0; | 
|  | if (action == 'C' || action == 'S') { | 
|  | signal = strtoul(p, (char **)&p, 16); | 
|  | } else if (action != 'c' && action != 's') { | 
|  | res = 0; | 
|  | break; | 
|  | } | 
|  | thread = 0; | 
|  | if (*p == ':') { | 
|  | thread = strtoull(p+1, (char **)&p, 16); | 
|  | } | 
|  | action = tolower(action); | 
|  | if (res == 0 || (res == 'c' && action == 's')) { | 
|  | res = action; | 
|  | res_signal = signal; | 
|  | res_thread = thread; | 
|  | } | 
|  | } | 
|  | if (res) { | 
|  | if (res_thread != -1 && res_thread != 0) { | 
|  | cpu = find_cpu(res_thread); | 
|  | if (cpu == NULL) { | 
|  | put_packet(s, "E22"); | 
|  | break; | 
|  | } | 
|  | s->c_cpu = cpu; | 
|  | } | 
|  | if (res == 's') { | 
|  | cpu_single_step(s->c_cpu, sstep_flags); | 
|  | } | 
|  | s->signal = res_signal; | 
|  | gdb_continue(s); | 
|  | return RS_IDLE; | 
|  | } | 
|  | break; | 
|  | } else { | 
|  | goto unknown_command; | 
|  | } | 
|  | case 'k': | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | /* Kill the target */ | 
|  | fprintf(stderr, "\nQEMU: Terminated via GDBstub\n"); | 
|  | exit(0); | 
|  | #endif | 
|  | case 'D': | 
|  | /* Detach packet */ | 
|  | gdb_breakpoint_remove_all(); | 
|  | gdb_syscall_mode = GDB_SYS_DISABLED; | 
|  | gdb_continue(s); | 
|  | put_packet(s, "OK"); | 
|  | break; | 
|  | case 's': | 
|  | if (*p != '\0') { | 
|  | addr = strtoull(p, (char **)&p, 16); | 
|  | gdb_set_cpu_pc(s, addr); | 
|  | } | 
|  | cpu_single_step(s->c_cpu, sstep_flags); | 
|  | gdb_continue(s); | 
|  | return RS_IDLE; | 
|  | case 'F': | 
|  | { | 
|  | target_ulong ret; | 
|  | target_ulong err; | 
|  |  | 
|  | ret = strtoull(p, (char **)&p, 16); | 
|  | if (*p == ',') { | 
|  | p++; | 
|  | err = strtoull(p, (char **)&p, 16); | 
|  | } else { | 
|  | err = 0; | 
|  | } | 
|  | if (*p == ',') | 
|  | p++; | 
|  | type = *p; | 
|  | if (s->current_syscall_cb) { | 
|  | s->current_syscall_cb(s->c_cpu, ret, err); | 
|  | s->current_syscall_cb = NULL; | 
|  | } | 
|  | if (type == 'C') { | 
|  | put_packet(s, "T02"); | 
|  | } else { | 
|  | gdb_continue(s); | 
|  | } | 
|  | } | 
|  | break; | 
|  | case 'g': | 
|  | cpu_synchronize_state(s->g_cpu); | 
|  | len = 0; | 
|  | for (addr = 0; addr < s->g_cpu->gdb_num_g_regs; addr++) { | 
|  | reg_size = gdb_read_register(s->g_cpu, mem_buf + len, addr); | 
|  | len += reg_size; | 
|  | } | 
|  | memtohex(buf, mem_buf, len); | 
|  | put_packet(s, buf); | 
|  | break; | 
|  | case 'G': | 
|  | cpu_synchronize_state(s->g_cpu); | 
|  | registers = mem_buf; | 
|  | len = strlen(p) / 2; | 
|  | hextomem((uint8_t *)registers, p, len); | 
|  | for (addr = 0; addr < s->g_cpu->gdb_num_g_regs && len > 0; addr++) { | 
|  | reg_size = gdb_write_register(s->g_cpu, registers, addr); | 
|  | len -= reg_size; | 
|  | registers += reg_size; | 
|  | } | 
|  | put_packet(s, "OK"); | 
|  | break; | 
|  | case 'm': | 
|  | addr = strtoull(p, (char **)&p, 16); | 
|  | if (*p == ',') | 
|  | p++; | 
|  | len = strtoull(p, NULL, 16); | 
|  | if (target_memory_rw_debug(s->g_cpu, addr, mem_buf, len, false) != 0) { | 
|  | put_packet (s, "E14"); | 
|  | } else { | 
|  | memtohex(buf, mem_buf, len); | 
|  | put_packet(s, buf); | 
|  | } | 
|  | break; | 
|  | case 'M': | 
|  | addr = strtoull(p, (char **)&p, 16); | 
|  | if (*p == ',') | 
|  | p++; | 
|  | len = strtoull(p, (char **)&p, 16); | 
|  | if (*p == ':') | 
|  | p++; | 
|  | hextomem(mem_buf, p, len); | 
|  | if (target_memory_rw_debug(s->g_cpu, addr, mem_buf, len, | 
|  | true) != 0) { | 
|  | put_packet(s, "E14"); | 
|  | } else { | 
|  | put_packet(s, "OK"); | 
|  | } | 
|  | break; | 
|  | case 'p': | 
|  | /* Older gdb are really dumb, and don't use 'g' if 'p' is avaialable. | 
|  | This works, but can be very slow.  Anything new enough to | 
|  | understand XML also knows how to use this properly.  */ | 
|  | if (!gdb_has_xml) | 
|  | goto unknown_command; | 
|  | addr = strtoull(p, (char **)&p, 16); | 
|  | reg_size = gdb_read_register(s->g_cpu, mem_buf, addr); | 
|  | if (reg_size) { | 
|  | memtohex(buf, mem_buf, reg_size); | 
|  | put_packet(s, buf); | 
|  | } else { | 
|  | put_packet(s, "E14"); | 
|  | } | 
|  | break; | 
|  | case 'P': | 
|  | if (!gdb_has_xml) | 
|  | goto unknown_command; | 
|  | addr = strtoull(p, (char **)&p, 16); | 
|  | if (*p == '=') | 
|  | p++; | 
|  | reg_size = strlen(p) / 2; | 
|  | hextomem(mem_buf, p, reg_size); | 
|  | gdb_write_register(s->g_cpu, mem_buf, addr); | 
|  | put_packet(s, "OK"); | 
|  | break; | 
|  | case 'Z': | 
|  | case 'z': | 
|  | type = strtoul(p, (char **)&p, 16); | 
|  | if (*p == ',') | 
|  | p++; | 
|  | addr = strtoull(p, (char **)&p, 16); | 
|  | if (*p == ',') | 
|  | p++; | 
|  | len = strtoull(p, (char **)&p, 16); | 
|  | if (ch == 'Z') | 
|  | res = gdb_breakpoint_insert(addr, len, type); | 
|  | else | 
|  | res = gdb_breakpoint_remove(addr, len, type); | 
|  | if (res >= 0) | 
|  | put_packet(s, "OK"); | 
|  | else if (res == -ENOSYS) | 
|  | put_packet(s, ""); | 
|  | else | 
|  | put_packet(s, "E22"); | 
|  | break; | 
|  | case 'H': | 
|  | type = *p++; | 
|  | thread = strtoull(p, (char **)&p, 16); | 
|  | if (thread == -1 || thread == 0) { | 
|  | put_packet(s, "OK"); | 
|  | break; | 
|  | } | 
|  | cpu = find_cpu(thread); | 
|  | if (cpu == NULL) { | 
|  | put_packet(s, "E22"); | 
|  | break; | 
|  | } | 
|  | switch (type) { | 
|  | case 'c': | 
|  | s->c_cpu = cpu; | 
|  | put_packet(s, "OK"); | 
|  | break; | 
|  | case 'g': | 
|  | s->g_cpu = cpu; | 
|  | put_packet(s, "OK"); | 
|  | break; | 
|  | default: | 
|  | put_packet(s, "E22"); | 
|  | break; | 
|  | } | 
|  | break; | 
|  | case 'T': | 
|  | thread = strtoull(p, (char **)&p, 16); | 
|  | cpu = find_cpu(thread); | 
|  |  | 
|  | if (cpu != NULL) { | 
|  | put_packet(s, "OK"); | 
|  | } else { | 
|  | put_packet(s, "E22"); | 
|  | } | 
|  | break; | 
|  | case 'q': | 
|  | case 'Q': | 
|  | /* parse any 'q' packets here */ | 
|  | if (!strcmp(p,"qemu.sstepbits")) { | 
|  | /* Query Breakpoint bit definitions */ | 
|  | snprintf(buf, sizeof(buf), "ENABLE=%x,NOIRQ=%x,NOTIMER=%x", | 
|  | SSTEP_ENABLE, | 
|  | SSTEP_NOIRQ, | 
|  | SSTEP_NOTIMER); | 
|  | put_packet(s, buf); | 
|  | break; | 
|  | } else if (strncmp(p,"qemu.sstep",10) == 0) { | 
|  | /* Display or change the sstep_flags */ | 
|  | p += 10; | 
|  | if (*p != '=') { | 
|  | /* Display current setting */ | 
|  | snprintf(buf, sizeof(buf), "0x%x", sstep_flags); | 
|  | put_packet(s, buf); | 
|  | break; | 
|  | } | 
|  | p++; | 
|  | type = strtoul(p, (char **)&p, 16); | 
|  | sstep_flags = type; | 
|  | put_packet(s, "OK"); | 
|  | break; | 
|  | } else if (strcmp(p,"C") == 0) { | 
|  | /* "Current thread" remains vague in the spec, so always return | 
|  | *  the first CPU (gdb returns the first thread). */ | 
|  | put_packet(s, "QC1"); | 
|  | break; | 
|  | } else if (strcmp(p,"fThreadInfo") == 0) { | 
|  | s->query_cpu = first_cpu; | 
|  | goto report_cpuinfo; | 
|  | } else if (strcmp(p,"sThreadInfo") == 0) { | 
|  | report_cpuinfo: | 
|  | if (s->query_cpu) { | 
|  | snprintf(buf, sizeof(buf), "m%x", cpu_index(s->query_cpu)); | 
|  | put_packet(s, buf); | 
|  | s->query_cpu = CPU_NEXT(s->query_cpu); | 
|  | } else | 
|  | put_packet(s, "l"); | 
|  | break; | 
|  | } else if (strncmp(p,"ThreadExtraInfo,", 16) == 0) { | 
|  | thread = strtoull(p+16, (char **)&p, 16); | 
|  | cpu = find_cpu(thread); | 
|  | if (cpu != NULL) { | 
|  | cpu_synchronize_state(cpu); | 
|  | len = snprintf((char *)mem_buf, sizeof(mem_buf), | 
|  | "CPU#%d [%s]", cpu->cpu_index, | 
|  | cpu->halted ? "halted " : "running"); | 
|  | memtohex(buf, mem_buf, len); | 
|  | put_packet(s, buf); | 
|  | } | 
|  | break; | 
|  | } | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | else if (strncmp(p, "Offsets", 7) == 0) { | 
|  | CPUArchState *env = s->c_cpu->env_ptr; | 
|  | TaskState *ts = env->opaque; | 
|  |  | 
|  | snprintf(buf, sizeof(buf), | 
|  | "Text=" TARGET_ABI_FMT_lx ";Data=" TARGET_ABI_FMT_lx | 
|  | ";Bss=" TARGET_ABI_FMT_lx, | 
|  | ts->info->code_offset, | 
|  | ts->info->data_offset, | 
|  | ts->info->data_offset); | 
|  | put_packet(s, buf); | 
|  | break; | 
|  | } | 
|  | #else /* !CONFIG_USER_ONLY */ | 
|  | else if (strncmp(p, "Rcmd,", 5) == 0) { | 
|  | int len = strlen(p + 5); | 
|  |  | 
|  | if ((len % 2) != 0) { | 
|  | put_packet(s, "E01"); | 
|  | break; | 
|  | } | 
|  | hextomem(mem_buf, p + 5, len); | 
|  | len = len / 2; | 
|  | mem_buf[len++] = 0; | 
|  | qemu_chr_be_write(s->mon_chr, mem_buf, len); | 
|  | put_packet(s, "OK"); | 
|  | break; | 
|  | } | 
|  | #endif /* !CONFIG_USER_ONLY */ | 
|  | if (strncmp(p, "Supported", 9) == 0) { | 
|  | snprintf(buf, sizeof(buf), "PacketSize=%x", MAX_PACKET_LENGTH); | 
|  | cc = CPU_GET_CLASS(first_cpu); | 
|  | if (cc->gdb_core_xml_file != NULL) { | 
|  | pstrcat(buf, sizeof(buf), ";qXfer:features:read+"); | 
|  | } | 
|  | put_packet(s, buf); | 
|  | break; | 
|  | } | 
|  | if (strncmp(p, "Xfer:features:read:", 19) == 0) { | 
|  | const char *xml; | 
|  | target_ulong total_len; | 
|  |  | 
|  | cc = CPU_GET_CLASS(first_cpu); | 
|  | if (cc->gdb_core_xml_file == NULL) { | 
|  | goto unknown_command; | 
|  | } | 
|  |  | 
|  | gdb_has_xml = true; | 
|  | p += 19; | 
|  | xml = get_feature_xml(p, &p, cc); | 
|  | if (!xml) { | 
|  | snprintf(buf, sizeof(buf), "E00"); | 
|  | put_packet(s, buf); | 
|  | break; | 
|  | } | 
|  |  | 
|  | if (*p == ':') | 
|  | p++; | 
|  | addr = strtoul(p, (char **)&p, 16); | 
|  | if (*p == ',') | 
|  | p++; | 
|  | len = strtoul(p, (char **)&p, 16); | 
|  |  | 
|  | total_len = strlen(xml); | 
|  | if (addr > total_len) { | 
|  | snprintf(buf, sizeof(buf), "E00"); | 
|  | put_packet(s, buf); | 
|  | break; | 
|  | } | 
|  | if (len > (MAX_PACKET_LENGTH - 5) / 2) | 
|  | len = (MAX_PACKET_LENGTH - 5) / 2; | 
|  | if (len < total_len - addr) { | 
|  | buf[0] = 'm'; | 
|  | len = memtox(buf + 1, xml + addr, len); | 
|  | } else { | 
|  | buf[0] = 'l'; | 
|  | len = memtox(buf + 1, xml + addr, total_len - addr); | 
|  | } | 
|  | put_packet_binary(s, buf, len + 1); | 
|  | break; | 
|  | } | 
|  | /* Unrecognised 'q' command.  */ | 
|  | goto unknown_command; | 
|  |  | 
|  | default: | 
|  | unknown_command: | 
|  | /* put empty packet */ | 
|  | buf[0] = '\0'; | 
|  | put_packet(s, buf); | 
|  | break; | 
|  | } | 
|  | return RS_IDLE; | 
|  | } | 
|  |  | 
|  | void gdb_set_stop_cpu(CPUState *cpu) | 
|  | { | 
|  | gdbserver_state->c_cpu = cpu; | 
|  | gdbserver_state->g_cpu = cpu; | 
|  | } | 
|  |  | 
|  | #ifndef CONFIG_USER_ONLY | 
|  | static void gdb_vm_state_change(void *opaque, int running, RunState state) | 
|  | { | 
|  | GDBState *s = gdbserver_state; | 
|  | CPUArchState *env = s->c_cpu->env_ptr; | 
|  | CPUState *cpu = s->c_cpu; | 
|  | char buf[256]; | 
|  | const char *type; | 
|  | int ret; | 
|  |  | 
|  | if (running || s->state == RS_INACTIVE) { | 
|  | return; | 
|  | } | 
|  | /* Is there a GDB syscall waiting to be sent?  */ | 
|  | if (s->current_syscall_cb) { | 
|  | put_packet(s, s->syscall_buf); | 
|  | return; | 
|  | } | 
|  | switch (state) { | 
|  | case RUN_STATE_DEBUG: | 
|  | if (env->watchpoint_hit) { | 
|  | switch (env->watchpoint_hit->flags & BP_MEM_ACCESS) { | 
|  | case BP_MEM_READ: | 
|  | type = "r"; | 
|  | break; | 
|  | case BP_MEM_ACCESS: | 
|  | type = "a"; | 
|  | break; | 
|  | default: | 
|  | type = ""; | 
|  | break; | 
|  | } | 
|  | snprintf(buf, sizeof(buf), | 
|  | "T%02xthread:%02x;%swatch:" TARGET_FMT_lx ";", | 
|  | GDB_SIGNAL_TRAP, cpu_index(cpu), type, | 
|  | env->watchpoint_hit->vaddr); | 
|  | env->watchpoint_hit = NULL; | 
|  | goto send_packet; | 
|  | } | 
|  | tb_flush(env); | 
|  | ret = GDB_SIGNAL_TRAP; | 
|  | break; | 
|  | case RUN_STATE_PAUSED: | 
|  | ret = GDB_SIGNAL_INT; | 
|  | break; | 
|  | case RUN_STATE_SHUTDOWN: | 
|  | ret = GDB_SIGNAL_QUIT; | 
|  | break; | 
|  | case RUN_STATE_IO_ERROR: | 
|  | ret = GDB_SIGNAL_IO; | 
|  | break; | 
|  | case RUN_STATE_WATCHDOG: | 
|  | ret = GDB_SIGNAL_ALRM; | 
|  | break; | 
|  | case RUN_STATE_INTERNAL_ERROR: | 
|  | ret = GDB_SIGNAL_ABRT; | 
|  | break; | 
|  | case RUN_STATE_SAVE_VM: | 
|  | case RUN_STATE_RESTORE_VM: | 
|  | return; | 
|  | case RUN_STATE_FINISH_MIGRATE: | 
|  | ret = GDB_SIGNAL_XCPU; | 
|  | break; | 
|  | default: | 
|  | ret = GDB_SIGNAL_UNKNOWN; | 
|  | break; | 
|  | } | 
|  | snprintf(buf, sizeof(buf), "T%02xthread:%02x;", ret, cpu_index(cpu)); | 
|  |  | 
|  | send_packet: | 
|  | put_packet(s, buf); | 
|  |  | 
|  | /* disable single step if it was enabled */ | 
|  | cpu_single_step(cpu, 0); | 
|  | } | 
|  | #endif | 
|  |  | 
|  | /* Send a gdb syscall request. | 
|  | This accepts limited printf-style format specifiers, specifically: | 
|  | %x  - target_ulong argument printed in hex. | 
|  | %lx - 64-bit argument printed in hex. | 
|  | %s  - string pointer (target_ulong) and length (int) pair.  */ | 
|  | void gdb_do_syscall(gdb_syscall_complete_cb cb, const char *fmt, ...) | 
|  | { | 
|  | va_list va; | 
|  | char *p; | 
|  | char *p_end; | 
|  | target_ulong addr; | 
|  | uint64_t i64; | 
|  | GDBState *s; | 
|  |  | 
|  | s = gdbserver_state; | 
|  | if (!s) | 
|  | return; | 
|  | s->current_syscall_cb = cb; | 
|  | #ifndef CONFIG_USER_ONLY | 
|  | vm_stop(RUN_STATE_DEBUG); | 
|  | #endif | 
|  | va_start(va, fmt); | 
|  | p = s->syscall_buf; | 
|  | p_end = &s->syscall_buf[sizeof(s->syscall_buf)]; | 
|  | *(p++) = 'F'; | 
|  | while (*fmt) { | 
|  | if (*fmt == '%') { | 
|  | fmt++; | 
|  | switch (*fmt++) { | 
|  | case 'x': | 
|  | addr = va_arg(va, target_ulong); | 
|  | p += snprintf(p, p_end - p, TARGET_FMT_lx, addr); | 
|  | break; | 
|  | case 'l': | 
|  | if (*(fmt++) != 'x') | 
|  | goto bad_format; | 
|  | i64 = va_arg(va, uint64_t); | 
|  | p += snprintf(p, p_end - p, "%" PRIx64, i64); | 
|  | break; | 
|  | case 's': | 
|  | addr = va_arg(va, target_ulong); | 
|  | p += snprintf(p, p_end - p, TARGET_FMT_lx "/%x", | 
|  | addr, va_arg(va, int)); | 
|  | break; | 
|  | default: | 
|  | bad_format: | 
|  | fprintf(stderr, "gdbstub: Bad syscall format string '%s'\n", | 
|  | fmt - 1); | 
|  | break; | 
|  | } | 
|  | } else { | 
|  | *(p++) = *(fmt++); | 
|  | } | 
|  | } | 
|  | *p = 0; | 
|  | va_end(va); | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | put_packet(s, s->syscall_buf); | 
|  | gdb_handlesig(s->c_cpu, 0); | 
|  | #else | 
|  | /* In this case wait to send the syscall packet until notification that | 
|  | the CPU has stopped.  This must be done because if the packet is sent | 
|  | now the reply from the syscall request could be received while the CPU | 
|  | is still in the running state, which can cause packets to be dropped | 
|  | and state transition 'T' packets to be sent while the syscall is still | 
|  | being processed.  */ | 
|  | cpu_exit(s->c_cpu); | 
|  | #endif | 
|  | } | 
|  |  | 
|  | static void gdb_read_byte(GDBState *s, int ch) | 
|  | { | 
|  | int i, csum; | 
|  | uint8_t reply; | 
|  |  | 
|  | #ifndef CONFIG_USER_ONLY | 
|  | if (s->last_packet_len) { | 
|  | /* Waiting for a response to the last packet.  If we see the start | 
|  | of a new command then abandon the previous response.  */ | 
|  | if (ch == '-') { | 
|  | #ifdef DEBUG_GDB | 
|  | printf("Got NACK, retransmitting\n"); | 
|  | #endif | 
|  | put_buffer(s, (uint8_t *)s->last_packet, s->last_packet_len); | 
|  | } | 
|  | #ifdef DEBUG_GDB | 
|  | else if (ch == '+') | 
|  | printf("Got ACK\n"); | 
|  | else | 
|  | printf("Got '%c' when expecting ACK/NACK\n", ch); | 
|  | #endif | 
|  | if (ch == '+' || ch == '$') | 
|  | s->last_packet_len = 0; | 
|  | if (ch != '$') | 
|  | return; | 
|  | } | 
|  | if (runstate_is_running()) { | 
|  | /* when the CPU is running, we cannot do anything except stop | 
|  | it when receiving a char */ | 
|  | vm_stop(RUN_STATE_PAUSED); | 
|  | } else | 
|  | #endif | 
|  | { | 
|  | switch(s->state) { | 
|  | case RS_IDLE: | 
|  | if (ch == '$') { | 
|  | s->line_buf_index = 0; | 
|  | s->state = RS_GETLINE; | 
|  | } | 
|  | break; | 
|  | case RS_GETLINE: | 
|  | if (ch == '#') { | 
|  | s->state = RS_CHKSUM1; | 
|  | } else if (s->line_buf_index >= sizeof(s->line_buf) - 1) { | 
|  | s->state = RS_IDLE; | 
|  | } else { | 
|  | s->line_buf[s->line_buf_index++] = ch; | 
|  | } | 
|  | break; | 
|  | case RS_CHKSUM1: | 
|  | s->line_buf[s->line_buf_index] = '\0'; | 
|  | s->line_csum = fromhex(ch) << 4; | 
|  | s->state = RS_CHKSUM2; | 
|  | break; | 
|  | case RS_CHKSUM2: | 
|  | s->line_csum |= fromhex(ch); | 
|  | csum = 0; | 
|  | for(i = 0; i < s->line_buf_index; i++) { | 
|  | csum += s->line_buf[i]; | 
|  | } | 
|  | if (s->line_csum != (csum & 0xff)) { | 
|  | reply = '-'; | 
|  | put_buffer(s, &reply, 1); | 
|  | s->state = RS_IDLE; | 
|  | } else { | 
|  | reply = '+'; | 
|  | put_buffer(s, &reply, 1); | 
|  | s->state = gdb_handle_packet(s, s->line_buf); | 
|  | } | 
|  | break; | 
|  | default: | 
|  | abort(); | 
|  | } | 
|  | } | 
|  | } | 
|  |  | 
|  | /* Tell the remote gdb that the process has exited.  */ | 
|  | void gdb_exit(CPUArchState *env, int code) | 
|  | { | 
|  | GDBState *s; | 
|  | char buf[4]; | 
|  |  | 
|  | s = gdbserver_state; | 
|  | if (!s) { | 
|  | return; | 
|  | } | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | if (gdbserver_fd < 0 || s->fd < 0) { | 
|  | return; | 
|  | } | 
|  | #endif | 
|  |  | 
|  | snprintf(buf, sizeof(buf), "W%02x", (uint8_t)code); | 
|  | put_packet(s, buf); | 
|  |  | 
|  | #ifndef CONFIG_USER_ONLY | 
|  | if (s->chr) { | 
|  | qemu_chr_delete(s->chr); | 
|  | } | 
|  | #endif | 
|  | } | 
|  |  | 
|  | #ifdef CONFIG_USER_ONLY | 
|  | int | 
|  | gdb_queuesig (void) | 
|  | { | 
|  | GDBState *s; | 
|  |  | 
|  | s = gdbserver_state; | 
|  |  | 
|  | if (gdbserver_fd < 0 || s->fd < 0) | 
|  | return 0; | 
|  | else | 
|  | return 1; | 
|  | } | 
|  |  | 
|  | int | 
|  | gdb_handlesig(CPUState *cpu, int sig) | 
|  | { | 
|  | CPUArchState *env = cpu->env_ptr; | 
|  | GDBState *s; | 
|  | char buf[256]; | 
|  | int n; | 
|  |  | 
|  | s = gdbserver_state; | 
|  | if (gdbserver_fd < 0 || s->fd < 0) { | 
|  | return sig; | 
|  | } | 
|  |  | 
|  | /* disable single step if it was enabled */ | 
|  | cpu_single_step(cpu, 0); | 
|  | tb_flush(env); | 
|  |  | 
|  | if (sig != 0) { | 
|  | snprintf(buf, sizeof(buf), "S%02x", target_signal_to_gdb(sig)); | 
|  | put_packet(s, buf); | 
|  | } | 
|  | /* put_packet() might have detected that the peer terminated the | 
|  | connection.  */ | 
|  | if (s->fd < 0) { | 
|  | return sig; | 
|  | } | 
|  |  | 
|  | sig = 0; | 
|  | s->state = RS_IDLE; | 
|  | s->running_state = 0; | 
|  | while (s->running_state == 0) { | 
|  | n = read(s->fd, buf, 256); | 
|  | if (n > 0) { | 
|  | int i; | 
|  |  | 
|  | for (i = 0; i < n; i++) { | 
|  | gdb_read_byte(s, buf[i]); | 
|  | } | 
|  | } else if (n == 0 || errno != EAGAIN) { | 
|  | /* XXX: Connection closed.  Should probably wait for another | 
|  | connection before continuing.  */ | 
|  | return sig; | 
|  | } | 
|  | } | 
|  | sig = s->signal; | 
|  | s->signal = 0; | 
|  | return sig; | 
|  | } | 
|  |  | 
|  | /* Tell the remote gdb that the process has exited due to SIG.  */ | 
|  | void gdb_signalled(CPUArchState *env, int sig) | 
|  | { | 
|  | GDBState *s; | 
|  | char buf[4]; | 
|  |  | 
|  | s = gdbserver_state; | 
|  | if (gdbserver_fd < 0 || s->fd < 0) { | 
|  | return; | 
|  | } | 
|  |  | 
|  | snprintf(buf, sizeof(buf), "X%02x", target_signal_to_gdb(sig)); | 
|  | put_packet(s, buf); | 
|  | } | 
|  |  | 
|  | static void gdb_accept(void) | 
|  | { | 
|  | GDBState *s; | 
|  | struct sockaddr_in sockaddr; | 
|  | socklen_t len; | 
|  | int fd; | 
|  |  | 
|  | for(;;) { | 
|  | len = sizeof(sockaddr); | 
|  | fd = accept(gdbserver_fd, (struct sockaddr *)&sockaddr, &len); | 
|  | if (fd < 0 && errno != EINTR) { | 
|  | perror("accept"); | 
|  | return; | 
|  | } else if (fd >= 0) { | 
|  | #ifndef _WIN32 | 
|  | fcntl(fd, F_SETFD, FD_CLOEXEC); | 
|  | #endif | 
|  | break; | 
|  | } | 
|  | } | 
|  |  | 
|  | /* set short latency */ | 
|  | socket_set_nodelay(fd); | 
|  |  | 
|  | s = g_malloc0(sizeof(GDBState)); | 
|  | s->c_cpu = first_cpu; | 
|  | s->g_cpu = first_cpu; | 
|  | s->fd = fd; | 
|  | gdb_has_xml = false; | 
|  |  | 
|  | gdbserver_state = s; | 
|  |  | 
|  | fcntl(fd, F_SETFL, O_NONBLOCK); | 
|  | } | 
|  |  | 
|  | static int gdbserver_open(int port) | 
|  | { | 
|  | struct sockaddr_in sockaddr; | 
|  | int fd, ret; | 
|  |  | 
|  | fd = socket(PF_INET, SOCK_STREAM, 0); | 
|  | if (fd < 0) { | 
|  | perror("socket"); | 
|  | return -1; | 
|  | } | 
|  | #ifndef _WIN32 | 
|  | fcntl(fd, F_SETFD, FD_CLOEXEC); | 
|  | #endif | 
|  |  | 
|  | socket_set_fast_reuse(fd); | 
|  |  | 
|  | sockaddr.sin_family = AF_INET; | 
|  | sockaddr.sin_port = htons(port); | 
|  | sockaddr.sin_addr.s_addr = 0; | 
|  | ret = bind(fd, (struct sockaddr *)&sockaddr, sizeof(sockaddr)); | 
|  | if (ret < 0) { | 
|  | perror("bind"); | 
|  | close(fd); | 
|  | return -1; | 
|  | } | 
|  | ret = listen(fd, 0); | 
|  | if (ret < 0) { | 
|  | perror("listen"); | 
|  | close(fd); | 
|  | return -1; | 
|  | } | 
|  | return fd; | 
|  | } | 
|  |  | 
|  | int gdbserver_start(int port) | 
|  | { | 
|  | gdbserver_fd = gdbserver_open(port); | 
|  | if (gdbserver_fd < 0) | 
|  | return -1; | 
|  | /* accept connections */ | 
|  | gdb_accept(); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | /* Disable gdb stub for child processes.  */ | 
|  | void gdbserver_fork(CPUArchState *env) | 
|  | { | 
|  | GDBState *s = gdbserver_state; | 
|  | if (gdbserver_fd < 0 || s->fd < 0) | 
|  | return; | 
|  | close(s->fd); | 
|  | s->fd = -1; | 
|  | cpu_breakpoint_remove_all(env, BP_GDB); | 
|  | cpu_watchpoint_remove_all(env, BP_GDB); | 
|  | } | 
|  | #else | 
|  | static int gdb_chr_can_receive(void *opaque) | 
|  | { | 
|  | /* We can handle an arbitrarily large amount of data. | 
|  | Pick the maximum packet size, which is as good as anything.  */ | 
|  | return MAX_PACKET_LENGTH; | 
|  | } | 
|  |  | 
|  | static void gdb_chr_receive(void *opaque, const uint8_t *buf, int size) | 
|  | { | 
|  | int i; | 
|  |  | 
|  | for (i = 0; i < size; i++) { | 
|  | gdb_read_byte(gdbserver_state, buf[i]); | 
|  | } | 
|  | } | 
|  |  | 
|  | static void gdb_chr_event(void *opaque, int event) | 
|  | { | 
|  | switch (event) { | 
|  | case CHR_EVENT_OPENED: | 
|  | vm_stop(RUN_STATE_PAUSED); | 
|  | gdb_has_xml = false; | 
|  | break; | 
|  | default: | 
|  | break; | 
|  | } | 
|  | } | 
|  |  | 
|  | static void gdb_monitor_output(GDBState *s, const char *msg, int len) | 
|  | { | 
|  | char buf[MAX_PACKET_LENGTH]; | 
|  |  | 
|  | buf[0] = 'O'; | 
|  | if (len > (MAX_PACKET_LENGTH/2) - 1) | 
|  | len = (MAX_PACKET_LENGTH/2) - 1; | 
|  | memtohex(buf + 1, (uint8_t *)msg, len); | 
|  | put_packet(s, buf); | 
|  | } | 
|  |  | 
|  | static int gdb_monitor_write(CharDriverState *chr, const uint8_t *buf, int len) | 
|  | { | 
|  | const char *p = (const char *)buf; | 
|  | int max_sz; | 
|  |  | 
|  | max_sz = (sizeof(gdbserver_state->last_packet) - 2) / 2; | 
|  | for (;;) { | 
|  | if (len <= max_sz) { | 
|  | gdb_monitor_output(gdbserver_state, p, len); | 
|  | break; | 
|  | } | 
|  | gdb_monitor_output(gdbserver_state, p, max_sz); | 
|  | p += max_sz; | 
|  | len -= max_sz; | 
|  | } | 
|  | return len; | 
|  | } | 
|  |  | 
|  | #ifndef _WIN32 | 
|  | static void gdb_sigterm_handler(int signal) | 
|  | { | 
|  | if (runstate_is_running()) { | 
|  | vm_stop(RUN_STATE_PAUSED); | 
|  | } | 
|  | } | 
|  | #endif | 
|  |  | 
|  | int gdbserver_start(const char *device) | 
|  | { | 
|  | GDBState *s; | 
|  | char gdbstub_device_name[128]; | 
|  | CharDriverState *chr = NULL; | 
|  | CharDriverState *mon_chr; | 
|  |  | 
|  | if (!device) | 
|  | return -1; | 
|  | if (strcmp(device, "none") != 0) { | 
|  | if (strstart(device, "tcp:", NULL)) { | 
|  | /* enforce required TCP attributes */ | 
|  | snprintf(gdbstub_device_name, sizeof(gdbstub_device_name), | 
|  | "%s,nowait,nodelay,server", device); | 
|  | device = gdbstub_device_name; | 
|  | } | 
|  | #ifndef _WIN32 | 
|  | else if (strcmp(device, "stdio") == 0) { | 
|  | struct sigaction act; | 
|  |  | 
|  | memset(&act, 0, sizeof(act)); | 
|  | act.sa_handler = gdb_sigterm_handler; | 
|  | sigaction(SIGINT, &act, NULL); | 
|  | } | 
|  | #endif | 
|  | chr = qemu_chr_new("gdb", device, NULL); | 
|  | if (!chr) | 
|  | return -1; | 
|  |  | 
|  | qemu_chr_fe_claim_no_fail(chr); | 
|  | qemu_chr_add_handlers(chr, gdb_chr_can_receive, gdb_chr_receive, | 
|  | gdb_chr_event, NULL); | 
|  | } | 
|  |  | 
|  | s = gdbserver_state; | 
|  | if (!s) { | 
|  | s = g_malloc0(sizeof(GDBState)); | 
|  | gdbserver_state = s; | 
|  |  | 
|  | qemu_add_vm_change_state_handler(gdb_vm_state_change, NULL); | 
|  |  | 
|  | /* Initialize a monitor terminal for gdb */ | 
|  | mon_chr = g_malloc0(sizeof(*mon_chr)); | 
|  | mon_chr->chr_write = gdb_monitor_write; | 
|  | monitor_init(mon_chr, 0); | 
|  | } else { | 
|  | if (s->chr) | 
|  | qemu_chr_delete(s->chr); | 
|  | mon_chr = s->mon_chr; | 
|  | memset(s, 0, sizeof(GDBState)); | 
|  | } | 
|  | s->c_cpu = first_cpu; | 
|  | s->g_cpu = first_cpu; | 
|  | s->chr = chr; | 
|  | s->state = chr ? RS_IDLE : RS_INACTIVE; | 
|  | s->mon_chr = mon_chr; | 
|  | s->current_syscall_cb = NULL; | 
|  |  | 
|  | return 0; | 
|  | } | 
|  | #endif |