mirror of
https://sourceware.org/git/binutils-gdb.git
synced 2024-12-15 04:31:49 +08:00
01113bc1c5
GDB step cross kernel helpers only works if the kernel helpers are tail called, which is the case how it is used in glibc. See __aeabi_read_tp in sysdeps/unix/sysv/linux/arm/aeabi_read_tp.S. In __aeabi_read_tp, branch/jump to the kernel helper is the last instruction, and the next instruction address is in LR, which is in caller function. GDB can handle this correctly. For example, glibc function __GI___ctype_init calls __aeabi_read_tp 0xb6e19b30 <__GI___ctype_init+4>: ldr r3, [pc, #80] ; 0xb6e19b34 <__GI___ctype_init+8>: bl 0xb6e0a6e0 <__aeabi_read_tp> 0xb6e19b38 <__GI___ctype_init+12>: ldr r3, [pc, r3] and __aeabi_read_tp calls kernel helper, (gdb) disassemble __aeabi_read_tp 0xb6fef5d0 <+0>: mvn r0, #61440 ; 0xf000 0xb6fef5d4 <+4>: sub pc, r0, #31 once GDB or GDBserver single step instruction on 0xb6fef5d4, LR is 0xb6e19b38, which is right address of next instruction to set breakpoint on. However, if the kernel helpers are not tail-called, the LR is still the address in the caller function of kernel helper's caller, which isn't the right address of next instruction to set breakpoint on. For example, we use kernel helper in main, (gdb) disassemble main .... 0x00008624 <+32>: mov r3, #4064 ; 0xfe0^M 0x00008628 <+36>: movt r3, #65535 ; 0xffff^M 0x0000862c <+40>: blx r3 0x00008630 <+44>: ldr r3, [r11, #-8] kernel helper is called on 0x0000862c and the expected next instruction address is 0x00008630, but the LR now is the return address of main. The problem here is LR may not have the right address because when we single step the instruction, it isn't executed yet, so the LR isn't updated. This patch fix this problem by decoding instruction, if the instruction updates LR (BL and BLX), the next instruction address is PC + INSN_SIZE, otherwise, get the address of next instruction from LR. gdb: 2016-02-12 Yao Qi <yao.qi@linaro.org> * arch/arm-linux.c (arm_linux_get_next_pcs_fixup): Calculate nextpc according to instruction. gdb/testsuite: 2016-02-12 Yao Qi <yao.qi@linaro.org> * gdb.arch/arm-single-step-kernel-helper.c: New. * gdb.arch/arm-single-step-kernel-helper.exp: New.
140 lines
4.0 KiB
C
140 lines
4.0 KiB
C
/* Common target dependent code for GNU/Linux on ARM systems.
|
|
|
|
Copyright (C) 1999-2016 Free Software Foundation, Inc.
|
|
|
|
This file is part of GDB.
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>. */
|
|
|
|
#include "common-defs.h"
|
|
#include "common-regcache.h"
|
|
#include "arch/arm.h"
|
|
#include "arm-linux.h"
|
|
#include "arch/arm-get-next-pcs.h"
|
|
|
|
/* Calculate the offset from stack pointer of the pc register on the stack
|
|
in the case of a sigreturn or sigreturn_rt syscall. */
|
|
int
|
|
arm_linux_sigreturn_next_pc_offset (unsigned long sp,
|
|
unsigned long sp_data,
|
|
unsigned long svc_number,
|
|
int is_sigreturn)
|
|
{
|
|
/* Offset of R0 register. */
|
|
int r0_offset = 0;
|
|
/* Offset of PC register. */
|
|
int pc_offset = 0;
|
|
|
|
if (is_sigreturn)
|
|
{
|
|
if (sp_data == ARM_NEW_SIGFRAME_MAGIC)
|
|
r0_offset = ARM_UCONTEXT_SIGCONTEXT + ARM_SIGCONTEXT_R0;
|
|
else
|
|
r0_offset = ARM_SIGCONTEXT_R0;
|
|
}
|
|
else
|
|
{
|
|
if (sp_data == sp + ARM_OLD_RT_SIGFRAME_SIGINFO)
|
|
r0_offset = ARM_OLD_RT_SIGFRAME_UCONTEXT;
|
|
else
|
|
r0_offset = ARM_NEW_RT_SIGFRAME_UCONTEXT;
|
|
|
|
r0_offset += ARM_UCONTEXT_SIGCONTEXT + ARM_SIGCONTEXT_R0;
|
|
}
|
|
|
|
pc_offset = r0_offset + INT_REGISTER_SIZE * ARM_PC_REGNUM;
|
|
|
|
return pc_offset;
|
|
}
|
|
|
|
/* Implementation of "fixup" method of struct arm_get_next_pcs_ops
|
|
for arm-linux. */
|
|
|
|
CORE_ADDR
|
|
arm_linux_get_next_pcs_fixup (struct arm_get_next_pcs *self,
|
|
CORE_ADDR nextpc)
|
|
{
|
|
/* The Linux kernel offers some user-mode helpers in a high page. We can
|
|
not read this page (as of 2.6.23), and even if we could then we
|
|
couldn't set breakpoints in it, and even if we could then the atomic
|
|
operations would fail when interrupted. They are all (tail) called
|
|
as functions and return to the address in LR. However, when GDB single
|
|
step this instruction, this instruction isn't executed yet, and LR
|
|
may not be updated yet. In other words, GDB can get the target
|
|
address from LR if this instruction isn't BL or BLX. */
|
|
if (nextpc > 0xffff0000)
|
|
{
|
|
int bl_blx_p = 0;
|
|
CORE_ADDR pc = regcache_read_pc (self->regcache);
|
|
int pc_incr = 0;
|
|
|
|
if (self->ops->is_thumb (self))
|
|
{
|
|
unsigned short inst1
|
|
= self->ops->read_mem_uint (pc, 2, self->byte_order_for_code);
|
|
|
|
if (bits (inst1, 8, 15) == 0x47 && bit (inst1, 7))
|
|
{
|
|
/* BLX Rm */
|
|
bl_blx_p = 1;
|
|
pc_incr = 2;
|
|
}
|
|
else if (thumb_insn_size (inst1) == 4)
|
|
{
|
|
unsigned short inst2;
|
|
|
|
inst2 = self->ops->read_mem_uint (pc + 2, 2,
|
|
self->byte_order_for_code);
|
|
|
|
if ((inst1 & 0xf800) == 0xf000 && bits (inst2, 14, 15) == 0x3)
|
|
{
|
|
/* BL <label> and BLX <label> */
|
|
bl_blx_p = 1;
|
|
pc_incr = 4;
|
|
}
|
|
}
|
|
|
|
pc_incr = MAKE_THUMB_ADDR (pc_incr);
|
|
}
|
|
else
|
|
{
|
|
unsigned int insn
|
|
= self->ops->read_mem_uint (pc, 4, self->byte_order_for_code);
|
|
|
|
if (bits (insn, 28, 31) == INST_NV)
|
|
{
|
|
if (bits (insn, 25, 27) == 0x5) /* BLX <label> */
|
|
bl_blx_p = 1;
|
|
}
|
|
else
|
|
{
|
|
if (bits (insn, 24, 27) == 0xb /* BL <label> */
|
|
|| bits (insn, 4, 27) == 0x12fff3 /* BLX Rm */)
|
|
bl_blx_p = 1;
|
|
}
|
|
|
|
pc_incr = 4;
|
|
}
|
|
|
|
/* If the instruction BL or BLX, the target address is the following
|
|
instruction of BL or BLX, otherwise, the target address is in LR
|
|
already. */
|
|
if (bl_blx_p)
|
|
nextpc = pc + pc_incr;
|
|
else
|
|
nextpc = regcache_raw_get_unsigned (self->regcache, ARM_LR_REGNUM);
|
|
}
|
|
return nextpc;
|
|
}
|