1 .. SPDX-License-Identifier: GPL-2.0+
2 .. Copyright (c) 2024 Alexander Dahl
4 Debugging U-Boot with GDB
5 =========================
7 Using a JTAG adapter it is possible to debug a running U-Boot with GDB.
8 A common way is to connect a debug adapter to the JTAG connector of your
9 board, run a GDB server, connect GDB to the GDB server, and use GDB as usual.
11 Similarly, QEMU can provide a GDB server.
16 Building U-Boot with reduced optimization (-Og) and without link time
17 optimization is recommended for easier debugging::
19 CONFIG_CC_OPTIMIZE_FOR_DEBUG=y
22 Otherwise build, install, and run U-Boot as usual.
24 Using OpenOCD as GDB server
25 ---------------------------
27 `OpenOCD <https://openocd.org/>`_ is an open-source tool supporting hardware
28 debug probes, and providing a GDB server. It is readily available in major Linux
29 distributions or you can build it from source.
31 Here is example of starting OpenOCD on Debian using a J-Link adapter and a
32 board with an AT91 SAMA5D2 SoC:
34 .. code-block:: console
36 $ openocd -f interface/jlink.cfg -f target/at91sama5d2.cfg -c 'adapter speed 4000'
37 Open On-Chip Debugger 0.12.0
38 Licensed under GNU GPL v2
40 http://openocd.org/doc/doxygen/bugs.html
41 Info : auto-selecting first available session transport "jtag". To override use 'transport select <transport>'.
42 adapter speed: 4000 kHz
44 Info : Listening on port 6666 for tcl connections
45 Info : Listening on port 4444 for telnet connections
46 Info : J-Link V10 compiled Jan 30 2023 11:28:07
47 Info : Hardware version: 10.10
48 Info : VTarget = 3.244 V
49 Info : clock speed 4000 kHz
50 Info : JTAG tap: at91sama5d2.cpu tap/device found: 0x5ba00477 (mfg: 0x23b (ARM Ltd), part: 0xba00, ver: 0x5)
51 Info : at91sama5d2.cpu_a5.0: hardware has 3 breakpoints, 2 watchpoints
52 Info : at91sama5d2.cpu_a5.0: MPIDR level2 0, cluster 0, core 0, mono core, no SMT
53 Info : starting gdb server for at91sama5d2.cpu_a5.0 on 3333
54 Info : Listening on port 3333 for gdb connections
56 Notice that OpenOCD is listening on port 3333 for GDB connections.
58 Using QEMU as GDB server
59 ------------------------
61 When running U-Boot on QEMU you can used the '-gdb' parameter to provide a
64 qemu-system-riscv64 -M virt -nographic -gdb tcp::3333 -kernel u-boot
67 ----------------------
69 You need a GDB suited for your target. This can be the GDB coming with your
70 toolchain or *gdb-multiarch* available in your Linux distribution.
76 In the above command-line *u-boot* is the U-boot binary in your build
77 directory. You may need to adjust the path when calling GDB.
79 Connect to the GDB server like this:
81 .. code-block:: console
83 (gdb) target extended-remote :3333
84 Remote debugging using :3333
88 This is fine for debugging before U-Boot relocates itself.
90 For debugging U-Boot after relocation you need to indicate the relocation
91 address to GDB. You can retrieve the relocation address from the U-Boot shell
92 with the command *bdinfo*:
94 .. code-block:: console
97 boot_params = 0x20000100
98 DRAM bank = 0x00000000
101 flashstart = 0x00000000
102 flashsize = 0x00000000
103 flashoffset = 0x00000000
104 baudrate = 115200 bps
105 relocaddr = 0x27f7a000
106 reloc off = 0x0607a000
108 current eth = ethernet@f8008000
109 ethaddr = 00:50:c2:31:58:d4
111 fdt_blob = 0x27b36060
113 fdt_size = 0x00003e40
115 memory.cnt = 0x1 / max = 0x10
116 memory[0] [0x20000000-0x27ffffff], 0x08000000 bytes flags: 0
117 reserved.cnt = 0x1 / max = 0x10
118 reserved[0] [0x27b31d00-0x27ffffff], 0x004ce300 bytes flags: 0
119 devicetree = separate
120 arch_number = 0x00000000
121 TLB addr = 0x27ff0000
123 sp start = 0x27b36040
124 Early malloc usage: cd8 / 2000
126 Look out for the line starting with *relocaddr* which has the address
127 you need, ``0x27f7a000`` in this case.
129 On most architectures (not sandbox, x86, Xtensa) the global data pointer is
130 stored in a fixed register:
132 ============ ========
133 Architecture Register
134 ============ ========
145 ============ ========
147 On these architectures the relocation address can be determined by
148 dereferencing the global data pointer stored in register, *r9* in the example:
150 .. code-block:: console
152 (gdb) p/x (*(struct global_data*)$r9)->relocaddr
155 In the GDB shell discard the previously loaded symbol file and add it once
156 again, with the relocation address like this:
158 .. code-block:: console
161 Discard symbol table from `/home/adahl/build/u-boot/v2024.04.x/u-boot'? (y or n) y
163 (gdb) add-symbol-file u-boot 0x27f7a000
164 add symbol table from file "u-boot" at
165 .text_addr = 0x27f7a000
167 Reading symbols from u-boot...
170 You can now use GDB as usual, setting breakpoints, printing backtraces,
171 inspecting variables, stepping through the code, etc.