/*

 * gdb server stub

 *

 * Copyright (c) 2003-2005 Fabrice Bellard

 * Copyright (c) 2007 CodeSourcery

 *

 * This library is free software; you can redistribute it and/or

 * modify it under the terms of the GNU Lesser General Public

 * License as published by the Free Software Foundation; either

 * version 2 of the License, or (at your option) any later version.

 *

 * This library is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU

 * Lesser General Public License for more details.

 *

 * You should have received a copy of the GNU Lesser General Public

 * License along with this library; if not, write to the Free Software

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

 */

#include "config.h"

#include "qemu-common.h"

#ifdef CONFIG_USER_ONLY

#include <stdlib.h>

#include <stdio.h>

#include <stdarg.h>

#include <string.h>

#include <errno.h>

#include <unistd.h>

#include <fcntl.h>

#include "qemu.h"

#include "qemu-common.h"

#else

#include "qemu-char.h"

#include "sysemu.h"

#include "gdbstub.h"

#endif

#define MAX_PACKET_LENGTH 4096

#include "qemu_socket.h"

enum {

    GDB_SIGNAL_0 = 0,

    GDB_SIGNAL_INT = 2,

    GDB_SIGNAL_TRAP = 5,

    GDB_SIGNAL_UNKNOWN = 143

};

#ifdef CONFIG_USER_ONLY

/* Map target signal numbers to GDB protocol signal numbers and vice

 * versa.  For user emulation's currently supported systems, we can

 * assume most signals are defined.

 */

static int gdb_signal_table[] = {

    0,

    TARGET_SIGHUP,

    TARGET_SIGINT,

    TARGET_SIGQUIT,

    TARGET_SIGILL,

    TARGET_SIGTRAP,

    TARGET_SIGABRT,

    -1, /* SIGEMT */

    TARGET_SIGFPE,

    TARGET_SIGKILL,

    TARGET_SIGBUS,

    TARGET_SIGSEGV,

    TARGET_SIGSYS,

    TARGET_SIGPIPE,

    TARGET_SIGALRM,

    TARGET_SIGTERM,

    TARGET_SIGURG,

    TARGET_SIGSTOP,

    TARGET_SIGTSTP,

    TARGET_SIGCONT,

    TARGET_SIGCHLD,

    TARGET_SIGTTIN,

    TARGET_SIGTTOU,

    TARGET_SIGIO,

    TARGET_SIGXCPU,

    TARGET_SIGXFSZ,

    TARGET_SIGVTALRM,

    TARGET_SIGPROF,

    TARGET_SIGWINCH,

    -1, /* SIGLOST */

    TARGET_SIGUSR1,

    TARGET_SIGUSR2,

    TARGET_SIGPWR,

    -1, /* SIGPOLL */

    -1,

    -1,

    -1,

    -1,

    -1,

    -1,

    -1,

    -1,

    -1,

    -1,

    -1,

    __SIGRTMIN + 1,

    __SIGRTMIN + 2,

    __SIGRTMIN + 3,

    __SIGRTMIN + 4,

    __SIGRTMIN + 5,

    __SIGRTMIN + 6,

    __SIGRTMIN + 7,

    __SIGRTMIN + 8,

    __SIGRTMIN + 9,

    __SIGRTMIN + 10,

    __SIGRTMIN + 11,

    __SIGRTMIN + 12,

    __SIGRTMIN + 13,

    __SIGRTMIN + 14,

    __SIGRTMIN + 15,

    __SIGRTMIN + 16,

    __SIGRTMIN + 17,

    __SIGRTMIN + 18,

    __SIGRTMIN + 19,

    __SIGRTMIN + 20,

    __SIGRTMIN + 21,

    __SIGRTMIN + 22,

    __SIGRTMIN + 23,

    __SIGRTMIN + 24,

    __SIGRTMIN + 25,

    __SIGRTMIN + 26,

    __SIGRTMIN + 27,

    __SIGRTMIN + 28,

    __SIGRTMIN + 29,

    __SIGRTMIN + 30,

    __SIGRTMIN + 31,

    -1, /* SIGCANCEL */

    __SIGRTMIN,

    __SIGRTMIN + 32,

    __SIGRTMIN + 33,

    __SIGRTMIN + 34,

    __SIGRTMIN + 35,

    __SIGRTMIN + 36,

    __SIGRTMIN + 37,

    __SIGRTMIN + 38,

    __SIGRTMIN + 39,

    __SIGRTMIN + 40,

    __SIGRTMIN + 41,

    __SIGRTMIN + 42,

    __SIGRTMIN + 43,

    __SIGRTMIN + 44,

    __SIGRTMIN + 45,

    __SIGRTMIN + 46,

    __SIGRTMIN + 47,

    __SIGRTMIN + 48,

    __SIGRTMIN + 49,

    __SIGRTMIN + 50,

    __SIGRTMIN + 51,

    __SIGRTMIN + 52,

    __SIGRTMIN + 53,

    __SIGRTMIN + 54,

    __SIGRTMIN + 55,

    __SIGRTMIN + 56,

    __SIGRTMIN + 57,

    __SIGRTMIN + 58,

    __SIGRTMIN + 59,

    __SIGRTMIN + 60,

    __SIGRTMIN + 61,

    __SIGRTMIN + 62,

    __SIGRTMIN + 63,

    __SIGRTMIN + 64,

    __SIGRTMIN + 65,

    __SIGRTMIN + 66,

    __SIGRTMIN + 67,

    __SIGRTMIN + 68,

    __SIGRTMIN + 69,

    __SIGRTMIN + 70,

    __SIGRTMIN + 71,

    __SIGRTMIN + 72,

    __SIGRTMIN + 73,

    __SIGRTMIN + 74,

    __SIGRTMIN + 75,

    __SIGRTMIN + 76,

    __SIGRTMIN + 77,

    __SIGRTMIN + 78,

    __SIGRTMIN + 79,

    __SIGRTMIN + 80,

    __SIGRTMIN + 81,

    __SIGRTMIN + 82,

    __SIGRTMIN + 83,

    __SIGRTMIN + 84,

    __SIGRTMIN + 85,

    __SIGRTMIN + 86,

    __SIGRTMIN + 87,

    __SIGRTMIN + 88,

    __SIGRTMIN + 89,

    __SIGRTMIN + 90,

    __SIGRTMIN + 91,

    __SIGRTMIN + 92,

    __SIGRTMIN + 93,

    __SIGRTMIN + 94,

    __SIGRTMIN + 95,

    -1, /* SIGINFO */

    -1, /* UNKNOWN */

    -1, /* DEFAULT */

    -1,

    -1,

    -1,

    -1,

    -1,

    -1

};

#else

/* In system mode we only need SIGINT and SIGTRAP; other signals

   are not yet supported.  */

enum {

    TARGET_SIGINT = 2,

    TARGET_SIGTRAP = 5

};

static int gdb_signal_table[] = {

    -1,

    -1,

    TARGET_SIGINT,

    -1,

    -1,

    TARGET_SIGTRAP

};

#endif

#ifdef CONFIG_USER_ONLY

static int target_signal_to_gdb (int sig)

{

    int i;

    for (i = 0; i < ARRAY_SIZE (gdb_signal_table); i++)

        if (gdb_signal_table[i] == sig)

            return i;

    return GDB_SIGNAL_UNKNOWN;

}

#endif

static int gdb_signal_to_target (int sig)

{

    if (sig < ARRAY_SIZE (gdb_signal_table))

        return gdb_signal_table[sig];

    else

        return -1;

}

//#define DEBUG_GDB

typedef struct GDBRegisterState {

    int base_reg;

    int num_regs;

    gdb_reg_cb get_reg;

    gdb_reg_cb set_reg;

    const char *xml;

    struct GDBRegisterState *next;

} GDBRegisterState;

enum RSState {

    RS_IDLE,

    RS_GETLINE,

    RS_CHKSUM1,

    RS_CHKSUM2,

    RS_SYSCALL,

};

typedef struct GDBState {

    CPUState *c_cpu; /* current CPU for step/continue ops */

    CPUState *g_cpu; /* current CPU for other ops */

    CPUState *query_cpu; /* for q{f|s}ThreadInfo */

    enum RSState state; /* parsing state */

    char line_buf[MAX_PACKET_LENGTH];

    int line_buf_index;

    int line_csum;

    uint8_t last_packet[MAX_PACKET_LENGTH + 4];

    int last_packet_len;

    int signal;

#ifdef CONFIG_USER_ONLY

    int fd;

    int running_state;

#else

    CharDriverState *chr;

#endif

} GDBState;

/* By default use no IRQs and no timers while single stepping so as to

 * make single stepping like an ICE HW step.

 */

static int sstep_flags = SSTEP_ENABLE|SSTEP_NOIRQ|SSTEP_NOTIMER;

/* XXX: remove this hack.  */

static GDBState *gdbserver_state;

/* This is an ugly hack to cope with both new and old gdb.

   If gdb sends qXfer:features:read then assume we're talking to a newish

   gdb that understands target descriptions.  */

static int gdb_has_xml;

#ifdef CONFIG_USER_ONLY

/* XXX: This is not thread safe.  Do we care?  */

static int gdbserver_fd = -1;

static int get_char(GDBState *s)

{

    uint8_t ch;

    int ret;

    for(;;) {

        ret = recv(s->fd, &ch, 1, 0);

        if (ret < 0) {

            if (errno == ECONNRESET)

                s->fd = -1;

            if (errno != EINTR && errno != EAGAIN)

                return -1;

        } else if (ret == 0) {

            close(s->fd);

            s->fd = -1;

            return -1;

        } else {

            break;

        }

    }

    return ch;

}

#endif

static gdb_syscall_complete_cb gdb_current_syscall_cb;

enum {

    GDB_SYS_UNKNOWN,

    GDB_SYS_ENABLED,

    GDB_SYS_DISABLED,

} gdb_syscall_mode;

/* If gdb is connected when the first semihosting syscall occurs then use

   remote gdb syscalls.  Otherwise use native file IO.  */

int use_gdb_syscalls(void)

{

    if (gdb_syscall_mode == GDB_SYS_UNKNOWN) {

        gdb_syscall_mode = (gdbserver_state ? GDB_SYS_ENABLED

                                            : GDB_SYS_DISABLED);

    }

    return gdb_syscall_mode == GDB_SYS_ENABLED;

}

/* Resume execution.  */

static inline void gdb_continue(GDBState *s)

{

#ifdef CONFIG_USER_ONLY

    s->running_state = 1;

#else

    vm_start();

#endif

}

static void put_buffer(GDBState *s, const uint8_t *buf, int len)

{

#ifdef CONFIG_USER_ONLY

    int ret;

    while (len > 0) {

        ret = send(s->fd, buf, len, 0);

        if (ret < 0) {

            if (errno != EINTR && errno != EAGAIN)

                return;

        } else {

            buf += ret;

            len -= ret;

        }

    }

#else

    qemu_chr_write(s->chr, buf, len);

#endif

}

static inline int fromhex(int v)

{

    if (v >= '0' && v <= '9')

        return v - '0';

    else if (v >= 'A' && v <= 'F')

        return v - 'A' + 10;

    else if (v >= 'a' && v <= 'f')

        return v - 'a' + 10;

    else

        return 0;

}

static inline int tohex(int v)

{

    if (v < 10)

        return v + '0';

    else

        return v - 10 + 'a';

}

static void memtohex(char *buf, const uint8_t *mem, int len)

{

    int i, c;

    char *q;

    q = buf;

    for(i = 0; i < len; i++) {

        c = mem[i];

        *q++ = tohex(c >> 4);

        *q++ = tohex(c & 0xf);

    }

    *q = '\0';

}

static void hextomem(uint8_t *mem, const char *buf, int len)

{

    int i;

    for(i = 0; i < len; i++) {

        mem[i] = (fromhex(buf[0]) << 4) | fromhex(buf[1]);

        buf += 2;

    }

}

/* return -1 if error, 0 if OK */

static int put_packet_binary(GDBState *s, const char *buf, int len)

{

    int csum, i;

    uint8_t *p;

    for(;;) {

        p = s->last_packet;

        *(p++) = '$';

        memcpy(p, buf, len);

        p += len;

        csum = 0;

        for(i = 0; i < len; i++) {

            csum += buf[i];

        }

        *(p++) = '#';

        *(p++) = tohex((csum >> 4) & 0xf);

        *(p++) = tohex((csum) & 0xf);

        s->last_packet_len = p - s->last_packet;

        put_buffer(s, (uint8_t *)s->last_packet, s->last_packet_len);

#ifdef CONFIG_USER_ONLY

        i = get_char(s);

        if (i < 0)

            return -1;

        if (i == '+')

            break;

#else

        break;

#endif

    }

    return 0;

}

/* return -1 if error, 0 if OK */

static int put_packet(GDBState *s, const char *buf)

{

#ifdef DEBUG_GDB

    printf("reply='%s'\n", buf);

#endif

    return put_packet_binary(s, buf, strlen(buf));

}

/* The GDB remote protocol transfers values in target byte order.  This means

   we can use the raw memory access routines to access the value buffer.

   Conveniently, these also handle the case where the buffer is mis-aligned.

 */

#define GET_REG8(val) do { \

    stb_p(mem_buf, val); \

    return 1; \

    } while(0)

#define GET_REG16(val) do { \

    stw_p(mem_buf, val); \

    return 2; \

    } while(0)

#define GET_REG32(val) do { \

    stl_p(mem_buf, val); \

    return 4; \

    } while(0)

#define GET_REG64(val) do { \

    stq_p(mem_buf, val); \

    return 8; \

    } while(0)

#if TARGET_LONG_BITS == 64

#define GET_REGL(val) GET_REG64(val)

#define ldtul_p(addr) ldq_p(addr)

#else

#define GET_REGL(val) GET_REG32(val)

#define ldtul_p(addr) ldl_p(addr)

#endif

#if defined(TARGET_I386)

#ifdef TARGET_X86_64

static const int gpr_map[16] = {

    R_EAX, R_EBX, R_ECX, R_EDX, R_ESI, R_EDI, R_EBP, R_ESP,

    8, 9, 10, 11, 12, 13, 14, 15

};

#else

static const int gpr_map[8] = {0, 1, 2, 3, 4, 5, 6, 7};

#endif

#define NUM_CORE_REGS (CPU_NB_REGS * 2 + 25)

static int cpu_gdb_read_register(CPUState *env, uint8_t *mem_buf, int n)

{

    if (n < CPU_NB_REGS) {

        GET_REGL(env->regs[gpr_map[n]]);

    } else if (n >= CPU_NB_REGS + 8 && n < CPU_NB_REGS + 16) {

        /* FIXME: byteswap float values.  */

#ifdef USE_X86LDOUBLE

        memcpy(mem_buf, &env->fpregs[n - (CPU_NB_REGS + 8)], 10);

#else

        memset(mem_buf, 0, 10);

#endif

        return 10;

    } else if (n >= CPU_NB_REGS + 24) {

        n -= CPU_NB_REGS + 24;

        if (n < CPU_NB_REGS) {

            stq_p(mem_buf, env->xmm_regs[n].XMM_Q(0));

            stq_p(mem_buf + 8, env->xmm_regs[n].XMM_Q(1));

            return 16;

        } else if (n == CPU_NB_REGS) {

            GET_REG32(env->mxcsr);

        }