1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
|
This is Info file ./gdb.info, produced by Makeinfo version 1.68 from
the input file gdb.texinfo.
START-INFO-DIR-ENTRY
* Gdb: (gdb). The GNU debugger.
END-INFO-DIR-ENTRY
This file documents the GNU debugger GDB.
This is the Seventh Edition, February 1999, of `Debugging with GDB:
the GNU Source-Level Debugger' for GDB Version 4.18.
Copyright (C) 1988-1999 Free Software Foundation, Inc.
Permission is granted to make and distribute verbatim copies of this
manual provided the copyright notice and this permission notice are
preserved on all copies.
Permission is granted to copy and distribute modified versions of
this manual under the conditions for verbatim copying, provided also
that the entire resulting derived work is distributed under the terms
of a permission notice identical to this one.
Permission is granted to copy and distribute translations of this
manual into another language, under the above conditions for modified
versions.
File: gdb.info, Node: Files, Next: Symbol Errors, Prev: GDB Files, Up: GDB Files
Commands to specify files
=========================
You may want to specify executable and core dump file names. The
usual way to do this is at start-up time, using the arguments to GDB's
start-up commands (*note Getting In and Out of GDB: Invocation.).
Occasionally it is necessary to change to a different file during a
GDB session. Or you may run GDB and forget to specify a file you want
to use. In these situations the GDB commands to specify new files are
useful.
`file FILENAME'
Use FILENAME as the program to be debugged. It is read for its
symbols and for the contents of pure memory. It is also the
program executed when you use the `run' command. If you do not
specify a directory and the file is not found in the GDB working
directory, GDB uses the environment variable `PATH' as a list of
directories to search, just as the shell does when looking for a
program to run. You can change the value of this variable, for
both GDB and your program, using the `path' command.
On systems with memory-mapped files, an auxiliary file
`FILENAME.syms' may hold symbol table information for FILENAME.
If so, GDB maps in the symbol table from `FILENAME.syms', starting
up more quickly. See the descriptions of the file options
`-mapped' and `-readnow' (available on the command line, and with
the commands `file', `symbol-file', or `add-symbol-file',
described below), for more information.
`file'
`file' with no argument makes GDB discard any information it has
on both executable file and the symbol table.
`exec-file [ FILENAME ]'
Specify that the program to be run (but not the symbol table) is
found in FILENAME. GDB searches the environment variable `PATH'
if necessary to locate your program. Omitting FILENAME means to
discard information on the executable file.
`symbol-file [ FILENAME ]'
Read symbol table information from file FILENAME. `PATH' is
searched when necessary. Use the `file' command to get both symbol
table and program to run from the same file.
`symbol-file' with no argument clears out GDB information on your
program's symbol table.
The `symbol-file' command causes GDB to forget the contents of its
convenience variables, the value history, and all breakpoints and
auto-display expressions. This is because they may contain
pointers to the internal data recording symbols and data types,
which are part of the old symbol table data being discarded inside
GDB.
`symbol-file' does not repeat if you press <RET> again after
executing it once.
When GDB is configured for a particular environment, it
understands debugging information in whatever format is the
standard generated for that environment; you may use either a GNU
compiler, or other compilers that adhere to the local conventions.
Best results are usually obtained from GNU compilers; for example,
using `gcc' you can generate debugging information for optimized
code.
For most kinds of object files, with the exception of old SVR3
systems using COFF, the `symbol-file' command does not normally
read the symbol table in full right away. Instead, it scans the
symbol table quickly to find which source files and which symbols
are present. The details are read later, one source file at a
time, as they are needed.
The purpose of this two-stage reading strategy is to make GDB
start up faster. For the most part, it is invisible except for
occasional pauses while the symbol table details for a particular
source file are being read. (The `set verbose' command can turn
these pauses into messages if desired. *Note Optional warnings
and messages: Messages/Warnings.)
We have not implemented the two-stage strategy for COFF yet. When
the symbol table is stored in COFF format, `symbol-file' reads the
symbol table data in full right away. Note that "stabs-in-COFF"
still does the two-stage strategy, since the debug info is actually
in stabs format.
`symbol-file FILENAME [ -readnow ] [ -mapped ]'
`file FILENAME [ -readnow ] [ -mapped ]'
You can override the GDB two-stage strategy for reading symbol
tables by using the `-readnow' option with any of the commands that
load symbol table information, if you want to be sure GDB has the
entire symbol table available.
If memory-mapped files are available on your system through the
`mmap' system call, you can use another option, `-mapped', to
cause GDB to write the symbols for your program into a reusable
file. Future GDB debugging sessions map in symbol information
from this auxiliary symbol file (if the program has not changed),
rather than spending time reading the symbol table from the
executable program. Using the `-mapped' option has the same
effect as starting GDB with the `-mapped' command-line option.
You can use both options together, to make sure the auxiliary
symbol file has all the symbol information for your program.
The auxiliary symbol file for a program called MYPROG is called
`MYPROG.syms'. Once this file exists (so long as it is newer than
the corresponding executable), GDB always attempts to use it when
you debug MYPROG; no special options or commands are needed.
The `.syms' file is specific to the host machine where you run
GDB. It holds an exact image of the internal GDB symbol table.
It cannot be shared across multiple host platforms.
`core-file [ FILENAME ]'
Specify the whereabouts of a core dump file to be used as the
"contents of memory". Traditionally, core files contain only some
parts of the address space of the process that generated them; GDB
can access the executable file itself for other parts.
`core-file' with no argument specifies that no core file is to be
used.
Note that the core file is ignored when your program is actually
running under GDB. So, if you have been running your program and
you wish to debug a core file instead, you must kill the
subprocess in which the program is running. To do this, use the
`kill' command (*note Killing the child process: Kill Process.).
`add-symbol-file FILENAME ADDRESS'
`add-symbol-file FILENAME ADDRESS [ -readnow ] [ -mapped ]'
The `add-symbol-file' command reads additional symbol table
information from the file FILENAME. You would use this command
when FILENAME has been dynamically loaded (by some other means)
into the program that is running. ADDRESS should be the memory
address at which the file has been loaded; GDB cannot figure this
out for itself. You can specify ADDRESS as an expression.
The symbol table of the file FILENAME is added to the symbol table
originally read with the `symbol-file' command. You can use the
`add-symbol-file' command any number of times; the new symbol data
thus read keeps adding to the old. To discard all old symbol data
instead, use the `symbol-file' command.
`add-symbol-file' does not repeat if you press <RET> after using
it.
You can use the `-mapped' and `-readnow' options just as with the
`symbol-file' command, to change how GDB manages the symbol table
information for FILENAME.
`add-shared-symbol-file'
The `add-shared-symbol-file' command can be used only under
Harris' CXUX operating system for the Motorola 88k. GDB
automatically looks for shared libraries, however if GDB does not
find yours, you can run `add-shared-symbol-file'. It takes no
arguments.
`section'
The `section' command changes the base address of section SECTION
of the exec file to ADDR. This can be used if the exec file does
not contain section addresses, (such as in the a.out format), or
when the addresses specified in the file itself are wrong. Each
section must be changed separately. The "info files" command
lists all the sections and their addresses.
`info files'
`info target'
`info files' and `info target' are synonymous; both print the
current target (*note Specifying a Debugging Target: Targets.),
including the names of the executable and core dump files
currently in use by GDB, and the files from which symbols were
loaded. The command `help target' lists all possible targets
rather than current ones.
All file-specifying commands allow both absolute and relative file
names as arguments. GDB always converts the file name to an absolute
file name and remembers it that way.
GDB supports HP-UX, SunOS, SVr4, Irix 5, and IBM RS/6000 shared
libraries. GDB automatically loads symbol definitions from shared
libraries when you use the `run' command, or when you examine a core
file. (Before you issue the `run' command, GDB does not understand
references to a function in a shared library, however--unless you are
debugging a core file).
`info share'
`info sharedlibrary'
Print the names of the shared libraries which are currently loaded.
`sharedlibrary REGEX'
`share REGEX'
Load shared object library symbols for files matching a Unix
regular expression. As with files loaded automatically, it only
loads shared libraries required by your program for a core file or
after typing `run'. If REGEX is omitted all shared libraries
required by your program are loaded.
File: gdb.info, Node: Symbol Errors, Prev: Files, Up: GDB Files
Errors reading symbol files
===========================
While reading a symbol file, GDB occasionally encounters problems,
such as symbol types it does not recognize, or known bugs in compiler
output. By default, GDB does not notify you of such problems, since
they are relatively common and primarily of interest to people
debugging compilers. If you are interested in seeing information about
ill-constructed symbol tables, you can either ask GDB to print only one
message about each such type of problem, no matter how many times the
problem occurs; or you can ask GDB to print more messages, to see how
many times the problems occur, with the `set complaints' command (*note
Optional warnings and messages: Messages/Warnings.).
The messages currently printed, and their meanings, include:
`inner block not inside outer block in SYMBOL'
The symbol information shows where symbol scopes begin and end
(such as at the start of a function or a block of statements).
This error indicates that an inner scope block is not fully
contained in its outer scope blocks.
GDB circumvents the problem by treating the inner block as if it
had the same scope as the outer block. In the error message,
SYMBOL may be shown as "`(don't know)'" if the outer block is not a
function.
`block at ADDRESS out of order'
The symbol information for symbol scope blocks should occur in
order of increasing addresses. This error indicates that it does
not do so.
GDB does not circumvent this problem, and has trouble locating
symbols in the source file whose symbols it is reading. (You can
often determine what source file is affected by specifying `set
verbose on'. *Note Optional warnings and messages:
Messages/Warnings.)
`bad block start address patched'
The symbol information for a symbol scope block has a start address
smaller than the address of the preceding source line. This is
known to occur in the SunOS 4.1.1 (and earlier) C compiler.
GDB circumvents the problem by treating the symbol scope block as
starting on the previous source line.
`bad string table offset in symbol N'
Symbol number N contains a pointer into the string table which is
larger than the size of the string table.
GDB circumvents the problem by considering the symbol to have the
name `foo', which may cause other problems if many symbols end up
with this name.
`unknown symbol type `0xNN''
The symbol information contains new data types that GDB does not
yet know how to read. `0xNN' is the symbol type of the
misunderstood information, in hexadecimal.
GDB circumvents the error by ignoring this symbol information.
This usually allows you to debug your program, though certain
symbols are not accessible. If you encounter such a problem and
feel like debugging it, you can debug `gdb' with itself,
breakpoint on `complain', then go up to the function
`read_dbx_symtab' and examine `*bufp' to see the symbol.
`stub type has NULL name'
GDB could not find the full definition for a struct or class.
`const/volatile indicator missing (ok if using g++ v1.x), got...'
The symbol information for a C++ member function is missing some
information that recent versions of the compiler should have output
for it.
`info mismatch between compiler and debugger'
GDB could not parse a type specification output by the compiler.
File: gdb.info, Node: Targets, Next: Controlling GDB, Prev: GDB Files, Up: Top
Specifying a Debugging Target
*****************************
A "target" is the execution environment occupied by your program.
Often, GDB runs in the same host environment as your program; in that
case, the debugging target is specified as a side effect when you use
the `file' or `core' commands. When you need more flexibility--for
example, running GDB on a physically separate host, or controlling a
standalone system over a serial port or a realtime system over a TCP/IP
connection--you can use the `target' command to specify one of the
target types configured for GDB (*note Commands for managing targets:
Target Commands.).
* Menu:
* Active Targets:: Active targets
* Target Commands:: Commands for managing targets
* Byte Order:: Choosing target byte order
* Remote:: Remote debugging
File: gdb.info, Node: Active Targets, Next: Target Commands, Prev: Targets, Up: Targets
Active targets
==============
There are three classes of targets: processes, core files, and
executable files. GDB can work concurrently on up to three active
targets, one in each class. This allows you to (for example) start a
process and inspect its activity without abandoning your work on a core
file.
For example, if you execute `gdb a.out', then the executable file
`a.out' is the only active target. If you designate a core file as
well--presumably from a prior run that crashed and coredumped--then GDB
has two active targets and uses them in tandem, looking first in the
corefile target, then in the executable file, to satisfy requests for
memory addresses. (Typically, these two classes of target are
complementary, since core files contain only a program's read-write
memory--variables and so on--plus machine status, while executable
files contain only the program text and initialized data.)
When you type `run', your executable file becomes an active process
target as well. When a process target is active, all GDB commands
requesting memory addresses refer to that target; addresses in an
active core file or executable file target are obscured while the
process target is active.
Use the `core-file' and `exec-file' commands to select a new core
file or executable target (*note Commands to specify files: Files.).
To specify as a target a process that is already running, use the
`attach' command (*note Debugging an already-running process: Attach.).
File: gdb.info, Node: Target Commands, Next: Byte Order, Prev: Active Targets, Up: Targets
Commands for managing targets
=============================
`target TYPE PARAMETERS'
Connects the GDB host environment to a target machine or process.
A target is typically a protocol for talking to debugging
facilities. You use the argument TYPE to specify the type or
protocol of the target machine.
Further PARAMETERS are interpreted by the target protocol, but
typically include things like device names or host names to connect
with, process numbers, and baud rates.
The `target' command does not repeat if you press <RET> again
after executing the command.
`help target'
Displays the names of all targets available. To display targets
currently selected, use either `info target' or `info files'
(*note Commands to specify files: Files.).
`help target NAME'
Describe a particular target, including any parameters necessary to
select it.
`set gnutarget ARGS'
GDB uses its own library BFD to read your files. GDB knows
whether it is reading an "executable", a "core", or a ".o" file;
however, you can specify the file format with the `set gnutarget'
command. Unlike most `target' commands, with `gnutarget' the
`target' refers to a program, not a machine.
*Warning:* To specify a file format with `set gnutarget', you must
know the actual BFD name.
*Note Commands to specify files: Files.
`show gnutarget'
Use the `show gnutarget' command to display what file format
`gnutarget' is set to read. If you have not set `gnutarget', GDB
will determine the file format for each file automatically, and
`show gnutarget' displays `The current BDF target is "auto"'.
Here are some common targets (available, or not, depending on the GDB
configuration):
`target exec PROGRAM'
An executable file. `target exec PROGRAM' is the same as
`exec-file PROGRAM'.
`target core FILENAME'
A core dump file. `target core FILENAME' is the same as
`core-file FILENAME'.
`target remote DEV'
Remote serial target in GDB-specific protocol. The argument DEV
specifies what serial device to use for the connection (e.g.
`/dev/ttya'). *Note Remote debugging: Remote. `target remote' now
supports the `load' command. This is only useful if you have some
other way of getting the stub to the target system, and you can put
it somewhere in memory where it won't get clobbered by the
download.
`target sim'
CPU simulator. *Note Simulated CPU Target: Simulator.
The following targets are all CPU-specific, and only available for
specific configurations.
`target abug DEV'
ABug ROM monitor for M68K.
`target adapt DEV'
Adapt monitor for A29K.
`target amd-eb DEV SPEED PROG'
Remote PC-resident AMD EB29K board, attached over serial lines.
DEV is the serial device, as for `target remote'; SPEED allows you
to specify the linespeed; and PROG is the name of the program to
be debugged, as it appears to DOS on the PC. *Note The EBMON
protocol for AMD29K: EB29K Remote.
`target array DEV'
Array Tech LSI33K RAID controller board.
`target bug DEV'
BUG monitor, running on a MVME187 (m88k) board.
`target cpu32bug DEV'
CPU32BUG monitor, running on a CPU32 (M68K) board.
`target dbug DEV'
dBUG ROM monitor for Motorola ColdFire.
`target ddb DEV'
NEC's DDB monitor for Mips Vr4300.
`target dink32 DEV'
DINK32 ROM monitor for PowerPC.
`target e7000 DEV'
E7000 emulator for Hitachi H8 and SH.
`target es1800 DEV'
ES-1800 emulator for M68K.
`target est DEV'
EST-300 ICE monitor, running on a CPU32 (M68K) board.
`target hms DEV'
A Hitachi SH, H8/300, or H8/500 board, attached via serial line to
your host. Use special commands `device' and `speed' to control
the serial line and the communications speed used. *Note GDB and
Hitachi Microprocessors: Hitachi Remote.
`target lsi DEV'
LSI ROM monitor for Mips.
`target m32r DEV'
Mitsubishi M32R/D ROM monitor.
`target mips DEV'
IDT/SIM ROM monitor for Mips.
`target mon960 DEV'
MON960 monitor for Intel i960.
`target nindy DEVICENAME'
An Intel 960 board controlled by a Nindy Monitor. DEVICENAME is
the name of the serial device to use for the connection, e.g.
`/dev/ttya'. *Note GDB with a remote i960 (Nindy): i960-Nindy
Remote.
`target nrom DEV'
NetROM ROM emulator. This target only supports downloading.
`target op50n DEV'
OP50N monitor, running on an OKI HPPA board.
`target pmon DEV'
PMON ROM monitor for Mips.
`target ppcbug DEV'
`target ppcbug1 DEV'
PPCBUG ROM monitor for PowerPC.
`target r3900 DEV'
Densan DVE-R3900 ROM monitor for Toshiba R3900 Mips.
`target rdi DEV'
ARM Angel monitor, via RDI library interface.
`target rdp DEV'
ARM Demon monitor.
`target rom68k DEV'
ROM 68K monitor, running on an M68K IDP board.
`target rombug DEV'
ROMBUG ROM monitor for OS/9000.
`target sds DEV'
SDS monitor, running on a PowerPC board (such as Motorola's ADS).
`target sparclite DEV'
Fujitsu sparclite boards, used only for the purpose of loading.
You must use an additional command to debug the program. For
example: target remote DEV using GDB standard remote protocol.
`target sh3 DEV'
`target sh3e DEV'
Hitachi SH-3 and SH-3E target systems.
`target st2000 DEV SPEED'
A Tandem ST2000 phone switch, running Tandem's STDBUG protocol.
DEV is the name of the device attached to the ST2000 serial line;
SPEED is the communication line speed. The arguments are not used
if GDB is configured to connect to the ST2000 using TCP or Telnet.
*Note GDB with a Tandem ST2000: ST2000 Remote.
`target udi KEYWORD'
Remote AMD29K target, using the AMD UDI protocol. The KEYWORD
argument specifies which 29K board or simulator to use. *Note The
UDI protocol for AMD29K: UDI29K Remote.
`target vxworks MACHINENAME'
A VxWorks system, attached via TCP/IP. The argument MACHINENAME
is the target system's machine name or IP address. *Note GDB and
VxWorks: VxWorks Remote.
`target w89k DEV'
W89K monitor, running on a Winbond HPPA board.
Different targets are available on different configurations of GDB;
your configuration may have more or fewer targets.
Many remote targets require you to download the executable's code
once you've successfully established a connection.
`load FILENAME'
Depending on what remote debugging facilities are configured into
GDB, the `load' command may be available. Where it exists, it is
meant to make FILENAME (an executable) available for debugging on
the remote system--by downloading, or dynamic linking, for example.
`load' also records the FILENAME symbol table in GDB, like the
`add-symbol-file' command.
If your GDB does not have a `load' command, attempting to execute
it gets the error message "`You can't do that when your target is
...'"
The file is loaded at whatever address is specified in the
executable. For some object file formats, you can specify the
load address when you link the program; for other formats, like
a.out, the object file format specifies a fixed address.
On VxWorks, `load' links FILENAME dynamically on the current
target system as well as adding its symbols in GDB.
With the Nindy interface to an Intel 960 board, `load' downloads
FILENAME to the 960 as well as adding its symbols in GDB.
When you select remote debugging to a Hitachi SH, H8/300, or
H8/500 board (*note GDB and Hitachi Microprocessors: Hitachi
Remote.), the `load' command downloads your program to the Hitachi
board and also opens it as the current executable target for GDB
on your host (like the `file' command).
`load' does not repeat if you press <RET> again after using it.
File: gdb.info, Node: Byte Order, Next: Remote, Prev: Target Commands, Up: Targets
Choosing target byte order
==========================
Some types of processors, such as the MIPS, PowerPC, and Hitachi SH,
offer the ability to run either big-endian or little-endian byte
orders. Usually the executable or symbol will include a bit to
designate the endian-ness, and you will not need to worry about which
to use. However, you may still find it useful to adjust GDB's idea of
processor endian-ness manually.
`set endian big'
Instruct GDB to assume the target is big-endian.
`set endian little'
Instruct GDB to assume the target is little-endian.
`set endian auto'
Instruct GDB to use the byte order associated with the executable.
`show endian'
Display GDB's current idea of the target byte order.
Note that these commands merely adjust interpretation of symbolic
data on the host, and that they have absolutely no effect on the target
system.
File: gdb.info, Node: Remote, Prev: Byte Order, Up: Targets
Remote debugging
================
If you are trying to debug a program running on a machine that
cannot run GDB in the usual way, it is often useful to use remote
debugging. For example, you might use remote debugging on an operating
system kernel, or on a small system which does not have a general
purpose operating system powerful enough to run a full-featured
debugger.
Some configurations of GDB have special serial or TCP/IP interfaces
to make this work with particular debugging targets. In addition, GDB
comes with a generic serial protocol (specific to GDB, but not specific
to any particular target system) which you can use if you write the
remote stubs--the code that runs on the remote system to communicate
with GDB.
Other remote targets may be available in your configuration of GDB;
use `help target' to list them.
* Menu:
* Remote Serial:: GDB remote serial protocol
* i960-Nindy Remote:: GDB with a remote i960 (Nindy)
* UDI29K Remote:: The UDI protocol for AMD29K
* EB29K Remote:: The EBMON protocol for AMD29K
* VxWorks Remote:: GDB and VxWorks
* ST2000 Remote:: GDB with a Tandem ST2000
* Hitachi Remote:: GDB and Hitachi Microprocessors
* MIPS Remote:: GDB and MIPS boards
* Sparclet Remote:: GDB and Sparclet boards
* Simulator:: Simulated CPU target
File: gdb.info, Node: Remote Serial, Next: i960-Nindy Remote, Up: Remote
The GDB remote serial protocol
------------------------------
To debug a program running on another machine (the debugging
"target" machine), you must first arrange for all the usual
prerequisites for the program to run by itself. For example, for a C
program, you need:
1. A startup routine to set up the C runtime environment; these
usually have a name like `crt0'. The startup routine may be
supplied by your hardware supplier, or you may have to write your
own.
2. You probably need a C subroutine library to support your program's
subroutine calls, notably managing input and output.
3. A way of getting your program to the other machine--for example, a
download program. These are often supplied by the hardware
manufacturer, but you may have to write your own from hardware
documentation.
The next step is to arrange for your program to use a serial port to
communicate with the machine where GDB is running (the "host" machine).
In general terms, the scheme looks like this:
*On the host,*
GDB already understands how to use this protocol; when everything
else is set up, you can simply use the `target remote' command
(*note Specifying a Debugging Target: Targets.).
*On the target,*
you must link with your program a few special-purpose subroutines
that implement the GDB remote serial protocol. The file
containing these subroutines is called a "debugging stub".
On certain remote targets, you can use an auxiliary program
`gdbserver' instead of linking a stub into your program. *Note
Using the `gdbserver' program: Server, for details.
The debugging stub is specific to the architecture of the remote
machine; for example, use `sparc-stub.c' to debug programs on SPARC
boards.
These working remote stubs are distributed with GDB:
`i386-stub.c'
For Intel 386 and compatible architectures.
`m68k-stub.c'
For Motorola 680x0 architectures.
`sh-stub.c'
For Hitachi SH architectures.
`sparc-stub.c'
For SPARC architectures.
`sparcl-stub.c'
For Fujitsu SPARCLITE architectures.
The `README' file in the GDB distribution may list other recently
added stubs.
* Menu:
* Stub Contents:: What the stub can do for you
* Bootstrapping:: What you must do for the stub
* Debug Session:: Putting it all together
* Protocol:: Outline of the communication protocol
* Server:: Using the `gdbserver' program
* NetWare:: Using the `gdbserve.nlm' program
File: gdb.info, Node: Stub Contents, Next: Bootstrapping, Up: Remote Serial
What the stub can do for you
............................
The debugging stub for your architecture supplies these three
subroutines:
`set_debug_traps'
This routine arranges for `handle_exception' to run when your
program stops. You must call this subroutine explicitly near the
beginning of your program.
`handle_exception'
This is the central workhorse, but your program never calls it
explicitly--the setup code arranges for `handle_exception' to run
when a trap is triggered.
`handle_exception' takes control when your program stops during
execution (for example, on a breakpoint), and mediates
communications with GDB on the host machine. This is where the
communications protocol is implemented; `handle_exception' acts as
the GDB representative on the target machine; it begins by sending
summary information on the state of your program, then continues
to execute, retrieving and transmitting any information GDB needs,
until you execute a GDB command that makes your program resume; at
that point, `handle_exception' returns control to your own code on
the target machine.
`breakpoint'
Use this auxiliary subroutine to make your program contain a
breakpoint. Depending on the particular situation, this may be
the only way for GDB to get control. For instance, if your target
machine has some sort of interrupt button, you won't need to call
this; pressing the interrupt button transfers control to
`handle_exception'--in effect, to GDB. On some machines, simply
receiving characters on the serial port may also trigger a trap;
again, in that situation, you don't need to call `breakpoint' from
your own program--simply running `target remote' from the host GDB
session gets control.
Call `breakpoint' if none of these is true, or if you simply want
to make certain your program stops at a predetermined point for the
start of your debugging session.
File: gdb.info, Node: Bootstrapping, Next: Debug Session, Prev: Stub Contents, Up: Remote Serial
What you must do for the stub
.............................
The debugging stubs that come with GDB are set up for a particular
chip architecture, but they have no information about the rest of your
debugging target machine.
First of all you need to tell the stub how to communicate with the
serial port.
`int getDebugChar()'
Write this subroutine to read a single character from the serial
port. It may be identical to `getchar' for your target system; a
different name is used to allow you to distinguish the two if you
wish.
`void putDebugChar(int)'
Write this subroutine to write a single character to the serial
port. It may be identical to `putchar' for your target system; a
different name is used to allow you to distinguish the two if you
wish.
If you want GDB to be able to stop your program while it is running,
you need to use an interrupt-driven serial driver, and arrange for it
to stop when it receives a `^C' (`\003', the control-C character).
That is the character which GDB uses to tell the remote system to stop.
Getting the debugging target to return the proper status to GDB
probably requires changes to the standard stub; one quick and dirty way
is to just execute a breakpoint instruction (the "dirty" part is that
GDB reports a `SIGTRAP' instead of a `SIGINT').
Other routines you need to supply are:
`void exceptionHandler (int EXCEPTION_NUMBER, void *EXCEPTION_ADDRESS)'
Write this function to install EXCEPTION_ADDRESS in the exception
handling tables. You need to do this because the stub does not
have any way of knowing what the exception handling tables on your
target system are like (for example, the processor's table might
be in ROM, containing entries which point to a table in RAM).
EXCEPTION_NUMBER is the exception number which should be changed;
its meaning is architecture-dependent (for example, different
numbers might represent divide by zero, misaligned access, etc).
When this exception occurs, control should be transferred directly
to EXCEPTION_ADDRESS, and the processor state (stack, registers,
and so on) should be just as it is when a processor exception
occurs. So if you want to use a jump instruction to reach
EXCEPTION_ADDRESS, it should be a simple jump, not a jump to
subroutine.
For the 386, EXCEPTION_ADDRESS should be installed as an interrupt
gate so that interrupts are masked while the handler runs. The
gate should be at privilege level 0 (the most privileged level).
The SPARC and 68k stubs are able to mask interrup themselves
without help from `exceptionHandler'.
`void flush_i_cache()'
(sparc and sparclite only) Write this subroutine to flush the
instruction cache, if any, on your target machine. If there is no
instruction cache, this subroutine may be a no-op.
On target machines that have instruction caches, GDB requires this
function to make certain that the state of your program is stable.
You must also make sure this library routine is available:
`void *memset(void *, int, int)'
This is the standard library function `memset' that sets an area of
memory to a known value. If you have one of the free versions of
`libc.a', `memset' can be found there; otherwise, you must either
obtain it from your hardware manufacturer, or write your own.
If you do not use the GNU C compiler, you may need other standard
library subroutines as well; this varies from one stub to another, but
in general the stubs are likely to use any of the common library
subroutines which `gcc' generates as inline code.
File: gdb.info, Node: Debug Session, Next: Protocol, Prev: Bootstrapping, Up: Remote Serial
Putting it all together
.......................
In summary, when your program is ready to debug, you must follow
these steps.
1. Make sure you have the supporting low-level routines (*note What
you must do for the stub: Bootstrapping.):
`getDebugChar', `putDebugChar',
`flush_i_cache', `memset', `exceptionHandler'.
2. Insert these lines near the top of your program:
set_debug_traps();
breakpoint();
3. For the 680x0 stub only, you need to provide a variable called
`exceptionHook'. Normally you just use:
void (*exceptionHook)() = 0;
but if before calling `set_debug_traps', you set it to point to a
function in your program, that function is called when `GDB'
continues after stopping on a trap (for example, bus error). The
function indicated by `exceptionHook' is called with one
parameter: an `int' which is the exception number.
4. Compile and link together: your program, the GDB debugging stub for
your target architecture, and the supporting subroutines.
5. Make sure you have a serial connection between your target machine
and the GDB host, and identify the serial port on the host.
6. Download your program to your target machine (or get it there by
whatever means the manufacturer provides), and start it.
7. To start remote debugging, run GDB on the host machine, and specify
as an executable file the program that is running in the remote
machine. This tells GDB how to find your program's symbols and
the contents of its pure text.
Then establish communication using the `target remote' command.
Its argument specifies how to communicate with the target
machine--either via a devicename attached to a direct serial line,
or a TCP port (usually to a terminal server which in turn has a
serial line to the target). For example, to use a serial line
connected to the device named `/dev/ttyb':
target remote /dev/ttyb
To use a TCP connection, use an argument of the form `HOST:port'.
For example, to connect to port 2828 on a terminal server named
`manyfarms':
target remote manyfarms:2828
Now you can use all the usual commands to examine and change data
and to step and continue the remote program.
To resume the remote program and stop debugging it, use the `detach'
command.
Whenever GDB is waiting for the remote program, if you type the
interrupt character (often <C-C>), GDB attempts to stop the program.
This may or may not succeed, depending in part on the hardware and the
serial drivers the remote system uses. If you type the interrupt
character once again, GDB displays this prompt:
Interrupted while waiting for the program.
Give up (and stop debugging it)? (y or n)
If you type `y', GDB abandons the remote debugging session. (If you
decide you want to try again later, you can use `target remote' again
to connect once more.) If you type `n', GDB goes back to waiting.
File: gdb.info, Node: Protocol, Next: Server, Prev: Debug Session, Up: Remote Serial
Communication protocol
......................
The stub files provided with GDB implement the target side of the
communication protocol, and the GDB side is implemented in the GDB
source file `remote.c'. Normally, you can simply allow these
subroutines to communicate, and ignore the details. (If you're
implementing your own stub file, you can still ignore the details: start
with one of the existing stub files. `sparc-stub.c' is the best
organized, and therefore the easiest to read.)
However, there may be occasions when you need to know something about
the protocol--for example, if there is only one serial port to your
target machine, you might want your program to do something special if
it recognizes a packet meant for GDB.
All GDB commands and responses (other than acknowledgements, which
are single characters) are sent as a packet which includes a checksum.
A packet is introduced with the character `$', and ends with the
character `#' followed by a two-digit checksum:
$PACKET INFO#CHECKSUM
CHECKSUM is computed as the modulo 256 sum of the PACKET INFO
characters.
When either the host or the target machine receives a packet, the
first response expected is an acknowledgement: a single character,
either `+' (to indicate the package was received correctly) or `-' (to
request retransmission).
The host (GDB) sends commands, and the target (the debugging stub
incorporated in your program) sends data in response. The target also
sends data when your program stops.
Command packets are distinguished by their first character, which
identifies the kind of command.
These are some of the commands currently supported (for a complete
list of commands, look in `gdb/remote.c.'):
`g'
Requests the values of CPU registers.
`G'
Sets the values of CPU registers.
`mADDR,COUNT'
Read COUNT bytes at location ADDR.
`MADDR,COUNT:...'
Write COUNT bytes at location ADDR.
`c'
`cADDR'
Resume execution at the current address (or at ADDR if supplied).
`s'
`sADDR'
Step the target program for one instruction, from either the
current program counter or from ADDR if supplied.
`k'
Kill the target program.
`?'
Report the most recent signal. To allow you to take advantage of
the GDB signal handling commands, one of the functions of the
debugging stub is to report CPU traps as the corresponding POSIX
signal values.
`T'
Allows the remote stub to send only the registers that GDB needs
to make a quick decision about single-stepping or conditional
breakpoints. This eliminates the need to fetch the entire
register set for each instruction being stepped through.
GDB now implements a write-through cache for registers and only
re-reads the registers if the target has run.
If you have trouble with the serial connection, you can use the
command `set remotedebug'. This makes GDB report on all packets sent
back and forth across the serial line to the remote machine. The
packet-debugging information is printed on the GDB standard output
stream. `set remotedebug off' turns it off, and `show remotedebug'
shows you its current state.
File: gdb.info, Node: Server, Next: NetWare, Prev: Protocol, Up: Remote Serial
Using the `gdbserver' program
.............................
`gdbserver' is a control program for Unix-like systems, which allows
you to connect your program with a remote GDB via `target remote'--but
without linking in the usual debugging stub.
`gdbserver' is not a complete replacement for the debugging stubs,
because it requires essentially the same operating-system facilities
that GDB itself does. In fact, a system that can run `gdbserver' to
connect to a remote GDB could also run GDB locally! `gdbserver' is
sometimes useful nevertheless, because it is a much smaller program
than GDB itself. It is also easier to port than all of GDB, so you may
be able to get started more quickly on a new system by using
`gdbserver'. Finally, if you develop code for real-time systems, you
may find that the tradeoffs involved in real-time operation make it
more convenient to do as much development work as possible on another
system, for example by cross-compiling. You can use `gdbserver' to
make a similar choice for debugging.
GDB and `gdbserver' communicate via either a serial line or a TCP
connection, using the standard GDB remote serial protocol.
*On the target machine,*
you need to have a copy of the program you want to debug.
`gdbserver' does not need your program's symbol table, so you can
strip the program if necessary to save space. GDB on the host
system does all the symbol handling.
To use the server, you must tell it how to communicate with GDB;
the name of your program; and the arguments for your program. The
syntax is:
target> gdbserver COMM PROGRAM [ ARGS ... ]
COMM is either a device name (to use a serial line) or a TCP
hostname and portnumber. For example, to debug Emacs with the
argument `foo.txt' and communicate with GDB over the serial port
`/dev/com1':
target> gdbserver /dev/com1 emacs foo.txt
`gdbserver' waits passively for the host GDB to communicate with
it.
To use a TCP connection instead of a serial line:
target> gdbserver host:2345 emacs foo.txt
The only difference from the previous example is the first
argument, specifying that you are communicating with the host GDB
via TCP. The `host:2345' argument means that `gdbserver' is to
expect a TCP connection from machine `host' to local TCP port 2345.
(Currently, the `host' part is ignored.) You can choose any number
you want for the port number as long as it does not conflict with
any TCP ports already in use on the target system (for example,
`23' is reserved for `telnet').(1) You must use the same port
number with the host GDB `target remote' command.
*On the GDB host machine,*
you need an unstripped copy of your program, since GDB needs
symbols and debugging information. Start up GDB as usual, using
the name of the local copy of your program as the first argument.
(You may also need the `--baud' option if the serial line is
running at anything other than 9600 bps.) After that, use `target
remote' to establish communications with `gdbserver'. Its argument
is either a device name (usually a serial device, like
`/dev/ttyb'), or a TCP port descriptor in the form `HOST:PORT'.
For example:
(gdb) target remote /dev/ttyb
communicates with the server via serial line `/dev/ttyb', and
(gdb) target remote the-target:2345
communicates via a TCP connection to port 2345 on host
`the-target'. For TCP connections, you must start up `gdbserver'
prior to using the `target remote' command. Otherwise you may get
an error whose text depends on the host system, but which usually
looks something like `Connection refused'.
---------- Footnotes ----------
(1) If you choose a port number that conflicts with another service,
`gdbserver' prints an error message and exits.
File: gdb.info, Node: NetWare, Prev: Server, Up: Remote Serial
Using the `gdbserve.nlm' program
................................
`gdbserve.nlm' is a control program for NetWare systems, which
allows you to connect your program with a remote GDB via `target
remote'.
GDB and `gdbserve.nlm' communicate via a serial line, using the
standard GDB remote serial protocol.
*On the target machine,*
you need to have a copy of the program you want to debug.
`gdbserve.nlm' does not need your program's symbol table, so you
can strip the program if necessary to save space. GDB on the host
system does all the symbol handling.
To use the server, you must tell it how to communicate with GDB;
the name of your program; and the arguments for your program. The
syntax is:
load gdbserve [ BOARD=BOARD ] [ PORT=PORT ]
[ BAUD=BAUD ] PROGRAM [ ARGS ... ]
BOARD and PORT specify the serial line; BAUD specifies the baud
rate used by the connection. PORT and NODE default to 0, BAUD
defaults to 9600 bps.
For example, to debug Emacs with the argument `foo.txt'and
communicate with GDB over serial port number 2 or board 1 using a
19200 bps connection:
load gdbserve BOARD=1 PORT=2 BAUD=19200 emacs foo.txt
*On the GDB host machine,*
you need an unstripped copy of your program, since GDB needs
symbols and debugging information. Start up GDB as usual, using
the name of the local copy of your program as the first argument.
(You may also need the `--baud' option if the serial line is
running at anything other than 9600 bps. After that, use `target
remote' to establish communications with `gdbserve.nlm'. Its
argument is a device name (usually a serial device, like
`/dev/ttyb'). For example:
(gdb) target remote /dev/ttyb
communications with the server via serial line `/dev/ttyb'.
File: gdb.info, Node: i960-Nindy Remote, Next: UDI29K Remote, Prev: Remote Serial, Up: Remote
GDB with a remote i960 (Nindy)
------------------------------
"Nindy" is a ROM Monitor program for Intel 960 target systems. When
GDB is configured to control a remote Intel 960 using Nindy, you can
tell GDB how to connect to the 960 in several ways:
* Through command line options specifying serial port, version of the
Nindy protocol, and communications speed;
* By responding to a prompt on startup;
* By using the `target' command at any point during your GDB
session. *Note Commands for managing targets: Target Commands.
* Menu:
* Nindy Startup:: Startup with Nindy
* Nindy Options:: Options for Nindy
* Nindy Reset:: Nindy reset command
File: gdb.info, Node: Nindy Startup, Next: Nindy Options, Up: i960-Nindy Remote
Startup with Nindy
..................
If you simply start `gdb' without using any command-line options,
you are prompted for what serial port to use, *before* you reach the
ordinary GDB prompt:
Attach /dev/ttyNN -- specify NN, or "quit" to quit:
Respond to the prompt with whatever suffix (after `/dev/tty')
identifies the serial port you want to use. You can, if you choose,
simply start up with no Nindy connection by responding to the prompt
with an empty line. If you do this and later wish to attach to Nindy,
use `target' (*note Commands for managing targets: Target Commands.).
|