Debugger Basics - Training

TRACE32 Online Help

TRACE32 Directory

TRACE32 Index

TRACE32 Training ............................................................................................................................ 

Debugger Training ........................................................................................................................ 

Debugger Basics - Training ....................................................................................................... 1

History ...................................................................................................................................... 4

System Concept ...................................................................................................................... 5

On-chip Debug Interface 6
Debug Features 6
TRACE32 Tools 7
On-chip Debug Interface plus On-chip Trace Buffer 9
On-chip Debug Interface plus Trace Port 11
NEXUS Interface 12

Starting a TRACE32 PowerView Instance ............................................................................. 13

Basic TRACE32 PowerView Parameters 13
Configuration File 13
Standard Parameters 14
Examples for Configuration Files 15
Additional Parameters 19
Application Properties (Windows only) 20
Configuration via T32Start (Windows only) 21
About TRACE32 22
Version Information 22
Prepare Full Information for a Support Email 23

Establish your Debug Session ............................................................................................... 24

TRACE32 PowerView .............................................................................................................. 25

TRACE32 PowerView Components 25
Main Menu Bar and Accelerators 26
Main Tool Bar 28
Window Area 30
Command Line 33
Message Line 36
Softkeys 37
State Line 38

Registers .................................................................................................................................. 39

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 1
 Core Registers 39
Display the Core Registers 39
Colored Display of Changed Registers 40
Modify the Contents of a Core Register 41
Special Function Register 42
Display the Special Function Registers 42
Details about a Single Special Function Register 45
Modify a Special Function Register 46
The PER Definition File 47

Memory Display and Modification ......................................................................................... 48

The Data.dump Window 49
Display the Memory Contents 49
Modify the Memory Contents 54
Run-time Memory Access 55
Colored Display of Changed Memory Contents 65
The List Window 66
Displays the Source Listing Around the PC 66
Displays the Source Listing of a Selected Function 67

Breakpoints .............................................................................................................................. 69
Breakpoint Implementations 69
Software Breakpoints in RAM 69
Software Breakpoints in FLASH 70
Onchip Breakpoints in NOR Flash 71
Onchip Breakpoints on Read/Write Accesses 74
Onchip Breakpoints by Processor Architecture 75
ETM Breakpoints for ARM or Cortex-A/-R 87
Breakpoint Types 89
Program Breakpoints 90
Read/Write Breakpoints 92

Breakpoint Handling ............................................................................................................... 94

Breakpoint Setting at Run-time 94
Real-time Breakpoints vs. Intrusive Breakpoints 95
Break.Set Dialog Box 97
The HLL Check Box - Function Name 98
The HLL Check Box - Program Line Number 100
The HLL Check Box - Variable 101
The HLL Check Box - HLL Expression 103
Implementations 104
Actions 105
Options 109
DATA Breakpoints 113
Advanced Breakpoints 117

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 2
 TASK-aware Breakpoints 118
Intrusive TASK-aware Breakpoint 118
Real-time TASK-aware Breakpoint 121
COUNTer 122
Software Counter 122
On-chip Counter 125
CONDition 126
CMD 134
memory/register/var 137
Display a List of all Set Breakpoints 142
Delete Breakpoints 143
Enable/Disable Breakpoints 143
Store Breakpoint Settings 144

Debugging ................................................................................................................................ 145

Debugging of Optimized Code 145
Basic Debug Control 148

Sample-based Profiling .......................................................................................................... 160

Program Counter Sampling 160
Standard Procedure 161
Details 165
TASK Sampling 167

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 3
Debugger Basics - Training

Version 06-Nov-2017

History

07-Jun-16 Chapter “ETM Breakpoints for ARM or Cortex-A/-R” updated.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 4
System Concept

A single-core processor/multi-core chip can provide:

• An on-chip debug interface

• An on-chip debug interface plus an on-chip trace buffer

• An on-chip debug interface plus an off-chip trace port

• A NEXUS interface including an on-chip debug interface

Depending on the debug resources different debug features can be provided and different TRACE32 tools
are offered.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 5
On-chip Debug Interface

The TRACE32 debugger allows you to test your embedded hardware and software by using the on-chip
debug interface. The most common on-chip debug interface is JTAG.

A single on-chip debug interface can be used to debug all cores of a multi-core chip.

Debug Features

Depending on the processor architecture different debug features are available.

Debug features provided by all processor architectures:

• Read/write access to registers

• Read/write access to memories

• Start/stop of program execution

Debug features specific for a processor architecture:

• Number of on-chip breakpoints

• Read/write access to memory while the program execution is running

• Additional features as benchmark counters, triggers etc.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 6
TRACE32 Tools

The TRACE32 debugger hardware always consists of:

• Universal debugger hardware

• Debug cable specific to the processor architecture

Debug Only Modules

PC
Windows / Linux / Mac OS

Target

Debug Cable
PODBUS IN
POWER DEBUG USB INTERFACE / USB 3

USB LAUTERBACH

Connector
POWER

SELECT

Cable TRIG
EMULATE

JTAG
DEBUG CABLE

DEBUG CABLE
USB

LAUTERBACH

POWER
7-9V

PODBUS OUT

POWER DEBUG INTERFACE / USB 3

AC/DC Adapter

Current module:

• POWER DEBUG INTERFACE / USB 3

Deprecated module:

• POWER DEBUG INTERFACE / USB 2

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 7
 Debug Modules with Option for Off-chip Trace Extension

HUB PC or
Workstation

1 Gbit Ethernet
Target

Debug Cable
Ethernet TRIGGER
PODBUS SYNC
POWER DEBUG PRO

Cable

Connector
POWER
ETHERNET

SELECT

RUNNING

JTAG
DEBUG CABLE

DEBUG CABLE
USB

LAUTERBACH
POWER
7-9V

PODBUS OUT LAUTERBACH

PODBUS EXPRESS OUT

POWER DEBUG PRO

AC/DC Adapter

Current module:

• POWER DEBUG PRO (USB 3 and 1 GBit Ethernet)

Deprecated modules:

• POWER DEBUG II (USB 2 and 1 GBit Ethernet)

• POWER DEBUG / ETHERNET (USB 2 and 100 MBit Ethernet)

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 8
On-chip Debug Interface plus On-chip Trace Buffer

A number of single-core processors/multi-core chips offer in addition to the on-chip debug interface an on-
chip trace buffer.

On-chip Trace Features

The on-chip trace buffer can store information:

• On the executed instructions.

• On task/process switches.

• On load/store operations if supported by the on-chip trace generation hardware.

In order to analyze and display the trace information the debug cable needs to provide a Trace License. The
Trace Licenses use the following name convention:

• <core>-TRACE e.g. ARM-TRACE

• or <core>-MCDS) e.g. TriCore-MCDS

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 9
 The display and the evaluation of the trace information is described in the following training manuals:

• “ARM-ETM Training” (training_arm_etm.pdf).

• “AURIX Trace Training” (training_aurix_trace.pdf).

• “Hexagon-ETM Training” (training_hexagon_etm.pdf).

• “Nexus Training” (training_nexus.pdf).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 10
On-chip Debug Interface plus Trace Port

A number of single-core processors/multi-core chips offer in addition to the on-chip debug interface a so-
called trace port. The most common trace port is the TPIU for the ARM/Cortex architecture.

Off-chip Trace Features

The trace port exports in real-time trace information:

• On the executed instructions.

• On task/process switches.

• On load/store operations if supported by the on-chip trace generation logic.

The display and the evaluation of the trace information is described in the following training manuals:

• “ARM-ETM Training” (training_arm_etm.pdf)

• “AURIX Trace Training” (training_aurix_trace.pdf)

• “Hexagon-ETM Training” (training_hexagon_etm.pdf)

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 11
NEXUS Interface

NEXUS is a standardized interface for on-chip debugging and real-time trace especially for the automotive
industry.

NEXUS Features

Debug features provided by all single-core processors/multi-core chips:

• Read/write access to the registers

• Read/write access to all memories

• Start/stop of program execution

• Read/write access to memory while the program execution is running

Debug features specific for single-core processor/multi-core chip:

• Number of on-chip breakpoints

• Benchmark counters, triggers etc.

Trace features provided by all single-core processors/multi-core chips:

• Information on the executed instructions.

• Information on task/process switches.

Trace features specific for the single-core processor/multi-core chip:

• Information on load/store operations if supported by the trace generation logic.

The display and the evaluation of the trace information is described in “Nexus Training”
(training_nexus.pdf).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 12
Starting a TRACE32 PowerView Instance

Basic TRACE32 PowerView Parameters

This chapter describes the basic parameters required to start a TRACE32 PowerView instance.

The parameters are defined in the configuration file. By default the configuration file is named config.t32. It
is located in the TRACE32 system directory (parameter SYS).

Configuration File

Open the file config.t32 from the system directory (default c:\T32\config.t32) with any ASCII editor.

The following rules apply to the configuration file:

• Parameters are defined paragraph by paragraph.

• The first line/headline defines the parameter type.

• Each parameter definition ends with an empty line.

• If no parameter is defined, the default parameter will be used.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 13
Standard Parameters

Parameter Syntax Description

Host interface PBI= Host interface type of TRACE32 tool

<host_interface> hardware (USB or ethernet)

PBI=ICD Full parameter syntax which is not in use.

<host_interface>

Environment OS=
variables ID=<identifier> (ID) Prefix for all files which are saved by
TMP=<temp_directory> the TRACE32 PowerView instance into the
SYS=<system_directory> TMP directory
HELP=<help_directory>
(TMP) Temporary directory used by the
TRACE32 PowerView instance (*)

(SYS) System directory for all TRACE32

files

(HELP) Directory for the TRACE32 help

PDFs (**)

Printer PRINTER=WINDOWS All standard Windows printer can be used

definition from TRACE32 PowerView

License file LICENSE=<license_directory> Directory for the TRACE32 license file

(not required for new tools)

(*) In order to display source code information TRACE32 PowerView creates a

copy of all loaded source files and saves them into the TMP directory.

(**) The TRACE32 online help is PDF-based.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 14
Examples for Configuration Files

Configuration File for USB

Single debugger hardware module connected via USB:

; Host interface
PBI=
USB

; Environment variables
OS=
ID=T32
TMP=C:\temp ; temporary directory for TRACE32
SYS=C:\t32 ; system directory for TRACE32
HELP=C:\t32\pdf ; help directory for TRACE32

; Printer settings
PRINTER=WINDOWS ; all standard windows printer can be
; used from the TRACE32 user interface

Multiple debugger hardware modules connected via USB:

; Host interface
PBI=
USB
NODE=training1 ; NODE name of TRACE32

; Environment variables
OS=
ID=T32_training1
TMP=C:\temp ; temporary directory for TRACE32
SYS=C:\t32 ; system directory for TRACE32
HELP=C:\t32\pdf ; help directory for TRACE32

; Printer settings
PRINTER=WINDOWS ; all standard windows printer can be
; used from TRACE32 PowerView

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 15
 Use the IFCONFIG command to assign a NODE name to a debugger hardware module.

Enter device name

Save device name to

debugger hardware module

IFCONFIG Dialog to assign USB device name

Please be aware that USB device names are case-sensitive

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 16
 Remote Control for POWER DEBUG INTERFACE / USB

TRACE32 allows to communicate with a POWER DEBUG INTERFACE USB from a remote PC. For an
example, see “Example: Remote Control for POWER DEBUG INTERFACE / USB” in TRACE32
Installation Guide, page 58 (installation.pdf).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 17
 Configuration File for Ethernet

; Host interface
PBI=
NET
NODE=training1

; Environment variables
OS=
ID=T32 ; temp directory for TRACE32
SYS=C:\t32 ; system directory for TRACE32
HELP=C:\t32\pdf ; help directory for TRACE32

; Printer settings
PRINTER=WINDOWS ; all standard windows printer can be
; used from the TRACE32 user interface

Ethernet Configuration and Operation Profile

IFCONFIG Dialog to display and change information for the Ethernet interface

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 18
Additional Parameters

Changing the font size can be helpful for a more comfortable display of TRACE32 windows.

; Screen settings
SCREEN=
FONT=SMALL ; Use small fonts

Display with normal font:

:

Display with small font:

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 19
Application Properties (Windows only)

The properties window allows you to configure some basic settings for the TRACE32 software.

Configuration File

Working Directory

Window Size

Definition of the Configuration File

By default the configuration file config.t32 in the TRACE32 system directory (parameter SYS) is used. The
option -c allows you to define your own location and name for the configuration file.

C:\T32_ARM\bin\windows\t32marm.exe -c j:\and\config.t32

Definition of a Working Directory

After its start TRACE32 PowerView is using the specified working directory. It is recommended not to work in
the system directory.

PWD TRACE32 command to display the current working directory

Definition of the Window Size for TRACE32 PowerView

You can choose between Normal window, Minimized and Maximized.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 20
Configuration via T32Start (Windows only)

The basic parameters can also be set up in an intuitive way via T32Start.

A detailed online help for t32start.exe is available via the Help button or in “T32Start” (app_t32start.pdf).

Parameters

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 21
About TRACE32

If you want to contact your local Lauterbach support, it might be helpful to provide some basis information
about your TRACE32 tool.

Version Information

The VERSION window informs you about:

1. The version of the TRACE32 software.

2. The debug licenses programmed into the debug cable and the expiration date of your software
warranty respectively the expiration date of your software maintenance.

3. The serial number of the debug cable.

VERSION.view Display the VERSION window.

VERSION.HARDWARE Display more details about the TRACE32 hardware modules.
VERSION.SOFTWARE Display more details about the TRACE32 software.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 22
Prepare Full Information for a Support Email

Be sure to include detailed system information about your TRACE32 configuration.

1. To generate a system information report, choose Help > Support > Systeminfo.

2. Preferred: click Save to File, and send the system information as an attachment to your e-mail.

3. Click Save to Clipboard, and then paste the system information into your e-mail.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 23
Establish your Debug Session

Before you can start debugging, the debug environment has to be set up. An overview on the most common
setups is given in “Establish Your Debug Session” (tutor_setup.pdf).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 24
TRACE32 PowerView

TRACE32 PowerView Components

Main Menu Bar

Main Tool Bar

Local Buttons

Window Area

Context Menu

Command Line
Message Line
SoftkeyLine
State Line

The structure of the menu bar and the tool bar are defined by the file t32.men
which is located in the TRACE32 system directory.

TRACE32 allows you to modify the menu bar and the tool bar so they will better
fit your requirements. Refer to “Training Menu” (training_menu.pdf) for details.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 25
Main Menu Bar and Accelerators

The main menu bar provides all important TRACE32 functions sorted by groups.

For often used commands accelerators are defined.

Accelerators

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 26
 A user specific menu can be defined very easily:

MENU.AddMenu <name> <command> Add a user menu

MENU.RESet Reset menu to default

; user menu
MENU.AddMenu "Set PC to main" "Register.Set pc main"

; user menu with accelerator

MENU.AddMenu "Set PC to main, ALT+F10" "Register.Set pc main"

User Menu

For more complex changes to the main menu bar refer to “Training Menu”
(training_menu.pdf).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 27
Main Tool Bar

The main tool bar provides fast access to often used commands.

The user can add his own buttons very easily:

MENU.AddTool <tooltip_text> <tool_image> <command> Add a button to the toolbar

MENU.RESet Reset menu to default

; <tooltip text> here: Set PC to main

; <tool image> here: button with capital letters PM in black
; <command> here: Register.Set PC main

MENU.AddTool "Set PC to main" "PM,X" "Register.Set PC main"

User specific
button

Information on the <tool image> can be found in Help -> Contents

TRACE32 Documents -> IDE User Interface -> IDE Reference Guide -> MENU -> Programming
Commands -> TOOLITEM.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 28
 All predefined TRACE32 icons can be inspected as follows:

Or by following TRACE32 command:

ChDir.DO ~~/demo/menu/internal_icons.cmm

The predefined icons can easily be used to create new icons.

; overprint the icon colorpurple with the character v in White color

Menu.AddTool "Set PC to main" "v,W,colorpurple" "Register.Set PC main"

For more complex changes to the main tool bar refer to “Training Menu”
(training_menu.pdf).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 29
Window Area

Save Page Layout

No information about the window layout is saved when you exit TRACE32 PowerView. To save the window
layout use the Store Windows to … command in the Window menu.

Store Windows to … generates a script, that

allows you to reactivate the window-configuration
at any time.

Script example:

// andT32_1000003 Sat Jul 21 16:59:55 2012

B::

TOOLBAR ON
STATUSBAR ON
FRAMEPOS 68.0 5.2857 107. 45.
WINPAGE.RESET

WINCLEAR
WINPOS 0.0 0.0 80. 16. 15. 1. W000
WINTABS 10. 10. 25. 62.
List

WINPOS 0.0 21.643 80. 5. 25. 1. W001

WINTABS 13. 0. 0. 0. 0. 0. 0.
Break.List

WINPAGE.SELECT P000

ENDDO

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 30
 Run the script to reactivate the stored
window-configuration

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 31
 Modify Window

The window header

displays the command
which was executed to
open the window

By clicking with the right

mouse button to the window
header, the command which
was executed to open the
window is re-displayed in the
command line and can be
modified there

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 32
Command Line

Command line

Command Structure

Device prompt: the default device prompt is B::. It stands for BDM which was the first on-chip debug
interface supported by Lauterbach.

A TRACE32 command has the following structure:

Data.dump 0x1000--0x1fff /Byte

Option(s)

Parameter(s)
Subcommand
Command group

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 33
 Command Examples

Data Command group to display, modify … memory

Data.dump Displays a hex dump

Data.Set Modify memory

Data.LOAD.auto Loads code to the target memory

Break Command group to set, list, delete … breakpoints

Break.Set Sets a breakpoint

Break.List Lists all set breakpoint

Break.Delete Deletes a breakpoint

Each command can be abbreviated. The significant letters are always written in upper case letters.

Examples for the parameter syntax and the use of options will be presented throughout this training.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 34
 The Online Help for a Specific Command

Enter the command to the command line.

Add one blank.
Push F1 to get the online help for the specified command.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 35
Message Line

Message Area

Message Line

• Message line for system and error messages

• Message Area window for the display of the last system and error messages

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 36
Softkeys

The softkey line allows to enter a specific command step by step. Here an example:

Select the command group, here Data.

Select the subcommand, here dump.

Angle brackets request an entry from the user,

here e.g. the entry of a <range> or an <address>.

The display of the hex. dump can be adjusted to your needs by an option.

Select the option formats to get a list of all format options.

Select a format option, here Byte.

The command is complete now.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 37
State Line

Cursor Debug Mode

field field field

The Cursor field of the state line provides:

• Boot information (Booting …, Initializing … etc.).

• Information on the item selected by one of the TRACE32 PowerView cursors.

The Debug field of the state line provides:

• Information on the debug communication (system down, system ready etc.)

• Information on the state of the debugger (running, stopped, stopped at breakpoint etc.)

The Mode field of the state line indicates the debug mode. The debug mode defines how source code
information is displayed.

• Asm = assembler code

• Hll = programming language code/high level language

• Mix = a mixture of both

It also defines how single stepping is performed (assembler line-wise or programming language
line-wise).

The debug mode can be changed by using the Mode pull-down.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 38
Registers

Core Registers

Display the Core Registers

Register.view

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 39
Colored Display of Changed Registers

The option /SpotLight advises TRACE32 PowerView to mark changes.

Register.view /SpotLight ; The registers changed by the last

; step are marked in dark red.

; The registers changed by the

; step before the last step are
; marked a little bit lighter.

; This works up to a level of 4.

Establish /SpotLight as default setting

SETUP.Var %SpotLight Establish the option SpotLight as default setting for

- all Variable windows
- Register window
- PERipheral window
- the HLL Stack Frame
- Data.dump window

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 40
Modify the Contents of a Core Register

By double clicking to the register contents

a Register.Set command is automatically displayed
in the command line.
Enter the new value and press return to modify the
register contents.

Register.Set <register> <value> Modify register

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 41
Special Function Register

Display the Special Function Registers

TRACE32 supports a free configurable window to display/manipulate configuration registers and the on-chip
peripheral registers at a logical level. Predefined peripheral files are available for most standard
processors/chips.

Tree Display

The individual configuration registers/on-chip peripherals are organized by TRACE32 PowerView in a tree
structure. On demand, details about a selected register can be displayed.

Please be aware, that TRACE32 permanently updates all windows. The default
update rate is 10 times per second.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 42
 Full Display

Sometimes it might be useful to expand the tree structure from the start.

Use the right mouse and

select Show all

Commands:

PER.view <filename> [<tree_item>] Display the configuration registers/on-chip peripherals

; Display all functional units in expanded mode

; , advises TRACE32 PowerView to use the default peripheral file
; * stands for all <tree-items>
PER.View , "*"

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 43
 ; Display the functional unit "ID Registers" within "Core Registers"
; in expanded mode
PER.view , "Core Registers,ID Registers"

; Display the functional unit "DMA_Channel_0" within "sDMA_Module,sDMA"

; in expanded mode
PER.view , "sDMA_Module,sDMA,DMA_Channel_0"

The following command sequence can be used to save the contents of all configuration registers/on-chip
peripheral registers to a file.

; PRinTer.FileType ASCIIE ; Select ASCII ENHANCED as output

; format
; (default output format)

PRinTer.FILE Per.lst ; Define Per.lst as output file

WinPrint.PER.view ; Save contents of all

; configuration registers/on-chip
; peripheral registers to the
; specified file

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 44
Details about a Single Special Function Register

The access class, address, bit position and the full name of the selected item are
displayed in the state line; the full name of the selected item is taken from the
processor/chip manual.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 45
Modify a Special Function Register

You can modify the contents of a configuration/on-chip peripheral register:

• By pressing the right mouse button and selecting one of the predefined values from the pull-
down menu.

• By a double-click to a numeric value. A PER.Set command to change the contents of the

selected register is displayed in the command line. Enter the new value and confirm it with return.

PER.Set.simple <address>|<range> [%<format>] <value> Modify configuration register/on-

chip peripheral
Data.Set <address>|<range> [%<format>] <value> Modify memory

Data.Set is equivalent to PER.Set.simple if the configuration register is memory mapped.

PER.Set.simple D:0xF87FFF10 %Long 0x00000b02

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 46
The PER Definition File

The layout of the PER window is described by a PER definition file.

The definition can be changed to fit to your requirements using the PER command group.

The path and the version of the actual PER definition file can be displayed by using:

VERSION.SOFTWARE

PER.view <filename> Display the configuration registers/on-chip peripherals specified by

<filename>

PER.view C:\T32_ARM\percortexa9mpcore.per

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 47
Memory Display and Modification

This training section introduces the most often used methods to display and modify memory:

• The Data.dump command, that displays a hex dump of a memory area, and
the Data.Set command that allows to modify the contents of a memory address.

• The List (former Data.List) command, that displays the memory contents as source code listing.

A so-called access class is always displayed together with a memory address. The following access
classes are available for all processor architectures:

P:1000 Program address 0x1000

D:6814 Data address 0x6814

For additional access classes provided by your processor architecture refer to your “Processor
Architecture Manuals”.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 48
The Data.dump Window

Display the Memory Contents

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 49
 Use an Address to Specify the Start Address for the Data.dump Window

Please be aware, that TRACE32 permanently updates all windows. The default
update rate is 10 times per second.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 50
 Use an Address Range to Specify the Addresses for the Data.dump Window

If you enter an address range, only data for the specified address range are displayed. This is useful if a
memory area close to memory-mapped I/O registers should be displayed and you do not want TRACE32
PowerView to generate read cycles for the I/O registers.

Conventions for address ranges:

• <start_address>--<end_address>

• <start_address>..<end_address>

• <start_address>++<offset_in_byte>

• <start_address>++<offset_in_word> (for DSPs)

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 51
 Use a Symbol to Specify the Start Address for the Data.dump Window

Use i to select any symbol name or label known to TRACE32 PowerView.

By default an oriented display

is used (line break at 2x).
A small arrow indicates
the specified dump address.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 52
 Data.dump <address> | <range> [/<option>] Display a hex dump of the memory

Data.dump 0x6814 ; Display a hex dump starting at

; address 0x6814

Data.dump 0x6810--0x682f ; Display a hex dump of the

; specified address range

Data.dump 0x6810..0x682f ; Display a hex dump of the

; specified address range

Data.dump 0x6810++0x1f ; Display a hex dump of the

; specified address range

Data.dump ast ; Display a hex dump starting at

; the address of the label ast

Data.dump ast /Byte ; Display a hex dump starting at

; the address of the label ast in
; byte format

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 53
Modify the Memory Contents

By a left mouse double-click to the memory contents

a Data.Set command is automatically
displayed in the command line,
you can enter the new value and
confirm it with return.

Data.Set <address>|<range> [%<format>] <value> [/<option>]

Data.Set 0x6814 0xaa ; Write 0xaa to the address

; 0x6814

Data.Set 0x6814 %Long 0xaaaa ; Write 0xaaaa as a 32 bit value to

; the address 0x6814, add the
; leading zeros automatically

Data.Set 0x6814 %LE %Long 0xaaaa ; Write 0xaaaa as a 32 bit value to

; the address 0x6814, add the
; leading zeros automatically

; Use Little Endian mode

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 54
Run-time Memory Access

TRACE32 PowerView updates the displayed memory contents by default only if the core is stopped.

A hatched window frame

indicates that the
information display is
frozen because the core
is executing the program.

The plain window frame

indicates that the
information is updated,
because the program
execution is stopped.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 55
 Non-intrusive Run-time Memory Access

Various cores allow a debugger to read and write physical memory (not cache) while the core is executing
the program. The debugger has in most cases direct access to the processor/chip internal bus, so no extra
load for the core is generated by this feature.

Open the SYStem window in order to check if your processor architecture allows a debugger to read/write
memory while the core is executing the program:

MemAccess CPU/NEXUS/DAP
indicates, that the core allows
the debugger to read/write the
memory while the core is
executing the program.

Please be aware that caches, MMUs, tightly-coupled memories and suchlike add conditions to the run-time
memory access or at worst make its use impossible.

Restrictions

The following description is only a rough overview on the restrictions. Details about your core can be found in
the Processor Architecture Manual.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 56
 Cache

If run-time memory access for a cached memory location is enabled the debugger acts as follows:

• Program execution is stopped

The data is read via the cache respectively written via the cache.

• Program execution is running

Since the debugger has no access to the caches while the program execution is running, the
data is read from physical memory. The physical memory contains the current data only if the
cache is configured as write-through for the accessed memory location, otherwise out-dated data
is read.
Since the debugger has no access to the cache while the program execution is running, the data
is written to the physical memory. The new data has only an effect on the current program
execution if the debugger can invalidate the cache entry for the accessed memory location. This
useful feature is not available for most cores.

MMU

Debuggers have no access to the TLBs while the program execution is running. As a consequence run-time
memory access can not be used, especially if the TLBs are dynamically changed by the program.

In the exceptional case of static TLBs, the TLBs can be scanned into the debugger. This scanned copy of
the TLBs can be used by the debugger for the address translation while the program execution is running.

Tightly-coupled Memory

Tightly-coupled memory might not be accessible via the system memory bus.

Usage

The usage of the non-intrusive run-time memory access has to be configured explicitly. Two methods are
provided:

• Configure the run-time memory access for a specific memory area.

• Configure run-time memory access for all windows that display memory contents (not available
for all processor architectures).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 57
 Configure the run-time memory access for a specific memory area:

Enable the E check box to switch

the run-time memory access to ON

A plain window frame

indicates that the
information is updated
while the core is
executing the program

If the E check box is enabled, the attribute E is added to the memory class:

EP:1000 Program address 0x1000 with run-time memory access

ED:6814 Data address 0x6814 with run-time memory access

Write accesses to the memory work correspondingly:

Data.Set via run-time

memory access
(attribute E)

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 58
 SYStem.MemAccess CPU ; Enable the non-intrusive
; run-time memory access

Go ; Start program execution

Data.dump E:0x6814 ; Display a hex dump starting at

; address 0x6814 via run-time
; memory access

Data.Set E:0x6814 0xAA ; Write 0xAA to the address

; 0x6814 via run-time memory
; access

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 59
 Configure the run-time memory access for all windows that display memory
(not available for all cores):

If MemAccess CPU/NEXUS/DAP is
selected and DUALPORT is checked,
run-time memory is configured for
all windows that display memory

All windows that display memory

have a plain window frame,
because they are updated while
the core is executing the program

Write access is possible for all

memories while the core is
executing the program

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 60
 SYStem.MemAccess CPU ; Enable the non-intrusive
; run-time memory access

SYStem.Option DUALPORT ON ; Activate the run-time memory

; access for all windows that
; display memory

; this SYStem.Option is only

; available for some processor
; architectures

Go ; Start program execution

Data.dump 0x6814 ; Display a hex dump starting at

; address 0x6814 via run-time
; memory access

Data.Set 0x6814 0xAA ; Write 0xAA to the address

; 0x6814 via run-time memory
; access

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 61
 Intrusive Run-Time Memory Access

If your processor architecture doesn’t allow a debugger to read or write memory while the core is executing
the program, you can activate an intrusive run-time memory access if required.

CpuAccess Enable allows an

intrusive run-time memory access

If an intrusive run-time memory access is activated, TRACE32 stops the program execution periodically to
read/write the specified memory area. Each update takes at least 50 us.

core(s) is core(s) is stopped to allow

executing the program TRACE32 PowerView to read/write
the specified memory

The time taken by a short stop depends on various factors:

• The time required by the debugger to start and stop the program execution on a processor/core
(main factor).

• The number of cores that need to be stopped and restarted.

• Cache and MMU assesses that need to be performed to read the information of interest.

• The type of information that is read during the short stop.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 62
 An intrusive run-time memory access is only possible for a specific memory area.

Enable the E check box to switch

the run-time memory access to ON

A plain window frame

indicates that the
information is updated
while the core(s) is
executing the program

A red S in the state line indicates, that a TRACE32 feature is

activated, that requires short-time stops of the program execution

Write accesses to the memory work correspondingly:

Data.Set via run-time

memory access with short
stop of the program
execution

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 63
 SYStem.CpuAccess Enable ; Enable the intrusive
; run-time memory access

Go ; Start program execution

Data.dump E:0x6814 ; Display a hex dump starting at

; address 0x6814 via an intrusive
; run-time memory access

Data.Set E:0x6814 0xAA ; Write 0xAA to the address

; 0x6814 via an intrusive
; run-time memory access

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 64
Colored Display of Changed Memory Contents

Enable the option SpotLight to mark the

memory contents changed by the last
4 single steps in rubiginous becoming lighter

Data.dump flags /SpotLight ; Display a hex dump starting at

; the address of the label flags

; Mark changes

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 65
The List Window

Displays the Source Listing Around the PC

If MIX mode is selected for

debugging, assembler and HLL
information is displayed

If HLL mode is selected for

debugging, only HLL
information is displayed

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 66
Displays the Source Listing of a Selected Function

Select the function you

want to display

List [<address>] [/<option>] Display source listing

Data.List [<address>] [/<option>] Display source listing

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 67
 List ; Display a source listing
; around the PC

List E: ; Display a source listing,

; allow scrolling while the
; program execution is running

List * ; Open the symbol browser to

; select a function for display

List func17 ; Display a source listing of

; func17

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 68
Breakpoints

Breakpoint Implementations

A debugger has two methods to realize breakpoints: Software breakpoints and Onchip breakpoints.

Software Breakpoints in RAM

The default implementation for breakpoints on instructions is a Software breakpoint. If a Software breakpoint
is set the original instruction at the breakpoint address is patched by a special instruction (usually TRAP) to
stop the program and return the control to the debugger.

The number of software breakpoints is unlimited.

.

Breakpoints on instructions are called Program breakpoints by TRACE32 PowerView.

Please be aware that TRACE32 PowerView always tries to set an Onchip

breakpoint, when the setting of a Software Breakpoint fails.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 69
Software Breakpoints in FLASH

TRACE32 allows to set Software breakpoints to FLASH. Please be aware that the affected FLASH sector
has to be erased and programmed in order to patch the break instruction used by the Software breakpoint.
This usually takes some time and reduces the number of FLASH erase cycles. For details refer to
“Software Breakpoints in FLASH” (norflash.pdf).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 70
Onchip Breakpoints in NOR Flash

Most core(s) provide a small number of Onchip breakpoints in form of breakpoint registers. These Onchip
breakpoints can be used to set breakpoints to instructions in read-only memory like NOR FLASH.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 71
 Since Software breakpoints are used by default for Program breakpoints, TRACE32 PowerView can be
informed explicitly where to use Onchip breakpoints. Depending on your memory layout, the following
methods are provided:

1. If the code is completely located in read-only memory, the default implementation for the
Program breakpoints can be changed.

Change the implementation of Program breakpoints to Onchip

Break.IMPLementation Program Onchip Advise TRACE32 PowerView to

implement Program breakpoints
always as Onchip breakpoints

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 72
 2. If the code is located in RAM and NOR FLASH you can define code ranges where Onchip
breakpoints are used.

MAP.BOnchip <range> Advise TRACE32 PowerView to implement Program

breakpoints as Onchip breakpoints within the defined
address range
MAP.List Check your settings

MAP.BOnchip 0x0++0x1FFF

MAP.BOnchip 0xA0000000++0x1FFFFF

Check your settings as follows:

For the specified address ranges Program breakpoints are

implemented as Onchip breakpoints. For all other memory areas
Software breakpoints are used.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 73
Onchip Breakpoints on Read/Write Accesses

Onchip breakpoints can be used to stop the core at a read or write access to a memory location.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 74
Onchip Breakpoints by Processor Architecture

The list on page 4 gives an overview of the availability and the usage of the Onchip breakpoints. The
following notations are used:

• Onchip breakpoints: Total amount of available Onchip breakpoints.

• Program breakpoints: Number of Onchip breakpoints that can be used to set Program break-
points into onchip FLASH or NOR FLASH.

• Read/Write breakpoints: Number of Onchip breakpoints that stop the program when a read or
write to a certain address happens.

• Data value breakpoint: Number of Onchip data breakpoints that stop the program when a spe-
cific data value is written to an address or when a specific data value is read from an address.

Single address

For some processor architectures Onchip breakpoints can only mark single addresses (e.g Cortex-A9).

Address ranges

Most processor architectures allow to mark address ranges with Onchip breakpoints. It is very common
that one Onchip breakpoint marks the start address of the address range while the second Onchip
breakpoint marks the end address (e.g. MPC57xx).

The command TrOnchip.VarCONVert allows to control how range breakpoints are set for scalars (int, float,
double).

TrOnchip.VarCONVert ON If a breakpoint is set to a scalar variable (int, float, double) the

breakpoint is set to the start address of the variable.
+ Requires only one single address breakpoint.
- Program will not stop on unintentional accesses to the variable’s
address space.

TrOnchip.VarCONVert OFF If a breakpoint is set to a scalar variable (int, float, double) breakpoints
are set to all memory addresses that store the variable value.

+ The program execution stops also on any unintentional accesses

to the variable’s address space.
- Requires two onchip breakpoints since a range breakpoint is
used.

The current setting can be inspected by using the command TrOnchip.view.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 75
 TrOnchip.VarCONVert ON
Var.Break.Set vint /Write
Data.View vint

TrOnchip.VarCONVert OFF
Var.Break.Set vint /Write
Data.View vint

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 76
 Bit masks

A number of processor architectures provide only bit masks or fixed range sizes to mark an address range
with Onchip breakpoints. In this case the address range is always enlarged to the smallest bit mask/next
allowed range that includes the address range.

It is recommended to control which addresses are actually marked with breakpoints by using the
Break.List /Onchip command:

Breakpoint setting:

Var.Break.Set flags

Break.List

Break.List /Onchip

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 77
 RISC/CISC Processors

Onchip Program Read/Write Data Value

Family Breakpoints Breakpoints Breakpoint Breakpoints
68HC12 up to 2 up to 2 single up to 2 single 1
68HC12A address address
68HC16 — — — —
68k
6833x — — — —
6834x — — — —
68360 1 1 1 —
78K0R 1 1 single address 1 single address 1
Andes 0…8 up to 8 up to 8 up to 8
range as bit mask
APEX 4 — — —
APS 3 instruction 3 single address — —
ARM11 6 instruction 6 2 —
2 read/write single address single address
ARM7 2 or up to 2 up to 2 2
ARM9 (1 if software break- range as bit mask range as bit mask
Janus points are used)
ARP32 2 instruction 2 up to 2 up to 2
2 read/write range as bit mask range as bit mask
AVR32 6 instruction 6 2 2
2 read/write range as bit mask range as bit mask
AVR8 4 up to 4 up to 2 1
range as bit mask range as bit mask
C166SV2 4 up to 4 up to 4 write up to 4 write
up to 1 read up to 1 read
ColdFire 4 instruction, 3 single address, 1 2 single address or 2
2 read/write bit mask 2 ranges
Cortex-A5 3 instruction 3 2 —
2 read/write single address range as bit mask,
break before make
Cortex-A7 6 instruction 6 4 —
Cortex-A9 4 read/write single address range as bit mask,
Cortex-A15 break before make
Cortex-A17
Cortex-A32
Cortex-A35
Cortex-A53
Cortex-A57
Cortex-A72
Cortex-A73

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 78
 Onchip Program Read/Write Data Value
Family Breakpoints Breakpoints Breakpoint Breakpoints
Cortex-A8 6 instruction 6 2 —
2 read/write range as bit mask range as bit mask,
break before make
Cortex- 1-2 by DW 1-2 by DW 1-2 by DW —
M0/M0+ (Data Wachtpoint range as bit mask range as bit mask
unit)

1-4 by BU 1-4 by BU
(Breakpoint Unit) single addr. only
onchip flash only
Cortex-M1 1/2 by DW 1 or 2 by DW 1 or 2 by DW —
(Data Wachtpoint range as bit mask range as bit mask
unit)

2/4 by BPU 2 or 4 (BPU)

(Breakpoint Unit) single addr. only
onchip flash only
Cortex-M3 4 by DWT 4 by DWT 4 by DWT 1
(Data Wachtpoint addr. range only range as bit mask needs two DWT
and Trace unit) break-after-make comparators
range as bit mask

6 by FPB 6 by FPB
(Flash Patch and single addr. only
Breakpoint unit) onchip flash only
break-before-make
Cortex-M4 1 or 4 by DWT 1 or 4 by DWT 1 or 4 by DWT 0 or 1
(Data Wachtpoint addr. range only range as bit mask needs two DWT
and Trace unit) break-after-make comparators
range as bit mask

2 or 6 by FPB 2 or 6 by FPB
(Flash Patch and single addr. only
Breakpoint unit) onchip flash only
break-before-make
Cortex-M7 2 or 4 by DWT 2 or 4 by DWT 2 or 4 by DWT 1
(Data Wachtpoint addr. range only range as bit mask
and Trace unit) break-after-make
range as bit mask

4 or 8 by FPB 4 or 8 by FPB
(Flash Patch and single addr. only
Breakpoint unit) onchip flash only
break-before-make
Cortex-R4 2-8 instruction 2-8 1-8 —
Cortex-R5 1-8 read/write range as bit mask range as bit mask,
break before make

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 79
 Onchip Program Read/Write Data Value
Family Breakpoints Breakpoints Breakpoint Breakpoints
Cortex-R7 6 instruction 6 4 —
4 read/write single address range as bit mask,
break before make
eTPU 2 up to 2 single up to 2 read/write 2
address range as bitmask (only with write
breakpoints)
GTM up to 4 up to 4 up to 4 2
(only MPC)
H8S 2 up to 2 up to 2 2
range as bit mask
H8SX 4 up to 4 up to 4 1
range as bit mask
M32R 4 instruction 4 single address 2 single address or 2
2 read/write 2 ranges
MCORE 2 2 single address or 2 —
1 range as bit mask range as bit mask
MCS12 up to 3 up to 3 single up to 3 single 1
MCS12C address address
MCS8 2 up to 2 single up to 2 single 1
address address
(reduced to 1 if com-
bined with data)
MGT5100 1 instruction 1/0 single address 1 single address —
(No on-chip break-
point,
if software break-
points are used)
1 read/write
MIPS32 up to 15 instruction up to 15 up to 15 up to 15
MIPS64 up to 15 range as bit mask range as bit mask
read/write
MPC500 4 instruction, 4 single address or 2 single address or 2
MPC800 2 read/write 2 breakpoint ranges 1 breakpoint range
MPC5200 2 instruction 2/1 2 —
(reduced to 1 if soft- 2 single address or 2 single address or
ware breakpoints 1 breakpoint range 1 breakpoint range
are used)
2 read/write
MPC55xx 4 instruction 4 single address or 2 single address or —
2 read/write 2 breakpoint ranges 1 breakpoint range
MPC563x 4 instruction 4 single address or 2 single address or 2
2 read/write 2 breakpoint ranges 1 breakpoint range

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 80
 Onchip Program Read/Write Data Value
Family Breakpoints Breakpoints Breakpoint Breakpoints
MPC564x 8 instruction 8 single address 2 single address or 2
MPC567x 2 read/write or 1 breakpoint range
4 single address
and 2 breakpoint
ranges
MPC57xx 4 instruction 4 single address or 2 single address or —
(e200z0) 2 read/write 2 breakpoint ranges 1 breakpoint range
MPC57xx 8 instruction 8 single address 4 single address or 2
(e200z2*, 4 read/write or 2 breakpoint range
e200z4*, 4 single address
e200z7*) and 2 breakpoint
ranges
MPC74xx 1 instruction 1/0 single address 1 single address —
MPC86xx (No on-chip break-
point,
if software break-
points are used)
1 read/write
MPC8240 1 instruction 1/0 single address — —
MPC8245 (No on-chip break-
MPC825x point, if software
MPC826x breakpoints are
(PQ2) used)
MPC8247 2 instruction 2/1 2 —
MPC8248 (reduced to 1 if soft- 2 single address or 2 single address or
MPC827x ware breakpoints 1 breakpoint range 1 breakpoint range
MPC8280 are used)
(PQ27) 2 read/write

MPC83xx
(PQ2 Pro)
MPC85xx 2 instruction 2/1 2 —
(PQ3) (reduced to 1 if soft- 2 single address or 2 single address or
ware breakpoints 1 breakpoint range 1 breakpoint range
are used) break before make
2 read/write
MSP430 2…8 2…8 2…8 2…8
ranges require ranges require
2 breakpoints 2 ...4 breakpoints
PPC401 2 instruction, 2 single address or 2 single address or —
PPC403 2 read/write 2 ranges 2 ranges

PPC405 4 instruction, 4 single address or 2 single address or 2

PPC44x 2 read/write 2 address ranges 1 address range

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 81
 Onchip Program Read/Write Data Value
Family Breakpoints Breakpoints Breakpoint Breakpoints
PPC600 1 instruction 1/0 single address — —
(no on-chip break-
point,
if software break-
points are used)
PPC740 1 instruction 1/0 single address 1 single address —
PPC750 (No on-chip break-
point,
if software break-
points are used)
1 read/write
PWR- 2 instruction, 2 single address or 2 single address or —
ficient 2 read/write 1 breakpoint range 1 breakpoint range
QORIQ 2 instruction, 2 single addr., 2 single addr., —
2 read/write or 1 large range, or 1 large range,
or 2 ranges up to 4 or 2 ranges up to 4
kB, kB,
or 1 single address or 1 single address
and 1 range up to 4 and 1 range up to 4
kB kB
RH850 12 12 12 12
range as bit mask range as bit mask
RX 8 instruction 8 4 4
4 read/write range as bit mask 1 breakpoint range
others range as bit
mask
S12X 4 up to 4 single up to 4 single 1
S12Z address or 2 address or 2
address ranges address ranges
SH2A 10 up to 10 up to 10 2
ST4A range as bit mask
SH3 2 up to 2 up to 2 —
range as bit mask
SH4 6 up to 6 up to 6 2
ST40 range as bit mask
SH7047 1 up to 1 up to 1 —
SH7144/45
SH7058 12 up to 12 up to 12 up to 12
range as bit mask
Super10 up to 8 up to 8 up to 8 8
TriCore up to 8 up to 8 single up to 8 single —
(AUDO-MAX, address or address or
AURIX) up to 4 ranges up to 4 ranges

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 82
 Onchip Program Read/Write Data Value
Family Breakpoints Breakpoints Breakpoint Breakpoints
TriCore up to 4 instruction up to 4 single up to 4 single —
(up to AUDO- up to 4 read/write address or address or
FG) up to 2 ranges up to 2 ranges
V850E1 2 4 or 8 single 2 single address or 2
address 1 range
4 or 8 instruction
(onchip flash only) 2 single address or
1 range
V850E2 4 8 single address 4 4
range as bit mask
8 instruction 4
(onchip flash only) range as bit mask
x86/x64 4 4 4 —
single address
Write or
Read/Write

single address or
ranges of 2, 4 or
8 bytes (aligned)
XC2000/ 4 up to 4 up to 4 write up to 4 write
XE16x up to 1 read up to 1 read
XC800 4 up to 4 up to 1 single —
up to 1 range address read or
(2 single needed) address range
up to 1 single
address write or
address range
XSCALE 2 instruction/ 2 single address 2 single address or —
2 read/write 1 range as bit mask

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 83
 DSP Processors

Onchip Program Read/Write Data Value

Family Breakpoints Breakpoints Breakpoints Breakpoints
Blackfin 6 instruction 6 single address or 2 single address or —
2 read/write 3 ranges 1 range
CEVA-X 4 instruction 4 single address 4 single address or 2
4 read/write range
DSP56K —
56k/56300/56 2 2 2
800 1 1 1
56100
DSP 2 up to 2 single up to 1 single —
56300 address address
56800E
MMDSP 2 instruction 2 single address 1 single address 1
1 read/write
OAK 3 instruction 3 single address 1 single address 1
TeakLite 1 read/write or
TeakLite II range as bit mask
Teak
StarCore 12 up to 12 single up to 6 single 1
address or up to 6 address or
ranges up to 3 ranges
STN8810 2 up to 2 up to 2 1
STN8815
STN8820
TeakLite III 2 instruction 2 single address 2 single address or 1
1 read/write 1 range
TMS320 2 2 single address — —
C28x
TMS320 2 2 single address — —
C54x
TMS320 4 up to 4 single up to 3 data, up to 3
C55x address 1 breakpoint range
and 2 bit masks
TMS320 1 1 single address — —
C62x
TMS320 up to 4 up to 4 single — —
C64x address

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 84
 Onchip Program Read/Write Data Value
Family Breakpoints Breakpoints Breakpoints Breakpoints
TMS320 1 1 single address — —
C67x
ZSP400 — — — —
ZSP500 4 up to 4 single up to 1 1
address range as bit mask

Softcores

Onchip Program Read/Write Data Value

Family Breakpoints Breakpoints Breakpoint Breakpoints
MicroBlaze 0 … 4 instruction 0…4 0…4 —
0 … 4 read/write range as bit mask range as bit mask
NIOS2 0/4/8 up to 4 up to 4 single up to 4
(configurable) address or
2 ranges

Configurable Cores

Onchip Program Read/Write Data Value

Family Breakpoints Breakpoints Breakpoint Breakpoints
ARC 0/2/4/8 up to 0/2/4/8 up to 0/2/4/8 up to 0/1/2/4
600/700 range as bit mask range as bit mask only writes,
only in “full’ mode
ARC-EM
range as bit
mask
ARC 0/2/4/8 up to 0/2/4/8 up to 0/2/4/8 up to 0/1/2/4
tangent-A4 range requires write only only writes,
2 breakpoints range requires only in “full’ mode
ARC 2 breakpoints
tangent-A5 range requires
2 breakpoints
Beyond up to 8 up to 8 up to 8 up to 8
BA22 range requires range requires range requires
2 breakpoints 2 breakpoints 2 breakpoints

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 85
 Onchip Program Read/Write Data Value
Family Breakpoints Breakpoints Breakpoint Breakpoints
Diamond 2 up to 2 up to 2 2
Cores range as bit mask range as bit mask
M8051EW 0, 1, 2 or 4 up to 4 up to 4 single same as
addresses for read read/write
or write breakpoints
range requires
2 breakpoints
or
2 single address
read/write,
max 1 read/write
range

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 86
ETM Breakpoints for ARM or Cortex-A/-R

ETM breakpoints extend the number of available breakpoints. Some Onchip breakpoints offered by ARM
and Cortex-A/-R cores provide restricted functionality. ETM breakpoints can help you to overcome some of
these restrictions.

ETM breakpoints always show a break-after-make behavior with a rather large delay. Thus, use ETM
breakpoints only if necessary.

Program Breakpoints Read/Write Data Value

Breakpoints Breakpoints

ARM7 Onchip breakpoints: Onchip breakpoints: Onchip Breakpoint:

ARM9 up to 2, but address up to 2, but address up to 2, but address range
range only as bit mask range only as bit mask only as bit mask

ETM breakpoints: ETM breakpoints: ETM breakpoints:

up to 2 exact address up to 2 exact address up to 2 data value breakpoints
ranges ranges for exact address ranges

ARM11 Onchip breakpoints: Onchip breakpoints: Onchip breakpoints:

6, but only single 2, but only single no data value breakpoints
addresses addresses possible

ETM breakpoints: ETM breakpoints: ETM breakpoints:

up to 2 exact address up to 2 exact address up to 2 data value breakpoints
ranges possible ranges possible for exact address ranges

Cortex-A5 Onchip breakpoints: Onchip breakpoints: Onchip breakpoints:

3, but only single 2, but address range no data value breakpoints
addresses only as bit mask possible

ETM breakpoints: ETM breakpoints: ETM breakpoints:

up to 2 exact address up to 2 exact address up to 2 data value breakpoints
ranges ranges for exact address ranges

Cortex-A7 Onchip breakpoints: Onchip breakpoints: Onchip breakpoints:

Cortex-R7 6, but only single 4, but address range no data value breakpoints
addresses only as bit mask possible

ETM breakpoints: ETM breakpoints: ETM breakpoints:

up to 2 exact address up to 2 exact address up to 2 data value breakpoints
ranges ranges for exact address ranges

Cortex-A8 Onchip breakpoints: Onchip breakpoints: Onchip breakpoints:

6, but address range 2, but address range no data value breakpoints
only as bit mask only as bit mask possible

ETM breakpoints: ETM breakpoints: ETM breakpoints:

up to 2 exact address up to 2 exact address up to 2 data value breakpoints
ranges ranges for exact address ranges

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 87
 Program Breakpoints Read/Write Data Value
Breakpoints Breakpoints

Cortex-R4 Onchip breakpoints: Onchip breakpoints: Onchip breakpoints:

Cortex-R5 2..8, but address 1..8, but address no data value breakpoints
range only as bit mask range only as bit mask possible

ETM breakpoints: ETM breakpoints: ETM breakpoints:

up to 2 exact address up to 2 exact address up to 2 data value breakpoints
ranges ranges for exact address ranges

Cortex-A9 Onchip breakpoints: Onchip breakpoints: Onchip breakpoints:

Cortex-A15 6, but only single 4, but address range no data value breakpoints
Cortex-A17 addresses only as bit mask possible

ETM breakpoints: ETM breakpoints: ETM breakpoints:

2 exact address ranges — —

Cortex-A32 Onchip breakpoints: Onchip breakpoints: Onchip breakpoints:

Cortex-A35 6, but only single 4, but address range no data value breakpoints
Cortex-A53 addresses only as bit mask possible
Cortex-A57
Cortex-A72 ETM breakpoints: ETM breakpoints: ETM breakpoints:
Cortex-A73 2 exact address ranges — —
(more on request)

No ETM breakpoints are available for the Cortex-M family.

Please refer to the description of the ETM.StoppingBreakPoints command, if you want to use the ETM
breakpoints.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 88
Breakpoint Types

TRACE32 PowerView provides the following breakpoint types for standard debugging.

Breakpoint Types Possible Implementations

Program Software (Default)

Onchip

Read, Write, Onchip (Default)

ReadWrite

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 89
Program Breakpoints

Set a Program breakpoint

by a left mouse
double-click
to the instruction

The red program breakpoint indicator marks all code lines for which a Program breakpoint is set.

The program stops before the instruction marked by the breakpoint is executed (break before make).

Disable the Program

breakpoint by a
left mouse double-click
to the red program
breakpoint indicator.
The program breakpoint
indicator becomes grey.

Break.Set <address> /Program [/DISable] Set a Program breakpoint to the specified address.
The Program breakpoint can be disabled if required.

Break.Set 0xA34f /Program ; set a Program breakpoint to

; address 0xA34f

Break.Set func1 /Program ; set a Program breakpoint to the

; entry of func1
; (first address of function func1)

Break.Set func1+0x1c /Program ; set a Program breakpoint to the

; instruction at address
; func1 plus 28 bytes
; (assuming that byte is the
; smallest addressable unit)

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 90
 Break.Set func11\7 ; set a Program breakpoint to the
; 7th line of code of the function
; func11
; (line in compiled program)

Break.Set func17 /Program /DISable ; set a Program breakpoint to the

; entry of func17
; diable Program breakpoint

Break.List ; list all breakpoints

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 91
Read/Write Breakpoints

Core stops at
a read access
to the variable

Core stops at
a write access
to the variable

On most core(s) the program stops after the read or write access (break after make).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 92
 If an HLL variable is displayed,
a small red breakpoint indicator
marks an active Read/Write breakpoint.

A small grey breakpoint indicator

marks a disabled Read/Write breakpoint.

Break.Set <address> | <range> /Read | /Write | /ReadWrite [/DISable]

; allow HLL expression to specify breakpoint
Var.Break.Set <hll_expression> /Read | /Write | /ReadWrite [/DISable]

Break.Set 0x0B56 /Read

Break.Set ast /Write

Break.Set vpchar+5 /ReadWrite /DISable

Var.Break.Set flags /Write

Var.Break.Set flags[3] /Read

Var.Break.Set ast->count /ReadWrite /DISable

Break.List

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 93
Breakpoint Handling

Breakpoint Setting at Run-time

Software breakpoints

• If MemAccess CPU/NEXUS/DAP is enabled, Software breakpoints can be set while the core(s)
is executing the program. Please be aware that this is not possible if an instruction cache and an
MMU is used.

• If CpuAccess is enabled, Software breakpoints can be set while the core(s) is executing the
program. If the breakpoint is set via CpuAccess the realtime behavior is influenced.

• If MemAccess and CpuAccess is Denied Software breakpoints can only be set when the
program execution is stopped.

The behavior of Onchip breakpoints is core dependent. E.g. on all ARM/Cortex cores Onchip breakpoints
can be set while the program execution is running.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 94
Real-time Breakpoints vs. Intrusive Breakpoints

TRACE32 PowerView offers in addition to the basic breakpoints (Program/Read/Write) also complex
breakpoints. Whenever possible these breakpoints are implemented as real-time breakpoints.

Real-time breakpoints do not disturb the real-time program execution on the core(s), but they require a
complex on-chip break logic.

If the on-chip break logic of a core does not provide the required features or if Software breakpoints are
used, TRACE32 has to implement an intrusive breakpoint.

Intrusive breakpoint perform as follows:

Program execution

Stop program execution Continue with

at breakpoint hit program execution

Check not ok
Perform
required check

Check ok

Stay stopped

Each stop to perform the check suspends the program execution for at least 1 ms. For details refer to
“StopAndGo Mode” (glossary.pdf)

The (short-time) display of a red S in the state line indicates that an intrusive breakpoint was hit.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 95
 Intrusive breakpoints are marked with a special breakpoint indicator:

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 96
Break.Set Dialog Box

There are two standard ways to open a Break.Set dialog.

or

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 97
The HLL Check Box - Function Name

sYmbol.INFO func11 ; display symbol information

; for function func11

Function Name/HLL Check Box OFF

Program breakpoint is set to the function entry (first address of the function).

Break.Set func11

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 98
 Function name/HLL Check Box ON (only for special use cases)

• If the on-chip break logic supports ranges for Program breakpoints, a Program breakpoint
implemented as Onchip is set to the full address range covered by the function.

• If the on-chip break logic provides only bitmasks to realizes breakpoints on instruction ranges, a
Program breakpoint implemented as Onchip is set by using the smallest bitmask that covers the
complete address range of the function.

• otherwise this breakpoint is rejected with an error message.

Var.Break.Set func11

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 99
The HLL Check Box - Program Line Number

sYmbol.INFO func11\7 ; display debug information

; for 7th program line in
; function func11

Program Line Number/HLL Check Box OFF

Program breakpoint is set to the first assembler instruction generated for the program line number.

Break.Set func11\7

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 100
The HLL Check Box - Variable

sYmbol.INFO flags ; display symbol information

; for variable flags

Variable/HLL Check Box OFF

Selected breakpoint (ReadWrite/Read/Write) is set to the start address of the variable.

Break.Set flags

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 101
 Variable/HLL Check Box ON

• If the on-chip break logic supports ranges for Read/Write breakpoints, the specified breakpoint is
set to the complete range covered by the variable.

• If the on-chip break logic provides only bitmasks to realizes Read/Write breakpoints on address
ranges, the specified breakpoint is set by using the smallest bitmask that covers the address
range used by the variable.

Var.Break.Set flags

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 102
The HLL Check Box - HLL Expression

sYmbol.INFO flags ; display symbol information

; for variable flags

Variable/HLL Check Box Must Be ON

If you want to use an HLL expression to specify the address range for a Read/Write breakpoint, the HLL
check box has to be checked.

• If the on-chip break logic supports ranges for Read/Write breakpoints, the specified breakpoint is
set to the complete address range covered by the HLL expression.

• If the on-chip break logic provides only bitmasks to realizes Read/Write breakpoints on address
ranges, the specified breakpoint is set by using the smallest bitmask that covers the address
range used by the HLL expression.

Var.Break.Set flags[3]

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 103
Implementations

Implementation

Implementation

auto Use breakpoint implementation as predefined in TRACE32 PowerView.

SOFT Implement breakpoint as Software breakpoint.

Onchip Implement breakpoint as Onchip breakpoint.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 104
Actions

By default the program execution is stopped when a breakpoint is hit (action stop). TRACE32 PowerView
provides the following additional reactions on a breakpoint hit:

Action (debugger)

Spot The program execution is stopped shortly at a breakpoint hit to update the
screen. As soon as the screen is updated, the program execution continues.

Alpha Set an Alpha breakpoint.

Beta Set a Beta breakpoint.

Charly Set a Charly breakpoint.

Delta Set a Delta breakpoint.

Echo Set an Echo breakpoint.

WATCH Trigger the debug pin at the specified event (not available for all processor
architectures).

Alpha, Beta, Charly, Delta and Echo breakpoint are only used in very special cases. For this reason no
description is given in the general part of the training material.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 105
 Action (on-chip or off-chip trace)

TraceEnable Advise on-chip trace logic to generate trace information on the specified event.

TraceON Advise on-chip trace logic to start with the generation of trace information at the
specified event.

TraceOFF Advise on-chip trace logic to stop with the generation of trace information at the
specified event.

TraceTrigger Advise on-chip trace logic to generate a trigger at the specified event.
TRACE32 PowerView stops the recording of trace information when a trigger is
detected.

A detailed description for the Actions (on-chip and off-chip trace) can be found in the following manuals:

• “ARM-ETM Training” (training_arm_etm.pdf).

• “AURIX Trace Training” (training_aurix_trace.pdf).

• “Hexagon-ETM Training” (training_hexagon_etm.pdf).

• “Nexus Training” (training_nexus.pdf).

or with the description of the Break.Set command.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 106
Example for the Action Spot

The information displayed within TRACE32 PowerView is by default only updated, when the core(s) stops
the program execution.

The action Spot can be used to turn a breakpoint into a watchpoint. The core stops the program execution at
the watchpoint, updates the screen and restarts the program execution automatically. Each stop takes
50 … 100 ms depending on the speed of the debug interface and the amount of information displayed on
the screen.

Example: Update the screen whenever the program executes the instruction sieve\11.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 107
 spotted indicates a breakpoint with the action Spot

Break.Set sieve\11 /Spot

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 108
Options

Options

Temporary OFF: Set a permanent breakpoint (default).

ON: Set a temporary breakpoint. All temporary breakpoints are deleted
the next time the core(s) stops the program execution.

DISable OFF: Breakpoint is enabled (default).

ON: Set breakpoint, but disabled.

DISableHIT ON: Disable the breakpoint after the breakpoint was hit.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 109
Example for the Option Temporary

Temporary breakpoints are usually not set via the Break.Set dialog, but they are often used while debugging.

Examples:

• Go Till

Go <address> [ <address> …]

; set a temporary Program breakpoint to

; the entry of the function func4
; and start the program execution
Go func4

; set a temporary Program breakpoints to

; the entries of the functions func4, func8 and func9
; and start the program execution
Go func4 func8 func9

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 110
 • Go Till -> Write

Var.Go <hll_expression> [/Write]

; set a temporary write breakpoint to the variable

; vtripplearray[0][1][0] and start the program execution
Var.Go vtripplearray[0][1][0] /Write

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 111
 • Go.Return and similar commands

Go.Return

; first Go.Return
; set a temporary breakpoint to the start of the function epilogue
; and start the program execution
Go.Return

; second Go.Return
; set a temporary breakpoint to the function return
; and start the program execution
Go.Return

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 112
DATA Breakpoints

The DATA field offers the possibility to combine a Read/Write breakpoint with a specific data value.

• DATA breakpoints are implemented as real-time breakpoints if the core supports Data Value
Breakpoints (for details on your core refer to “Onchip Breakpoints by Processor Architecture”,
page 75).

TRACE32 PowerView indicates a real-time breakpoints by a full red bar.

TRACE32 PowerView allows inverted data values if this is supported by the on-chip break logic.

• DATA breakpoints are implemented as intrusive breakpoints if the core does not support Data
Value Breakpoints. For details on the intrusive DATA breakpoints refer to the description of the
Break.Set command.

TRACE32 PowerView indicates an intrusive breakpoint by a hatched red bar.

TRACE32 PowerView allows inverted data values for intrusive DATA breakpoints.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 113
 Example: Stop the program execution if a 1 is written to flags[3].

Var.Break.Set flags[3] /Write /DATA.auto 1.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 114
 Example: Stop the program execution if another value then 1 is written to flag[3].

Var.Break.Set flags[3] /Write /DATA.auto !1.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 115
 If an HLL expression is used TRACE32 PowerView gets the information if the data is written via a byte, word
or long access from the symbol information.

If an address or symbol is used the user has to specify the access width, so that the correct number of bits is
compared.

Break.Set 0x11dcf /Write /DATA.Word 1234.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 116
Advanced Breakpoints

If the advanced button is pushed

additional input fields are provided

Advanced breakpoint input fields

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 117
TASK-aware Breakpoints

If OS-aware debugging is configured (refer to “OS-aware Debugging” in TRACE32 Glossary, page 12

(glossary.pdf)), TASK-aware breakpoints allow to stop the program execution at a breakpoint if the specified
task/process is running.

TASK-aware breakpoints are implemented on most cores as intrusive breakpoints. A few cores support real-
time TASK-aware breakpoints (e.g. ARM/Cortex). For details on the real-time TASK-aware breakpoints refer
to the description of the Break.Set command.

Intrusive TASK-aware Breakpoint

Processing:

Program execution stops at TASK-aware

breakpoint

Specified No
task Continue with
running? program execution

Yes

Keep stop of program execution

Each stop at the TASK-aware breakpoint takes at least 1.ms. This is why the red S is displayed in the
TRACE32 PowerView state line whenever the breakpoint is hit.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 118
 Example: Stop the program execution at the entry to the function OSCheckStack only if the task/process
“TASKE” is running.

Break.Set OSCheckStack /TASK "TASKE"

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 119
 The red S indicates,
that an intrusive
breakpoint is used

The program execution is stopped

at the breakpoint when the specified task is running

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 120
 Real-time TASK-aware Breakpoint

Example for ARM9: Stop the program execution at the entry to the function Func_2 only if the taskF “main” is
running (Onchip breakpoint).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 121
COUNTer

Counters allow to stop the program execution on the n th hit of a breakpoint.

Software Counter

If the on-chip break logic of the core does not provide counters or if a Software breakpoint is used, counters
are implemented as software counters.

Processing:

Program execution stops at

a breakpoint with counter

Increment
counter

Counter No
reached final Continue with
program execution
value?

Yes

Keep stop of program execution

Each stop at a Counter breakpoint takes at least 1.ms. This is why the red S is displayed in the TRACE32
PowerView state line whenever the breakpoint is hit.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 122
 Example: Stop the program execution after the function sieve was entered 1000. times.

Break.Set sieve /COUNT 1000.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 123
 The current counter
value is displayed
in the Break.List
window

The red S indicates an

intrusive breakpoint

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 124
 On-chip Counter

The on-chip break logic of some cores e.g. MPC8xx, MPC5xx, MPC55xx, StarCore provides counters. They
are used together with Onchip breakpoints.

Example: Stop the program execution after the function sieve was entered 1000. times.

Break.Set sieve /COUNT 1000. /Onchip

The counters run completely in real-time. No current counter value can be displayed while the program
execution is running. As soon as the counter reached its final value, the program execution is stopped.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 125
CONDition

The program execution is stopped at the breakpoint only if the specified condition is true.

CONDition breakpoints are always intrusive.

Processing:

Program execution stops

at a breakpoint with condition

AfterStep No
check box
ON?

Yes

Perform assembler
single step

Verify
condition

Condition No
is Continue with
true? program execution

Yes

Keep stop of program execution

Each stop at a CONDition breakpoint takes at least 1.ms. This is why the red S is displayed in the TRACE32
PowerView state line whenever the breakpoint is hit.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 126
 Example: Stop the program execution on a write to flags[3] only if flags[12] is equal to 0 when the
breakpoint is hit.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 127
 The red S indicates
an intrusive breakpoint

Var.Break.Set flags[3] /Write /VarCONDition flags[12]==0

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 128
 Example: “Break-before-make” Read/Write breakpoints only

Stop the program execution at a write access to the variable mstatic1 only if flags[12] is equal to 0 and
mstatic1 is greater 0.

Perform an assembler single step because the processor architecture stops before the write access is
performed.

AfterStep checked

Var.Break.Set mstatic1 /Write /VarCONDition (flags[12]==0)&&(mstatic1>0)

/AfterStep

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 129
 The red S indicates
an intrusive breakpoint

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 130
 Conditions not in HLL Syntax

It is also possible to write register-based or memory-based conditions.

Examples: Stop the program executions on a write to the address flags if Register R11 is equal to 1.

Switch HLL OFF ->

TRACE32 syntax can be used
to specify the condition

; stop the program execution at a write to the address flags if the

; register R11 is equal to 1
Break.Set flags /Write /CONDition Register(R11)==0x1

; stop program execution at a write to the address flags if the long

; at address D:0x1000 is larger then 0x12345
Break.Set flags /Write /CONDition Data.Long(D:0x1000)>0x12345

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 131
 Example: Stop the program execution if an register-indirect call calls the function func3.

Break.Set NSR:0x4A32669C /CONDition Register(PC)==ADDRESS.OFFSET(func3)

/AfterStep

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 132
 ©1989-2017 Lauterbach GmbH
Debugger Basics - Training 133
CMD

The field CMD allows to specify one or more commands that are executed when the breakpoint is hit.

Example: Write the contents of flags[12] to a file whenever the write breakpoint at the variable flags[12] is
hit.

OPEN #1 outflags.txt /Create ; open the file for writing

The specified command(s) is executed

whenever the breakpoint is hit. With RESUME
ON the program execution will continue after
the execution of the command(s) is finished.

The cmd field in the Break.List window

informs the user which command(s) is
associated with the breakpoint. R indicates
that RESUME is ON.

Var.Break.Set flags[12] /Write /CMD "WRITE #1 ""flags[12]="" %Decimal

Var.VALUE(flags[12])" /RESUME

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 134
 It is recommended to set RESUME to OFF, if CMD

• starts a PRACTICE script with the command DO

• commands are used that open processing windows like

Trace.STATistic.Func, Trace.Chart.sYmbol or CTS.List

because the program execution is restarted before these commands are

completed.

The state of the debugger toggles between

running and stopped

close #1 ; close the file when you are done

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 135
 Display the result:

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 136
memory/register/var

The on-chip break logic of some cores allows to combine data accesses and instructions to form a complex
breakpoint (e.g. ARM or PowerArchitecture).

Preconditions

• Harvard architecture.

• The on-chip break logic supports a logical AND between Program and Read/Write breakpoints.

Advantageous

• Program breakpoints on address ranges are possible.

• Read/Write breakpoints on address ranges are possible.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 137
 Example: Stop the program execution when the function sieve writes a 1 to variable flags[3]. (If your core
does not support this feature, the radio buttons (MemoryWrite, MemoryRead etc.) are grey.)

1. Define the address (range) of the

instructions here

2. Select MemoryWrite

3. Define the address (range) for the

MemoryWrite accesses

4. Define the data value for the

MemoryWrite accesses

Var.Break.Set sieve /VarWrite flags[3] /DATA.auto 1.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 138
 Exclude (Advanced users only, not available on all cores)

The breakpoint is inverted.

• by the inverting logic of the on-chip break logic

• by setting the specified breakpoint type to the following

2 address ranges
0x0--(start_of_breakpoint_range-1)
(end_of_breakpoint_range+1)--end_of_memory

The EXclude option applies only to Onchip breakpoints.

If the on-chip breakpoint logic does not provide an inverting logic, the
core has to provide the facility to set the specified breakpoint type on
2 address ranges.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 139
Example for the Option EXclude

Stop the program execution when code outside of the function sieve writes 1 to the variable flags[3].

Var.Break.Set sieve /VarWrite flags[3] /DATA.auto 1. /EXclude

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 140
 The function sieve is marked with Exclude memoryWrite breakpoints

The following command allows to check how the option EXclude is implemented.

Break.List /Onchip

Inverting logic of on-chip break logic:

Two address range breakpoints:

If your TRACE32 PowerView does not accept the option EXclude, delete all other Onchip breakpoints, to
make sure that enough resources are available.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 141
Display a List of all Set Breakpoints

address Address of the breakpoint

types Type of the breakpoint

impl Implementation of the breakpoint or disabled

action Action selected for the breakpoint (if not stop)

options Option defined for the breakpoint

data Data value that has to be read/written to stop the program execution by
the breakpoint

count Current value/final value of the counter that is combined with a

breakpoint

condition Condition that has to be true to stop the program execution by the
breakpoint
A (AfterStep) A ON: Perform an assembler single step before condition is evaluated

cmd (command) Commands that are executed after the breakpoint hit
R (resume) R ON: continue the program execution after the specified commands
were executed

task Name of the task for a task-aware breakpoint

Symbolic address of the breakpoint

Break.List [/<option>] List all breakpoints

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 142
Delete Breakpoints

Break.Delete <address>|<address_range> [/<type>] [/<implem.>] [/<option>] Delete breakpoint

Var.Break.Delete <hll_expression> [/<type>] [/<implem.>] [/<option>] Delete HLL breakpoint

Enable/Disable Breakpoints

Break.ENable [<address>|<address_range>] [/<option>] Enable breakpoint

Break.DISable [<address>|<address_range>] [/<option>] Disable breakpoint

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 143
Store Breakpoint Settings

// AndT32 Fri Jul 04 13:17:41 2003

B::

BREAK.RESET
B.S func4 /P /DISABLEHIT
B.S sieve /P
V.B.S \\diabp555\Global\flags[3]; /W /DATA.BYTE 0x1;

ENDDO

STOre <filename> Break Generate a script for breakpoint settings

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 144
Debugging

Debugging of Optimized Code

HLL mode and MIX mode debugging is simple, if the compiler generates a continuous block of assembler
code for each HLL code line.

If compiler optimization flags are turned on, it is highly likely that two or more detached blocks of assembler
code are generated for individual HLL code lines. This makes debugging laboriously.

TRACE32 PowerView displays a drill-down button, whenever two or more detached blocks of assembler
code are generated for an HLL code line.

Drill-down button

The following background information is fundamental if you want to debug optimized code:

• In HLL debug mode, the HLL code lines are displayed as written in the compiled program (source
line order).

• In MIX debug mode, the target code is disassembled and the HLL code lines are displayed
together with their assembler code blocks (target line order). This means if two or more detached
blocks of assembler code are generated for an HLL code line, this HLL code line is displayed
more than once in a MIX mode source listing.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 145
 The expansion of the drill-down button shows how many detached blocks of assembler code are generated
for the HLL line (e.g. two in the example below).

List.Hll Display source listing, display HLL code lines only.

List.Mix /Track Display source listing, display disassembled code and the assigned
HLL code lines.

The blue cursor in the MIX mode display follows the cursor movement
of the HLL mode display (Track option).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 146
 To keep track when debugging optimized code, it is recommended to work with an HLL mode and a MIX
mode display of the source listing in parallel.

List.Hll

List.Mix

Please be aware of the following:

If a Program breakpoint is set to an HLL code line for which two or more detached blocks of assembler code
are generated, a Program breakpoint is set to the start address of each assembler block.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 147
Basic Debug Control

There are local buttons in the List window for all basic debug commands

Step Single stepping (command: Step)

Over Step over call (command Step.Over).

Diverge Exit loops or fast forward to not yet stepped code lines. Step.Over is performed
repeatedly.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 148
 More details on Step.Diverge

TRACE32 maintains a list of all assembler/HLL lines which were already reached by a Step. These reached
lines are marked with a slim grey line in the List window.

The following command allows you to get more details:

List.auto /DIVERGE

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 149
 Drag this handle to see the DIVERGE details

Column layout

s Step type performed on this line

a: Step on assembler level was started from this code line
h: Step on HLL level was started from this code line

state done: code line was reached by a Step and a Step was started from
this code line.
hit: code line was reached by a Step.
target: code line is a possible destination of an already started Step,
but was not reached yet (mostly caused by conditional branches).

stop: program execution stopped at code line.

i indirect branch taken

(return instructions are not marked).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 150
 Example 1: Diverge through function sieve.

1. Run program execution until entry to function sieve.

stop indicates that the

program execution was
stopped at this code line

2. Start a Step.Diverge command.

L

h indicates that a Step

command in HLL mode was
started in this line

hit indicates that this

code line was reached by
Step command

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 151
 3. Continue with Step.Diverge.

done indicates that the

code line was reached by
a Step command and that
a Step command was
started from this code line

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 152
 The drill-down button
indicates that two or
more detached blocks of
assembler code are
generated for an HLL
code line

4. Continue with Step.Diverge.

The drill-down tree is

expanded and the HLL
code line representing
the reached block of
assembler code is marked as hit

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 153
 This HLL code line includes a
conditional branch

5. Continue with Step.Diverge.

The reached code line is

marked as hit

The not-reached code line is

marked as target

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 154
 6. Continue with Step.Diverge (several times).

All code lines are now

either marked as done,
hit or target

7. Continue with Step.Diverge.

A code line former marked

as target changes to hit
when it is reached

When all reachable code lines are marked as done, the following message is displayed:

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 155
 The DIVERGE marking is cleared when you use the Go.direct command without address or the Break
command while the program execution is stopped.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 156
 Example 2: Exit a loop.

DIVERGE marking is
done whenever you
single step.

If all code lines of

a loop are marked as
done/hit, a
Step.Diverge will
exit the loop

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 157
 Return Return sets a temporary breakpoint to the last instruction of a function and then
starts the program execution.

Up This command is used to return to the function that called the current function.
For this a temporary breakpoint is set to the instruction directly after the function
call. Afterwards the program execution is started.

Display the HLL stack to

check the function nesting

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 158
 Step [<count>] Single step
Step.Change <expression> Step until <expression> changes
Step.Till <condition> Step until <condition> becomes true,
<condition> written in TRACE32 syntax
Var.Step.Change <hll_expression> Step until <hll_expression> changes
Var.Step.Till <hll_condition> Step until <hll_condition> becomes true,
<hll_condition> as allowed in used programming
language

Step 10.

Step.Change Register(R11)

Step.Till Register(R11)>0xAA

Var.Step.Change flags[3]

Var.Step.Till flags[3]==1

Step.Over Step over call

Go [<address>|<label>] Start program execution

Go.Next Set a temporary breakpoint to the next code line
and start the program execution
Go.Return Set a temporary breakpoint to the return
instruction and start the program execution
Go.Up [<level>|<address>] Run program until it returns to the caller function

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 159
Sample-based Profiling

Program Counter Sampling

Task: get the percentage of time used by a high-level language function.

Measurement procedure: The Program Counter is sampled periodically. This is implemented in two ways.

• Snoop: Processor architecture allows to read the Program Counter while the program execution
is running.

• StopAndGo: The program execution is stopped shortly in order to read the Program Counter.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 160
Standard Procedure

Steps to be taken:

1. Open the PERF configuration window.

PERF.state Display PERF configuration window

The PERF METHOD Snoop is automatically selected, if the processor architecture supports reading
the Program Counter while the program execution is running.

The default METHOD for all other processor architectures is StopAndGo.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 161
 Remarks on the StopAndGo method

StopAnd Go means that the core is stopped periodically in order to get the actual Program Counter.

STREAM ON The software running on the TRACE32 debug hardware

initiates the periodic stops. This has the following advantages:

• Low intrusive (approx. 50. to 100.us)

• More samples per second are possible

STREAM OFF The software running on the host initiates the periodic stops.

• More intrusive (1 ms in a worst case scenario)

• Less samples per second are possible

The display of a red S in the TRACE32 state line indicates, that the program execution is periodically
interrupted by the sample-based profiling.

TRACE32 tunes the sampling rate so that more the 99% of the run-time is retained for the actual
program run (runtime). The smallest possible sampling rate is nevertheless 10 (snoops/s).

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 162
 2. Enable the sample-based profiling by selecting the OFF state.

PERF.OFF Enable the sample-based profiling

3. Open a result window by pushing the ListFunc button.

PERF.ListFunc Open an HLL function profiling window

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 163
 4. Start the program execution and the sampling.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 164
Details

In-depth Result

Push the Detailed button, to get more detailed information on the result.

PERF.ListFunc ALL Open a detailed HLL function profiling window

name Function name

time Time in function

watchtime Time the function is observed

ratio Ratio of time spent by the function in percent

dratio Similar to Ratio, but only for the last second

address Function´s address range

hits Number of samples taken for the function

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 165
 (other)

TRACE32 assigns all samples that can not be assigned to a high-level language function to (other).
Especially if the ratio for (other) is quite high, it might be interesting what code is running there. In this case
pushing the button ListLABEL is recommended.

PERF.ListLABEL Open a window for label-based profiling

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 166
TASK Sampling

If OS-aware debugging is configured (refer to “OS-aware Debugging” in TRACE32 Glossary, page 12

(glossary.pdf)), TASK information can be sampled.

Steps to be taken:

1. Open the PERF configuration window.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 167
 2. Select Mode TASK.

Since every OS has a variable that contains the information which task/process is currently running,
this variable has to be sampled while the program execution is running in order to perform TASK
sampling.

TRACE32 fills the following fields when TASK mode is selected:

- the SnoopAddress field with the address of the variable.

- the SnoopSize field with the size of the variable.

The PERF METHOD Snoop is automatically selected, if the processor architecture supports reading
physical memory while the program execution is running. For details refer to “Run-time Memory
Access” (glossary.pdf)).

The default METHOD for all other processor architectures is StopAndGo.

PERF.Mode TASK

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 168
 3. Enable sample-based profiling by switching to OFF state and open the result window by
pushing the ListTask button.

PERF.OFF Enable the sample-based profiling

PERF.ListTASK

4. Start the program execution and the sampling.

©1989-2017 Lauterbach GmbH

Debugger Basics - Training 169