From ba58dcdc5ad6ca021c723d279f33e3f14e1184df Mon Sep 17 00:00:00 2001 From: Arthur Hanson Rasmusson Date: Fri, 2 Oct 2026 08:36:35 -0400 Subject: debug: add green-eye GSP/uproc RISC-V VM runtime analysis tooling Adds open-iov/debug/risc-v-gsp-rm-vm: a GDB-free instrumentation stack that boots uproc/GSP firmware in qemu-system-riscv64 and provides Frida-like hooks, breakpoints, watchpoints, memory dumps, structure decoding, snapshot diffs, recorded sessions, declarative probes, a plugin API and a Ghidra symbol/hit bridge. Verified: 25 tests green (including a live QEMU smoke test); the demo uproc boots with correct hook/leave/watch/schema/snapshot/fault evidence; the optional TCG trace plugin builds and recorded 15M trace lines in 3 s; the TU104 570.144 fwimage probe reports its first exception (load access fault at firmware vaddr 0x4009014 reading 0x2000000000000A00). Documentation: lean tool docs under debug/risc-v-gsp-rm-vm/docs/00-10, a new docs/05-operations/03-risc-v-gsp-rm-vm.md debugging document, and '# TOOL IN DEVELOPMENT - NOT READY YET!' markers in docs/README.md, the onboarding tooling table and the debugging workflows doc. Vendors qemu-plugin.h from QEMU v8.2.2 (GPL-2.0-or-later), with its license header intact, so the optional TCG plugin builds without a QEMU source tree. --- debug/risc-v-gsp-rm-vm/Makefile | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 debug/risc-v-gsp-rm-vm/Makefile (limited to 'debug/risc-v-gsp-rm-vm/Makefile') diff --git a/debug/risc-v-gsp-rm-vm/Makefile b/debug/risc-v-gsp-rm-vm/Makefile new file mode 100644 index 0000000..a5103f5 --- /dev/null +++ b/debug/risc-v-gsp-rm-vm/Makefile @@ -0,0 +1,31 @@ +# green-eye convenience targets. The real work lives in the package. +PYTHON ?= python3 + +.PHONY: all demo test demo-run plugin probe-real clean info + +all: demo + +demo: + $(MAKE) -C firmware/uproc_demo + +test: demo + $(PYTHON) -m unittest discover -s tests -t . + +demo-run: demo + ./greeneye.sh demo --no-build + +info: + ./greeneye.sh info + +# Optional TCG plugin (needs the QEMU plugin headers; see qemu/README.md). +plugin: + $(MAKE) -C qemu + +# Run the real GSP fwimage for a bounded window and report first divergence. +probe-real: + ./greeneye.sh probe + +clean: + $(MAKE) -C firmware/uproc_demo clean + rm -rf dumps/* qemu/*.so qemu/*.o + find . -name __pycache__ -type d -exec rm -rf {} + 2>/dev/null || true -- cgit v1.2.3