From ba58dcdc5ad6ca021c723d279f33e3f14e1184df Mon Sep 17 00:00:00 2001 From: Arthur Hanson Rasmusson Date: Fri, 2 Oct 2026 08:36:35 -0400 Subject: debug: add green-eye GSP/uproc RISC-V VM runtime analysis tooling Adds open-iov/debug/risc-v-gsp-rm-vm: a GDB-free instrumentation stack that boots uproc/GSP firmware in qemu-system-riscv64 and provides Frida-like hooks, breakpoints, watchpoints, memory dumps, structure decoding, snapshot diffs, recorded sessions, declarative probes, a plugin API and a Ghidra symbol/hit bridge. Verified: 25 tests green (including a live QEMU smoke test); the demo uproc boots with correct hook/leave/watch/schema/snapshot/fault evidence; the optional TCG trace plugin builds and recorded 15M trace lines in 3 s; the TU104 570.144 fwimage probe reports its first exception (load access fault at firmware vaddr 0x4009014 reading 0x2000000000000A00). Documentation: lean tool docs under debug/risc-v-gsp-rm-vm/docs/00-10, a new docs/05-operations/03-risc-v-gsp-rm-vm.md debugging document, and '# TOOL IN DEVELOPMENT - NOT READY YET!' markers in docs/README.md, the onboarding tooling table and the debugging workflows doc. Vendors qemu-plugin.h from QEMU v8.2.2 (GPL-2.0-or-later), with its license header intact, so the optional TCG plugin builds without a QEMU source tree. --- .../firmware/uproc_demo/gsp_ctrl.schema.json | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 debug/risc-v-gsp-rm-vm/firmware/uproc_demo/gsp_ctrl.schema.json (limited to 'debug/risc-v-gsp-rm-vm/firmware/uproc_demo/gsp_ctrl.schema.json') diff --git a/debug/risc-v-gsp-rm-vm/firmware/uproc_demo/gsp_ctrl.schema.json b/debug/risc-v-gsp-rm-vm/firmware/uproc_demo/gsp_ctrl.schema.json new file mode 100644 index 0000000..ca18f81 --- /dev/null +++ b/debug/risc-v-gsp-rm-vm/firmware/uproc_demo/gsp_ctrl.schema.json @@ -0,0 +1,19 @@ +{ + "name": "gsp_ctrl", + "size": 392, + "fields": [ + {"name": "magic", "offset": 0, "fmt": "u32", "note": "GSP-like control block magic 0x47535031"}, + {"name": "version", "offset": 4, "fmt": "u32"}, + {"name": "state", "offset": 8, "fmt": "u32", "enum": {"0": "S0", "1": "S1", "2": "S2", "3": "S3"}}, + {"name": "heartbeat", "offset": 12, "fmt": "u32"}, + {"name": "rpc_count", "offset": 16, "fmt": "u64"}, + {"name": "last_rpc", "offset": 24, "fmt": "u64"}, + {"name": "mailbox", "offset": 32, "fmt": "u64", "enum": {"0": "idle", "1": "PING", "2": "ECHO", "3": "FILL", "4": "SUM", "5": "STATE", "6": "FAULT"}}, + {"name": "arg0", "offset": 40, "fmt": "u64"}, + {"name": "arg1", "offset": 48, "fmt": "u64"}, + {"name": "result", "offset": 56, "fmt": "u64"}, + {"name": "buf", "offset": 64, "fmt": "bytes", "size": 256}, + {"name": "handler_count", "offset": 320, "fmt": "u64"}, + {"name": "handlers", "offset": 328, "fmt": "u64", "count": 8} + ] +} -- cgit v1.2.3