Project

General

Profile

Getting Started » History » Version 11

Sergey Smolov, 11/13/2018 02:33 PM

1 1 Sergey Smolov
h1. Getting Started
2
3
{{toc}}
4
5 3 Sergey Smolov
h2. General notes
6
7 8 Sergey Smolov
First of all, install the QEMU4V with the help of the "instruction":https://forge.ispras.ru/projects/qemu4v/wiki/Installation
8
9 3 Sergey Smolov
It is possible to terminate QEMU by hands only. Neither Ctrl-C nor Ctrl-Z works, use _kill <process-id>_ or _killall qemu-system*_.
10
11 1 Sergey Smolov
h2. Aarch64
12
13 5 Sergey Smolov
It is supposed that the following tools are already installed in your system:
14 1 Sergey Smolov
- Toolchain for Aarch64 assembler programs compilation, linking, etc. (can be downloaded from "Linaro website":http://releases.linaro.org/components/toolchain/binaries or just below, installation instruction is "here":http://forge.ispras.ru/projects/microtesk-armv8/wiki/Toolchain).
15
16 3 Sergey Smolov
# Write a simple Aarch64 program (it is called @sample.s@) that does nothing but puts 0x10 value to X0 register and then halts. Here it is:
17 1 Sergey Smolov
<pre>
18
.text
19
	.globl _start
20
	bl _start
21
_start:
22
	movz x1, #0x10, LSL #0
23
	hlt #57005
24
</pre>
25 3 Sergey Smolov
# To compile the Aarch64 assembler program, do the following:
26 1 Sergey Smolov
<pre>
27
aarch64-linux-gnu-as sample.s -o sample.o
28
aarch64-linux-gnu-ld sample.o -o sample.elf
29
aarch64-linux-gnu-objcopy -O binary sample.elf sample.bin
30
</pre>
31
# Finally, run _QEMU4V_ emulator with enabled option of microprocessor execution trace logging:
32
<pre>
33
qemu-system-aarch64 -M virt -cpu cortex-a57 -bios sample.bin -d nochain,in_asm -singlestep -nographic -trace-log -D log-file.txt
34
</pre>
35 6 Sergey Smolov
# Wait for a while, then stop QEMU4V. The following @log-file.txt@ trace file should be generated:
36 1 Sergey Smolov
<pre>
37
0 clk IT (0) 0000000000000000 94000001 A svc_ns : bl #+0x4 (addr 0x4)
38
1 clk IT (1) 0000000000000004 d2800201 A svc_ns : movz x1, #0x10, LSL #0
39
2 clk IT (2) 0000000000000008 d45bd5a0 A svc_ns : hlt #57005
40
</pre>
41
42 4 Sergey Smolov
h2. MIPS32
43 3 Sergey Smolov
44 5 Sergey Smolov
It is supposed that the following tools are already installed in your system:
45 3 Sergey Smolov
- Toolchain for MIPS assembler programs compilation, linking, etc. (a list of toolchains is available "here":https://www.linux-mips.org/wiki/Toolchains).
46
47
# First of all, let's write a simple MIPS program (it is called @sample.s@) that stores 0x10 value at x12345678 address. Here it is:
48
<pre>
49
.text
50
	.globl _start
51
_start:
52
lui $1, 0x1234
53
ori $1, $1, 0x5678
54
addi $8, $0, 10
55
sw $8, 0($1)
56
</pre>
57 6 Sergey Smolov
# To compile the MIPS32 assembler program, do the following:
58 3 Sergey Smolov
<pre>
59
mips-linux-gnu-as sample.s -o sample.o
60
mips-linux-gnu-ld sample.o -Ttext 0xbfc00000 -o sample.elf
61
</pre>
62
# Finally, run _QEMU4V_ emulator:
63
<pre>
64
qemu-system-mips -M mips -cpu mips32r6-generic -d unimp,nochain,in_asm -nographic -singlestep -D log.txt -bios sample.elf
65
</pre>
66 6 Sergey Smolov
# Wait for a while, then stop QEMU4V. The following @log-file.txt@ trace file should be generated:
67 3 Sergey Smolov
<pre>
68
...
69
----------------
70
IN: 
71
0xbfc0fffc:  nop
72
73
----------------
74
IN: 
75
0xbfc10000:  lui	at,0x1234
76
77
----------------
78
IN: 
79
0xbfc10004:  ori	at,at,0x5678
80
81
----------------
82
IN: 
83
0xbfc10008:  beqzalc	zero,t0,0xbfc10034
84
85
----------------
86
IN: 
87
0xbfc10034:  cache	0x0,0(s8)
88
</pre>
89
90 11 Sergey Smolov
h2. PowerPC32
91 9 Sergey Smolov
92 10 Maxim Chudnov
# Write a simple PowerPC program (it is called @p1.s@). Here it is:
93
<pre>
94
.section    .text
95
    addi    4,0,5       # bad
96
    la  3,3(0)      # very bad
97
    la  3,0(3)
98
    la  5,2500(3)
99
</pre>
100
# To compile the PowerPC assembler program, do the following:
101
<pre>
102
powerpc-linux-gnu-as p1.s -o p1.o
103
</pre>
104 9 Sergey Smolov
105 1 Sergey Smolov
h2. RISC-V
106
107 5 Sergey Smolov
It is supposed that the following tools are already installed in your system:
108 1 Sergey Smolov
- Toolchain for RISC-V assembler programs compilation, linking, etc. (the source code and the installation guide are available "here":https://github.com/riscv/riscv-gnu-toolchain).
109
110 3 Sergey Smolov
# Write a simple RISC-V program (it is called @sample.s@) that does nothing but puts 0x18 value to @t1@ register and puts 0x21 value to @t2@ register. Here it is:
111 1 Sergey Smolov
<pre>
112
.text
113
.globl _start
114
_start:
115
 addi t1, zero, 0x18
116
 addi t2, zero, 0x21
117
</pre>
118 3 Sergey Smolov
# To compile the RISC-V assembler program, do the following:
119 1 Sergey Smolov
<pre>
120
aarch64-linux-gnu-as sample.s -o sample.o
121
aarch64-linux-gnu-ld sample.o -Ttext 0x1000 -o sample.elf
122
</pre>
123
# Finally, run _QEMU4V_ emulator with enabled option of microprocessor execution trace logging (0x1000 value was used by linker because of QEMU-related features):
124
<pre>
125 2 Sergey Smolov
qemu-system-riscv64 -M spike_v1.10 -cpu any -d unimp,nochain,in_asm -nographic -singlestep -trace-log -kernel sample.elf
126 1 Sergey Smolov
</pre>
127 6 Sergey Smolov
# Wait for a while, then stop QEMU4V. The following trace should be generated:
128 1 Sergey Smolov
<pre>
129
0 clk 0 IT (0) 0000000000001000 01800313 A svc_ns : li t1,24
130
1 clk R t1 0000000000000018
131
1 clk 0 IT (1) 0000000000001004 02100393 A svc_ns : li t2,33
132
2 clk R t2 0000000000000021
133
2 clk 0 IT (2) 0000000000001008 00000000 A svc_ns : unimp
134
3 clk 0 IT (3) 0000000000001010 00000000 A svc_ns : unimp
135 3 Sergey Smolov
</pre>
136
137 7 Sergey Smolov
h2. X86 (8086 case)
138 3 Sergey Smolov
139 5 Sergey Smolov
It is supposed that the following tools are already installed in your system:
140 7 Sergey Smolov
- Toolchain for X86 assembler programs compilation, linking, etc. (we use "GCC":https://gcc.gnu.org).
141 1 Sergey Smolov
142 7 Sergey Smolov
# Write a simple X86 program (it is called @sample.s@) that performs some calculations:
143 1 Sergey Smolov
<pre>
144 7 Sergey Smolov
.code16 # tell the assembler that we're using 16 bit mode
145
	.text
146
	.global _start
147 3 Sergey Smolov
_start:
148 7 Sergey Smolov
	mov $11, %AX
149
	and $204, %BX
150
	mov %AX, %CX
151
	add %CX, %BX
152
	sub %CX, %AX
153
.org 510 # magic bytes that tell BIOS that this is bootable
154
.word 0xaa55 # magic bytes that tell BIOS that this is bootable
155 1 Sergey Smolov
</pre>
156
# To compile the X86 GNU assembler program, do the following:
157
<pre>
158
x86_64-linux-gnu-as sample.s -o sample.o
159 7 Sergey Smolov
x86_64-linux-gnu-ld sample.o -T 0x7c00 --oformat binary -o sample.elf
160 1 Sergey Smolov
</pre>
161
# Finally, run _QEMU4V_ emulator:
162
<pre>
163 7 Sergey Smolov
qemu-system-i386 -M pc -cpu 486 -d unimp,nochain,in_asm -nographic -singlestep -D log.txt -hda sample.elf
164 1 Sergey Smolov
</pre>
165 7 Sergey Smolov
# Wait for a while, then stop QEMU4V. The following @log-file.txt@ trace file should be generated (go to the 0x7c00 address and see the program execution fragment):
166 1 Sergey Smolov
<pre>
167 7 Sergey Smolov
----------------
168
IN: 
169
0x00007c00:  mov    $0xb,%ax
170
171
----------------
172
IN: 
173
0x00007c03:  and    $0xcc,%bx
174
175
----------------
176
IN: 
177
0x00007c07:  mov    %ax,%cx
178
179
----------------
180
IN: 
181
0x00007c09:  add    %cx,%bx
182
183
----------------
184
IN: 
185
0x00007c0b:  sub    %cx,%ax
186
187
----------------
188 1 Sergey Smolov
</pre>