@dircategory Programming & development tools. * Gdb: (gdb). The GNU debugger.
Copyright (C) 1988,1989,1990,1991,1992,1993,1994,1995,1996,1998,1999,2000,2001
Free Software Foundation, Inc.
Published by the Free Software Foundation
59 Temple Place - Suite 330,
Boston, MA 02111-1307 USA
ISBN 1-882114-77-9
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.1 or any later version published by the Free Software Foundation; with the Invariant Sections being "Free Software" and "Free Software Needs Free Documentation", with the Front-Cover Texts being "A GNU Manual," and with the Back-Cover Texts as in (a) below.
(a) The FSF's Back-Cover Text is: "You have freedom to copy and modify this GNU Manual, like GNU software. Copies published by the Free Software Foundation raise funds for GNU development." @node Top @top Debugging with @value{GDBN} This file describes @value{GDBN}, the @sc{gnu} symbolic debugger. This is the @value{EDITION} Edition, @value{DATE}, for @value{GDBN} Version @value{GDBVN}. Copyright (C) 1988-2000 Free Software Foundation, Inc. @menu * Summary:: Summary of @value{GDBN} * Sample Session:: A sample @value{GDBN} session * Invocation:: Getting in and out of @value{GDBN} * Commands:: @value{GDBN} commands * Running:: Running programs under @value{GDBN} * Stopping:: Stopping and continuing * Stack:: Examining the stack * Source:: Examining source files * Data:: Examining data * Languages:: Using @value{GDBN} with different languages * Symbols:: Examining the symbol table * Altering:: Altering execution * GDB Files:: @value{GDBN} files * Targets:: Specifying a debugging target * Configurations:: Configuration-specific information * Controlling GDB:: Controlling @value{GDBN} * Sequences:: Canned sequences of commands * Emacs:: Using @value{GDBN} under @sc{gnu} Emacs * Annotations:: @value{GDBN}'s annotation interface. * GDB Bugs:: Reporting bugs in @value{GDBN} * Formatting Documentation:: How to format and print @value{GDBN} documentation * Command Line Editing:: Command Line Editing * Using History Interactively:: Using History Interactively * Installing GDB:: Installing GDB * Index:: Index @end menu
The purpose of a debugger such as is to allow you to see what is going on "inside" another program while it executes--or what another program was doing at the moment it crashed.
can do four main kinds of things (plus other things in support of these) to help you catch bugs in the act:
You can use to debug programs written in C and C++. For more information, see section Supported languages. For more information, see section C and C++.
Support for Modula-2 and Chill is partial. For information on Modula-2, see section Modula-2. For information on Chill, see section Chill.
Debugging Pascal programs which use sets, subranges, file variables, or nested functions does not currently work. does not support entering expressions, printing values, or similar features using Pascal syntax.
can be used to debug programs written in Fortran, although it may be necessary to refer to some variables with a trailing underscore.
is free software, protected by the GNU General Public License (GPL). The GPL gives you the freedom to copy or adapt a licensed program--but every person getting a copy also gets with it the freedom to modify that copy (which means that they must get access to the source code), and the freedom to distribute further copies. Typical software companies use copyrights to limit your freedoms; the Free Software Foundation uses the GPL to preserve these freedoms.
Fundamentally, the General Public License is a license which says that you have these freedoms and that you cannot take these freedoms away from anyone else.
The biggest deficiency in the free software community today is not in the software--it is the lack of good free documentation that we can include with the free software. Many of our most important programs do not come with free reference manuals and free introductory texts. Documentation is an essential part of any software package; when an important free software package does not come with a free manual and a free tutorial, that is a major gap. We have many such gaps today.
Consider Perl, for instance. The tutorial manuals that people normally use are non-free. How did this come about? Because the authors of those manuals published them with restrictive terms--no copying, no modification, source files not available--which exclude them from the free software world.
That wasn't the first time this sort of thing happened, and it was far from the last. Many times we have heard a GNU user eagerly describe a manual that he is writing, his intended contribution to the community, only to learn that he had ruined everything by signing a publication contract to make it non-free.
Free documentation, like free software, is a matter of freedom, not price. The problem with the non-free manual is not that publishers charge a price for printed copies--that in itself is fine. (The Free Software Foundation sells printed copies of manuals, too.) The problem is the restrictions on the use of the manual. Free manuals are available in source code form, and give you permission to copy and modify. Non-free manuals do not allow this.
The criteria of freedom for a free manual are roughly the same as for free software. Redistribution (including the normal kinds of commercial redistribution) must be permitted, so that the manual can accompany every copy of the program, both on-line and on paper.
Permission for modification of the technical content is crucial too. When people modify the software, adding or changing features, if they are conscientious they will change the manual too--so they can provide accurate and clear documentation for the modified program. A manual that leaves you no choice but to write a new manual to document a changed version of the program is not really available to our community.
Some kinds of limits on the way modification is handled are acceptable. For example, requirements to preserve the original author's copyright notice, the distribution terms, or the list of authors, are ok. It is also no problem to require modified versions to include notice that they were modified. Even entire sections that may not be deleted or changed are acceptable, as long as they deal with nontechnical topics (like this one). These kinds of restrictions are acceptable because they don't obstruct the community's normal use of the manual.
However, it must be possible to modify all the technical content of the manual, and then distribute the result in all the usual media, through all the usual channels. Otherwise, the restrictions obstruct the use of the manual, it is not free, and we need another manual to replace it.
Please spread the word about this issue. Our community continues to lose manuals to proprietary publishing. If we spread the word that free software needs free reference manuals and free tutorials, perhaps the next person who wants to contribute by writing documentation will realize, before it is too late, that only free manuals contribute to the free software community.
If you are writing documentation, please insist on publishing it under the GNU Free Documentation License or another free documentation license. Remember that this decision requires your approval--you don't have to let the publisher decide. Some commercial publishers will use a free license if you insist, but they will not propose the option; it is up to you to raise the issue and say firmly that this is what you want. If the publisher you are dealing with refuses, please try other publishers. If you're not sure whether a proposed license is free, write to [email protected].
You can encourage commercial publishers to sell more free, copylefted manuals and tutorials by buying them, and particularly by buying copies from the publishers that paid for their writing or for major improvements. Meanwhile, try to avoid buying non-free documentation at all. Check the distribution terms of a manual before you buy it, and insist that whoever seeks your business must respect your freedom. Check the history of the book, and try to reward the publishers that have paid or pay the authors to work on it.
The Free Software Foundation maintains a list of free documentation published by other publishers, at http://www.fsf.org/doc/other-free-books.html.
Richard Stallman was the original author of , and of many other GNU programs. Many others have contributed to its development. This section attempts to credit major contributors. One of the virtues of free software is that everyone is free to contribute to it; with regret, we cannot actually acknowledge everyone here. The file `ChangeLog' in the distribution approximates a blow-by-blow account.
Changes much prior to version 2.0 are lost in the mists of time.
Plea: Additions to this section are particularly welcome. If you or your friends (or enemies, to be evenhanded) have been unfairly omitted from this list, we would like to add your names!
So that they may not regard their many labors as thankless, we particularly thank those who shepherded through major releases: Andrew Cagney (releases 5.0 and 5.1); Jim Blandy (release 4.18); Jason Molenda (release 4.17); Stan Shebs (release 4.14); Fred Fish (releases 4.16, 4.15, 4.13, 4.12, 4.11, 4.10, and 4.9); Stu Grossman and John Gilmore (releases 4.8, 4.7, 4.6, 4.5, and 4.4); John Gilmore (releases 4.3, 4.2, 4.1, 4.0, and 3.9); Jim Kingdon (releases 3.5, 3.4, and 3.3); and Randy Smith (releases 3.2, 3.1, and 3.0).
Richard Stallman, assisted at various times by Peter TerMaat, Chris Hanson, and Richard Mlynarik, handled releases through 2.8.
Michael Tiemann is the author of most of the GNU C++ support in , with significant additional contributions from Per Bothner and Daniel Berlin. James Clark wrote the GNU C++ demangler. Early work on C++ was by Peter TerMaat (who also did much general update work leading to release 3.0).
uses the BFD subroutine library to examine multiple object-file formats; BFD was a joint project of David V. Henkel-Wallace, Rich Pixley, Steve Chamberlain, and John Gilmore.
David Johnson wrote the original COFF support; Pace Willison did the original support for encapsulated COFF.
Brent Benson of Harris Computer Systems contributed DWARF2 support.
Adam de Boor and Bradley Davis contributed the ISI Optimum V support. Per Bothner, Noboyuki Hikichi, and Alessandro Forin contributed MIPS support. Jean-Daniel Fekete contributed Sun 386i support. Chris Hanson improved the HP9000 support. Noboyuki Hikichi and Tomoyuki Hasei contributed Sony/News OS 3 support. David Johnson contributed Encore Umax support. Jyrki Kuoppala contributed Altos 3068 support. Jeff Law contributed HP PA and SOM support. Keith Packard contributed NS32K support. Doug Rabson contributed Acorn Risc Machine support. Bob Rusk contributed Harris Nighthawk CX-UX support. Chris Smith contributed Convex support (and Fortran debugging). Jonathan Stone contributed Pyramid support. Michael Tiemann contributed SPARC support. Tim Tucker contributed support for the Gould NP1 and Gould Powernode. Pace Willison contributed Intel 386 support. Jay Vosburgh contributed Symmetry support.
Andreas Schwab contributed M68K Linux support.
Rich Schaefer and Peter Schauer helped with support of SunOS shared libraries.
Jay Fenlason and Roland McGrath ensured that and GAS agree about several machine instruction sets.
Patrick Duval, Ted Goldstein, Vikram Koka and Glenn Engel helped develop remote debugging. Intel Corporation, Wind River Systems, AMD, and ARM contributed remote debugging modules for the i960, VxWorks, A29K UDI, and RDI targets, respectively.
Brian Fox is the author of the readline libraries providing command-line editing and command history.
Andrew Beers of SUNY Buffalo wrote the language-switching code, the Modula-2 support, and contributed the Languages chapter of this manual.
Fred Fish wrote most of the support for Unix System Vr4. He also enhanced the command-completion support to cover C++ overloaded symbols.
Hitachi America, Ltd. sponsored the support for H8/300, H8/500, and Super-H processors.
NEC sponsored the support for the v850, Vr4xxx, and Vr5xxx processors.
Mitsubishi sponsored the support for D10V, D30V, and M32R/D processors.
Toshiba sponsored the support for the TX39 Mips processor.
Matsushita sponsored the support for the MN10200 and MN10300 processors.
Fujitsu sponsored the support for SPARClite and FR30 processors.
Kung Hsu, Jeff Law, and Rick Sladkey added support for hardware watchpoints.
Michael Snyder added support for tracepoints.
Stu Grossman wrote gdbserver.
Jim Kingdon, Peter Schauer, Ian Taylor, and Stu Grossman made nearly innumerable bug fixes and cleanups throughout .
The following people at the Hewlett-Packard Company contributed support for the PA-RISC 2.0 architecture, HP-UX 10.20, 10.30, and 11.0 (narrow mode), HP's implementation of kernel threads, HP's aC++ compiler, and the terminal user interface: Ben Krepp, Richard Title, John Bishop, Susan Macchia, Kathy Mann, Satish Pai, India Paul, Steve Rehrauer, and Elena Zannoni. Kim Haase provided HP-specific information in this manual.
DJ Delorie ported to MS-DOS, for the DJGPP project. Robert Hoehne made significant contributions to the DJGPP port.
Cygnus Solutions has sponsored maintenance and much of its development since 1991. Cygnus engineers who have worked on fulltime include Mark Alexander, Jim Blandy, Per Bothner, Kevin Buettner, Edith Epstein, Chris Faylor, Fred Fish, Martin Hunt, Jim Ingham, John Gilmore, Stu Grossman, Kung Hsu, Jim Kingdon, John Metzler, Fernando Nasser, Geoffrey Noer, Dawn Perchik, Rich Pixley, Zdenek Radouch, Keith Seitz, Stan Shebs, David Taylor, and Elena Zannoni. In addition, Dave Brolley, Ian Carmichael, Steve Chamberlain, Nick Clifton, JT Conklin, Stan Cox, DJ Delorie, Ulrich Drepper, Frank Eigler, Doug Evans, Sean Fagan, David Henkel-Wallace, Richard Henderson, Jeff Holcomb, Jeff Law, Jim Lemke, Tom Lord, Bob Manson, Michael Meissner, Jason Merrill, Catherine Moore, Drew Moseley, Ken Raeburn, Gavin Romig-Koch, Rob Savoye, Jamie Smith, Mike Stump, Ian Taylor, Angela Thomas, Michael Tiemann, Tom Tromey, Ron Unrau, Jim Wilson, and David Zuhn have made contributions both large and small.
You can use this manual at your leisure to read all about . However, a handful of commands are enough to get started using the debugger. This chapter illustrates those commands.
In this sample session, we emphasize user input like this: input, to make it easier to pick out from the surrounding output.
One of the preliminary versions of GNU m4
(a generic macro
processor) exhibits the following bug: sometimes, when we change its
quote strings from the default, the commands used to capture one macro
definition within another stop working. In the following short m4
session, we define a macro foo
which expands to 0000
; we
then use the m4
built-in defn
to define bar
as the
same thing. However, when we change the open quote string to
<QUOTE>
and the close quote string to <UNQUOTE>
, the same
procedure fails to define a new synonym baz
:
$ cd gnu/m4 $ ./m4 define(foo,0000) foo 0000 define(bar,defn(`foo')) bar 0000 changequote(<QUOTE>,<UNQUOTE>) define(baz,defn(<QUOTE>foo<UNQUOTE>)) baz C-d m4: End of input: 0: fatal error: EOF in string
Let us use to try to see what is going on.
$ m4 is free software and you are welcome to distribute copies of it under certain conditions; type "show copying" to see the conditions. There is absolutely no warranty for ; type "show warranty" for details. , Copyright 1999 Free Software Foundation, Inc... ()
reads only enough symbol data to know where to find the rest when needed; as a result, the first prompt comes up very quickly. We now tell to use a narrower display width than usual, so that examples fit in this manual.
() set width 70
We need to see how the m4
built-in changequote
works.
Having looked at the source, we know the relevant subroutine is
m4_changequote
, so we set a breakpoint there with the
break
command.
() break m4_changequote Breakpoint 1 at 0x62f4: file builtin.c, line 879.
Using the run
command, we start m4
running under
control; as long as control does not reach the m4_changequote
subroutine, the program runs as usual:
() run Starting program: /work/Editorial/gdb/gnu/m4/m4 define(foo,0000) foo 0000
To trigger the breakpoint, we call changequote
.
suspends execution of m4
, displaying information about the
context where it stops.
changequote(<QUOTE>,<UNQUOTE>) Breakpoint 1, m4_changequote (argc=3, argv=0x33c70) at builtin.c:879 879 if (bad_argc(TOKEN_DATA_TEXT(argv[0]),argc,1,3))
Now we use the command n
(next
) to advance execution to
the next line of the current function.
() n 882 set_quotes((argc >= 2) ? TOKEN_DATA_TEXT(argv[1])\ : nil,
set_quotes
looks like a promising subroutine. We can go into it
by using the command s
(step
) instead of next
.
step
goes to the next line to be executed in any
subroutine, so it steps into set_quotes
.
() s set_quotes (lq=0x34c78 "<QUOTE>", rq=0x34c88 "<UNQUOTE>") at input.c:530 530 if (lquote != def_lquote)
The display that shows the subroutine where m4
is now
suspended (and its arguments) is called a stack frame display. It
shows a summary of the stack. We can use the backtrace
command (which can also be spelled bt
), to see where we are
in the stack as a whole: the backtrace
command displays a
stack frame for each active subroutine.
() bt #0 set_quotes (lq=0x34c78 "<QUOTE>", rq=0x34c88 "<UNQUOTE>") at input.c:530 #1 0x6344 in m4_changequote (argc=3, argv=0x33c70) at builtin.c:882 #2 0x8174 in expand_macro (sym=0x33320) at macro.c:242 #3 0x7a88 in expand_token (obs=0x0, t=209696, td=0xf7fffa30) at macro.c:71 #4 0x79dc in expand_input () at macro.c:40 #5 0x2930 in main (argc=0, argv=0xf7fffb20) at m4.c:195
We step through a few more lines to see what happens. The first two
times, we can use `s'; the next two times we use n
to avoid
falling into the xstrdup
subroutine.
() s 0x3b5c 532 if (rquote != def_rquote) () s 0x3b80 535 lquote = (lq == nil || *lq == '\0') ? \ def_lquote : xstrdup(lq); () n 536 rquote = (rq == nil || *rq == '\0') ? def_rquote\ : xstrdup(rq); () n 538 len_lquote = strlen(rquote);
The last line displayed looks a little odd; we can examine the variables
lquote
and rquote
to see if they are in fact the new left
and right quotes we specified. We use the command p
(print
) to see their values.
() p lquote $1 = 0x35d40 "<QUOTE>" () p rquote $2 = 0x35d50 "<UNQUOTE>"
lquote
and rquote
are indeed the new left and right quotes.
To look at some context, we can display ten lines of source
surrounding the current line with the l
(list
) command.
() l 533 xfree(rquote); 534 535 lquote = (lq == nil || *lq == '\0') ? def_lquote\ : xstrdup (lq); 536 rquote = (rq == nil || *rq == '\0') ? def_rquote\ : xstrdup (rq); 537 538 len_lquote = strlen(rquote); 539 len_rquote = strlen(lquote); 540 } 541 542 void
Let us step past the two lines that set len_lquote
and
len_rquote
, and then examine the values of those variables.
() n 539 len_rquote = strlen(lquote); () n 540 } () p len_lquote $3 = 9 () p len_rquote $4 = 7
That certainly looks wrong, assuming len_lquote
and
len_rquote
are meant to be the lengths of lquote
and
rquote
respectively. We can set them to better values using
the p
command, since it can print the value of
any expression--and that expression can include subroutine calls and
assignments.
() p len_lquote=strlen(lquote) $5 = 7 () p len_rquote=strlen(rquote) $6 = 9
Is that enough to fix the problem of using the new quotes with the
m4
built-in defn
? We can allow m4
to continue
executing with the c
(continue
) command, and then try the
example that caused trouble initially:
() c Continuing. define(baz,defn(<QUOTE>foo<UNQUOTE>)) baz 0000
Success! The new quotes now work just as well as the default ones. The
problem seems to have been just the two typos defining the wrong
lengths. We allow m4
exit by giving it an EOF as input:
C-d Program exited normally.
The message `Program exited normally.' is from ; it
indicates m4
has finished executing. We can end our
session with the quit
command.
() quit
This chapter discusses how to start , and how to get out of it. The essentials are:
Invoke by running the program . Once started,
reads commands from the terminal until you tell it to exit.
You can also run with a variety of arguments and options,
to specify more of your debugging environment at the outset.
The command-line options described here are designed to cover a variety of situations; in some environments, some of these options may effectively be unavailable.
The most usual way to start is with one argument, specifying an executable program:
program
You can also start with both an executable program and a core file specified:
program core
You can, instead, specify a process ID as a second argument, if you want to debug a running process:
program 1234
would attach to process 1234
(unless you also have a file
named `1234'; does check for a core file first).
Taking advantage of the second command-line argument requires a fairly complete operating system; when you use as a remote debugger attached to a bare board, there may not be any notion of "process", and there is often no way to get a core dump. will warn you if it is unable to attach or to read core dumps.
You can run without printing the front material, which describes
's non-warranty, by specifying
-silent
:
-silent
You can further control how starts up by using command-line options. itself can remind you of the options available.
Type
-help
to display all available options and briefly describe their use (` -h' is a shorter equivalent).
All options and command line arguments you give are processed in sequential order. The order makes a difference when the `-x' option is used.
When starts, it reads any arguments other than options as specifying an executable file and core file (or process ID). This is the same as if the arguments were specified by the `-se' and `-c' options respectively. ( reads the first argument that does not have an associated option flag as equivalent to the `-se' option followed by that argument; and the second argument that does not have an associated option flag, if any, as equivalent to the `-c' option followed by that argument.)
If has not been configured to included core file support, such as for most embedded targets, then it will complain about a second argument and ignore it.
Many options have both long and short forms; both are shown in the following list. also recognizes the long forms if you truncate them, so long as enough of the option is present to be unambiguous. (If you prefer, you can flag option arguments with `--' rather than `-', though we illustrate the more usual convention.)
-symbols file
-s file
-exec file
-e file
-se file
-core file
-c file
-c number
attach
command
(unless there is a file in core-dump format named number, in which
case `-c' specifies that file as a core dump to read).
-command file
-x file
-directory directory
-d directory
-m
-mapped
mmap
system call, you can use this option
to have write the symbols from your
program into a reusable file in the current directory. If the program you are debugging is
called `/tmp/fred', the mapped symbol file is `/tmp/fred.syms'.
Future debugging sessions notice the presence of this file,
and can quickly map in symbol information from it, rather than reading
the symbol table from the executable program.
The `.syms' file is specific to the host machine where
is run. It holds an exact image of the internal symbol
table. It cannot be shared across multiple host platforms.
-r
-readnow
You typically combine the -mapped
and -readnow
options in
order to build a `.syms' file that contains complete symbol
information. (See section Commands to specify files, for information
on `.syms' files.) A simple invocation to do nothing
but build a `.syms' file for future use is:
gdb -batch -nx -mapped -readnow programname
You can run in various alternative modes--for example, in batch mode or quiet mode.
-nx
-n
-quiet
-silent
-q
-batch
0
after processing all the
command files specified with `-x' (and all commands from
initialization files, if not inhibited with `-n'). Exit with
nonzero status if an error occurs in executing the commands
in the command files.
Batch mode may be useful for running as a filter, for
example to download and run a program on another computer; in order to
make this more useful, the message
Program exited normally.(which is ordinarily issued whenever a program running under control terminates) is not issued when running in batch mode.
-nowindows
-nw
-windows
-w
-cd directory
-fullname
-f
-epoch
-annotate level
-async
-noasync
-baud bps
-b bps
-tty device
-t device
-tui
-interpreter interp
-write
-statistics
-version
quit [expression]
q
quit
command (abbreviated
q
), or type an end-of-file character (usually C-d). If you
do not supply expression, will terminate normally;
otherwise it will terminate using the result of expression as the
error code.
An interrupt (often C-c) does not exit from , but rather terminates the action of any command that is in progress and returns to command level. It is safe to type the interrupt character at any time because does not allow it to take effect until a time when it is safe.
If you have been using to control an attached process or
device, you can release it with the detach
command
(see section Debugging an already-running process).
If you need to execute occasional shell commands during your
debugging session, there is no need to leave or suspend ; you can
just use the shell
command.
shell command string
SHELL
determines which
shell to run. Otherwise uses the default shell
(`/bin/sh' on Unix systems, `COMMAND.COM' on MS-DOS, etc.).
The utility make
is often needed in development environments.
You do not have to use the shell
command for this purpose in
:
make make-args
make
program with the specified
arguments. This is equivalent to `shell make make-args'.
You can abbreviate a command to the first few letters of the command name, if that abbreviation is unambiguous; and you can repeat certain commands by typing just RET. You can also use the TAB key to get to fill out the rest of a word in a command (or to show you the alternatives available, if there is more than one possibility).
A command is a single line of input. There is no limit on
how long it can be. It starts with a command name, which is followed by
arguments whose meaning depends on the command name. For example, the
command step
accepts an argument which is the number of times to
step, as in `step 5'. You can also use the step
command
with no arguments. Some commands do not allow any arguments.
command names may always be truncated if that abbreviation is
unambiguous. Other possible command abbreviations are listed in the
documentation for individual commands. In some cases, even ambiguous
abbreviations are allowed; for example, s
is specially defined as
equivalent to step
even though there are other commands whose
names start with s
. You can test abbreviations by using them as
arguments to the help
command.
A blank line as input to (typing just RET) means to
repeat the previous command. Certain commands (for example, run
)
will not repeat this way; these are commands whose unintentional
repetition might cause trouble and which you are unlikely to want to
repeat.
The list
and x
commands, when you repeat them with
RET, construct new arguments rather than repeating
exactly as typed. This permits easy scanning of source or memory.
can also use RET in another way: to partition lengthy
output, in a way similar to the common utility more
(see section Screen size). Since it is easy to press one
RET too many in this situation, disables command
repetition after any command that generates this sort of display.
Any text from a # to the end of the line is a comment; it does nothing. This is useful mainly in command files (see section Command files).
can fill in the rest of a word in a command for you, if there is only one possibility; it can also show you what the valid possibilities are for the next word in a command, at any time. This works for commands, subcommands, and the names of symbols in your program.
Press the TAB key whenever you want to fill out the rest of a word. If there is only one possibility, fills in the word, and waits for you to finish the command (or press RET to enter it). For example, if you type
() info bre TAB
fills in the rest of the word `breakpoints', since that is
the only info
subcommand beginning with `bre':
() info breakpoints
You can either press RET at this point, to run the info
breakpoints
command, or backspace and enter something else, if
`breakpoints' does not look like the command you expected. (If you
were sure you wanted info breakpoints
in the first place, you
might as well just type RET immediately after `info bre',
to exploit command abbreviations rather than command completion).
If there is more than one possibility for the next word when you press TAB, sounds a bell. You can either supply more characters and try again, or just press TAB a second time; displays all the possible completions for that word. For example, you might want to set a breakpoint on a subroutine whose name begins with `make_', but when you type b make_TAB just sounds the bell. Typing TAB again displays all the function names in your program that begin with those characters, for example:
() b make_ TAB sounds bell; press TAB again, to see: make_a_section_from_file make_environ make_abs_section make_function_type make_blockvector make_pointer_type make_cleanup make_reference_type make_command make_symbol_completion_list () b make_
After displaying the available possibilities, copies your partial input (`b make_' in the example) so you can finish the command.
If you just want to see the list of alternatives in the first place, you can press M-? rather than pressing TAB twice. M-? means META ?. You can type this either by holding down a key designated as the META shift on your keyboard (if there is one) while typing ?, or as ESC followed by ?.
Sometimes the string you need, while logically a "word", may contain
parentheses or other characters that normally excludes from
its notion of a word. To permit word completion to work in this
situation, you may enclose words in '
(single quote marks) in
commands.
The most likely situation where you might need this is in typing the
name of a C++ function. This is because C++ allows function
overloading (multiple definitions of the same function, distinguished
by argument type). For example, when you want to set a breakpoint you
may need to distinguish whether you mean the version of name
that takes an int
parameter, name(int)
, or the version
that takes a float
parameter, name(float)
. To use the
word-completion facilities in this situation, type a single quote
'
at the beginning of the function name. This alerts
that it may need to consider more information than usual
when you press TAB or M-? to request word completion:
() b 'bubble( M-? bubble(double,double) bubble(int,int) () b 'bubble(
In some cases, can tell that completing a name requires using quotes. When this happens, inserts the quote for you (while completing as much as it can) if you do not type the quote in the first place:
() b bub TAB alters your input line to the following, and rings a bell: () b 'bubble(
In general, can tell that a quote is needed (and inserts it) if you have not yet started typing the argument list when you ask for completion on an overloaded symbol.
For more information about overloaded functions, see section C++ expressions. You can use the command set
overload-resolution off
to disable overload resolution;
see section features for C++.
You can always ask itself for information on its commands,
using the command help
.
help
h
help
(abbreviated h
) with no arguments to
display a short list of named classes of commands:
() help List of classes of commands: aliases -- Aliases of other commands breakpoints -- Making program stop at certain points data -- Examining data files -- Specifying and examining files internals -- Maintenance commands obscure -- Obscure features running -- Running the program stack -- Examining the stack status -- Status inquiries support -- Support facilities tracepoints -- Tracing of program execution without
stopping the program user-defined -- User-defined commands Type "help" followed by a class name for a list of commands in that class. Type "help" followed by command name for full documentation. Command name abbreviations are allowed if unambiguous. ()
help class
status
:
() help status Status inquiries. List of commands: info -- Generic command for showing things about the program being debugged show -- Generic command for showing things about the debugger Type "help" followed by command name for full documentation. Command name abbreviations are allowed if unambiguous. ()
help command
help
argument, displays a
short paragraph on how to use that command.
apropos args
apropos args
command searches through all of the
commands, and their documentation, for the regular expression specified in
args. It prints out all matches found. For example:
apropos reloadresults in:
set symbol-reloading -- Set dynamic symbol table reloading multiple times in one run show symbol-reloading -- Show dynamic symbol table reloading multiple times in one run
complete args
complete args
command lists all the possible completions
for the beginning of a command. Use args to specify the beginning of the
command you want completed. For example:
complete iresults in:
if ignore info inspectThis is intended for use by GNU Emacs.
In addition to help
, you can use the commands info
and show
to inquire about the state of your program, or the state
of itself. Each command supports many topics of inquiry; this
manual introduces each of them in the appropriate context. The listings
under info
and under show
in the Index point to
all the sub-commands. See section Index.
info
i
) is for describing the state of your
program. For example, you can list the arguments given to your program
with info args
, list the registers currently in use with info
registers
, or list the breakpoints you have set with info breakpoints
.
You can get a complete list of the info
sub-commands with
help info
.
set
set
. For example, you can set the prompt to a $-sign with
set prompt $
.
show
info
, show
is for describing the state of
itself.
You can change most of the things you can show
, by using the
related command set
; for example, you can control what number
system is used for displays with set radix
, or simply inquire
which is currently in use with show radix
.
To display all the settable parameters and their current
values, you can use show
with no arguments; you may also use
info set
. Both commands produce the same display.
Here are three miscellaneous show
subcommands, all of which are
exceptional in lacking corresponding set
commands:
show version
show copying
show warranty
When you run a program under , you must first generate debugging information when you compile it.
You may start with its arguments, if any, in an environment of your choice. If you are doing native debugging, you may redirect your program's input and output, debug an already running process, or kill a child process.
In order to debug a program effectively, you need to generate debugging information when you compile it. This debugging information is stored in the object file; it describes the data type of each variable or function and the correspondence between source line numbers and addresses in the executable code.
To request debugging information, specify the `-g' option when you run the compiler.
Many C compilers are unable to handle the `-g' and `-O' options together. Using those compilers, you cannot generate optimized executables containing debugging information.
, the GNU C compiler, supports `-g' with or without `-O', making it possible to debug optimized code. We recommend that you always use `-g' whenever you compile a program. You may think your program is correct, but there is no sense in pushing your luck.
When you debug a program compiled with `-g -O', remember that the optimizer is rearranging your code; the debugger shows you what is really there. Do not be too surprised when the execution path does not exactly match your source file! An extreme example: if you define a variable, but never use it, never sees that variable--because the compiler optimizes it out of existence.
Some things do not work as well with `-g -O' as with just `-g', particularly on machines with instruction scheduling. If in doubt, recompile with `-g' alone, and if this fixes the problem, please report it to us as a bug (including a test case!).
Older versions of the GNU C compiler permitted a variant option `-gg' for debugging information. no longer supports this format; if your GNU C compiler has this option, do not use it.
run
r
run
command to start your program under .
You must first specify the program name (except on VxWorks) with an
argument to (see section Getting In and Out of), or by using the file
or exec-file
command
(see section Commands to specify files).
If you are running your program in an execution environment that
supports processes, run
creates an inferior process and makes
that process run your program. (In environments without processes,
run
jumps to the start of your program.)
The execution of a program is affected by certain information it receives from its superior. provides ways to specify this information, which you must do before starting your program. (You can change it after starting your program, but such changes only affect your program the next time you start it.) This information may be divided into four categories:
run
command. If a shell is available on your target, the shell
is used to pass the arguments, so that you may use normal conventions
(such as wildcard expansion or variable substitution) in describing
the arguments.
In Unix systems, you can control which shell is used with the
SHELL
environment variable.
See section Your program's arguments.
set environment
and unset
environment
to change parts of the environment that affect
your program. See section Your program's environment.
cd
command in .
See section Your program's working directory.
run
command line, or you can use the tty
command to
set a different device for your program.
See section Your program's input and output.
Warning: While input and output redirection work, you cannot use
pipes to pass the output of the program you are debugging to another
program; if you attempt this, is likely to wind up debugging the
wrong program.
When you issue the run
command, your program begins to execute
immediately. See section Stopping and Continuing, for discussion
of how to arrange for your program to stop. Once your program has
stopped, you may call functions in your program, using the print
or call
commands. See section Examining Data.
If the modification time of your symbol file has changed since the last time read its symbols, discards its symbol table, and reads it again. When it does this, tries to retain your current breakpoints.
The arguments to your program can be specified by the arguments of the
run
command.
They are passed to a shell, which expands wildcard characters and
performs redirection of I/O, and thence to your program. Your
SHELL
environment variable (if it exists) specifies what shell
uses. If you do not define SHELL
, uses
the default shell (`/bin/sh' on Unix).
On non-Unix systems, the program is usually invoked directly by , which emulates I/O redirection via the appropriate system calls, and the wildcard characters are expanded by the startup code of the program, not by the shell.
run
with no arguments uses the same arguments used by the previous
run
, or those set by the set args
command.
set args
set args
has no arguments, run
executes your program
with no arguments. Once you have run your program with arguments,
using set args
before the next run
is the only way to run
it again without arguments.
show args
The environment consists of a set of environment variables and their values. Environment variables conventionally record such things as your user name, your home directory, your terminal type, and your search path for programs to run. Usually you set up environment variables with the shell and they are inherited by all the other programs you run. When debugging, it can be useful to try running your program with a modified environment without having to start over again.
path directory
PATH
environment variable
(the search path for executables) that will be passed to your program.
The value of PATH
used by does not change.
You may specify several directory names, separated by whitespace or by a
system-dependent separator character (`:' on Unix, `;' on
MS-DOS and MS-Windows). If directory is already in the path, it
is moved to the front, so it is searched sooner.
You can use the string `$cwd' to refer to whatever is the current
working directory at the time searches the path. If you
use `.' instead, it refers to the directory where you executed the
path
command. replaces `.' in the
directory argument (with the current path) before adding
directory to the search path.
show paths
PATH
environment variable).
show environment [varname]
environment
as env
.
set environment varname [=value]
set env USER = footells the debugged program, when subsequently run, that its user is named `foo'. (The spaces around `=' are used for clarity here; they are not actually required.)
unset environment varname
unset environment
removes the variable from the environment,
rather than assigning it an empty value.
Warning: On Unix systems, runs your program using
the shell indicated
by your SHELL
environment variable if it exists (or
/bin/sh
if not). If your SHELL
variable names a shell
that runs an initialization file--such as `.cshrc' for C-shell, or
`.bashrc' for BASH--any variables you set in that file affect
your program. You may wish to move setting of environment variables to
files that are only run when you sign on, such as `.login' or
`.profile'.
Each time you start your program with run
, it inherits its
working directory from the current working directory of .
The working directory is initially whatever it inherited
from its parent process (typically the shell), but you can specify a new
working directory in with the cd
command.
The working directory also serves as a default for the commands that specify files for to operate on. See section Commands to specify files.
cd directory
pwd
By default, the program you run under does input and output to the same terminal that uses. switches the terminal to its own terminal modes to interact with you, but it records the terminal modes your program was using and switches back to them when you continue running your program.
info terminal
You can redirect your program's input and/or output using shell
redirection with the run
command. For example,
run > outfile
starts your program, diverting its output to the file `outfile'.
Another way to specify where your program should do input and output is
with the tty
command. This command accepts a file name as
argument, and causes this file to be the default for future run
commands. It also resets the controlling terminal for the child
process, for future run
commands. For example,
tty /dev/ttyb
directs that processes started with subsequent run
commands
default to do input and output on the terminal `/dev/ttyb' and have
that as their controlling terminal.
An explicit redirection in run
overrides the tty
command's
effect on the input/output device, but not its effect on the controlling
terminal.
When you use the tty
command or redirect input in the run
command, only the input for your program is affected. The input
for still comes from your terminal.
attach process-id
info files
shows your active
targets.) The command takes as argument a process ID. The usual way to
find out the process-id of a Unix process is with the ps
utility,
or with the `jobs -l' shell command.
attach
does not repeat if you press RET a second time after
executing the command.
To use attach
, your program must be running in an environment
which supports processes; for example, attach
does not work for
programs on bare-board targets that lack an operating system. You must
also have permission to send the process a signal.
When you use attach
, the debugger finds the program running in
the process first by looking in the current working directory, then (if
the program is not found) by using the source file search path
(see section Specifying source directories). You can also use
the file
command to load the program. See section Commands to specify files.
The first thing does after arranging to debug the specified
process is to stop it. You can examine and modify an attached process
with all the commands that are ordinarily available when
you start processes with run
. You can insert breakpoints; you
can step and continue; you can modify storage. If you would rather the
process continue running, you may use the continue
command after
attaching to the process.
detach
detach
command to release it from control. Detaching
the process continues its execution. After the detach
command,
that process and become completely independent once more, and you
are ready to attach
another process or start one with run
.
detach
does not repeat if you press RET again after
executing the command.
If you exit or use the run
command while you have an
attached process, you kill that process. By default, asks
for confirmation if you try to do either of these things; you can
control whether or not you need to confirm by using the set
confirm
command (see section Optional warnings and messages).
kill
This command is useful if you wish to debug a core dump instead of a running process. ignores any core dump file while your program is running.
On some operating systems, a program cannot be executed outside
while you have breakpoints set on it inside . You can use the
kill
command in this situation to permit running your program
outside the debugger.
The kill
command is also useful if you wish to recompile and
relink your program, since on many systems it is impossible to modify an
executable file while it is running in a process. In this case, when you
next type run
, notices that the file has changed, and
reads the symbol table again (while trying to preserve your current
breakpoint settings).
In some operating systems, such as HP-UX and Solaris, a single program may have more than one thread of execution. The precise semantics of threads differ from one operating system to another, but in general the threads of a single program are akin to multiple processes--except that they share one address space (that is, they can all examine and modify the same variables). On the other hand, each thread has its own registers and execution stack, and perhaps private memory.
provides these facilities for debugging multi-thread programs:
Warning: These facilities are not yet available on every configuration where the operating system supports threads. If your does not support threads, these commands have no effect. For example, a system without thread support shows no output from `info threads', and always rejects the
thread
command, like this:() info threads () thread 1 Thread ID 1 not known. Use the "info threads" command to see the IDs of currently known threads.
The thread debugging facility allows you to observe all threads while your program runs--but whenever takes control, one thread in particular is always the focus of debugging. This thread is called the current thread. Debugging commands show program information from the perspective of the current thread.
Whenever detects a new thread in your program, it displays the target system's identification for the thread with a message in the form `[New systag]'. systag is a thread identifier whose form varies depending on the particular system. For example, on LynxOS, you might see
[New process 35 thread 27]
when notices a new thread. In contrast, on an SGI system, the systag is simply something like `process 368', with no further qualifier.
For debugging purposes, associates its own thread number--always a single integer--with each thread in your program.
info threads
() info threads 3 process 35 thread 27 0x34e5 in sigpause () 2 process 35 thread 23 0x34e5 in sigpause () * 1 process 35 thread 13 main (argc=1, argv=0x7ffffff8) at threadtest.c:68
On HP-UX systems:
For debugging purposes, associates its own thread number--a small integer assigned in thread-creation order--with each thread in your program.
Whenever detects a new thread in your program, it displays both 's thread number and the target system's identification for the thread with a message in the form `[New systag]'. systag is a thread identifier whose form varies depending on the particular system. For example, on HP-UX, you see
[New thread 2 (system thread 26594)]
when notices a new thread.
info threads
() info threads * 3 system thread 26607 worker (wptr=0x7b09c318 "@") \
at quicksort.c:137 2 system thread 26606 0x7b0030d8 in __ksleep () \
from /usr/lib/libc.2 1 system thread 27905 0x7b003498 in _brk () \
from /usr/lib/libc.2
thread threadno
() thread 2 [Switching to process 35 thread 23] 0x34e5 in sigpause ()As with the `[New ...]' message, the form of the text after `Switching to' depends on your system's conventions for identifying threads.
thread apply [threadno] [all] args
thread apply
command allows you to apply a command to one or
more threads. Specify the numbers of the threads that you want affected
with the command argument threadno. threadno is the internal
thread number, as shown in the first field of the `info
threads' display. To apply a command to all threads, use
thread apply all
args.
Whenever stops your program, due to a breakpoint or a signal, it automatically selects the thread where that breakpoint or signal happened. alerts you to the context switch with a message of the form `[Switching to systag]' to identify the thread.
See section Stopping and starting multi-thread programs, for more information about how behaves when you stop and start programs with multiple threads.
See section Setting watchpoints, for information about watchpoints in programs with multiple threads.
On most systems, has no special support for debugging
programs which create additional processes using the fork
function. When a program forks, will continue to debug the
parent process and the child process will run unimpeded. If you have
set a breakpoint in any code which the child then executes, the child
will get a SIGTRAP
signal which (unless it catches the signal)
will cause it to terminate.
However, if you want to debug the child process there is a workaround
which isn't too painful. Put a call to sleep
in the code which
the child process executes after the fork. It may be useful to sleep
only if a certain environment variable is set, or a certain file exists,
so that the delay need not occur when you don't want to run
on the child. While the child is sleeping, use the ps
program to
get its process ID. Then tell (a new invocation of
if you are also debugging the parent process) to attach to
the child process (see section Debugging an already-running process). From that point on you can debug
the child process just like any other process which you attached to.
On HP-UX (11.x and later only?), provides support for
debugging programs that create additional processes using the
fork
or vfork
function.
By default, when a program forks, will continue to debug the parent process and the child process will run unimpeded.
If you want to follow the child process instead of the parent process,
use the command set follow-fork-mode
.
set follow-fork-mode mode
fork
or
vfork
. A call to fork
or vfork
creates a new
process. The mode can be:
parent
child
ask
show follow-fork-mode
fork
or vfork
call.
If you ask to debug a child process and a vfork
is followed by an
exec
, executes the new target up to the first
breakpoint in the new target. If you have a breakpoint set on
main
in your original program, the breakpoint will also be set on
the child process's main
.
When a child process is spawned by vfork
, you cannot debug the
child or parent until an exec
call completes.
If you issue a run
command to after an exec
call executes, the new target restarts. To restart the parent process,
use the file
command with the parent executable name as its
argument.
You can use the catch
command to make stop whenever
a fork
, vfork
, or exec
call is made. See section Setting catchpoints.
The principal purposes of using a debugger are so that you can stop your program before it terminates; or so that, if your program runs into trouble, you can investigate and find out why.
Inside , your program may stop for any of several reasons,
such as a signal, a breakpoint, or reaching a new line after a
command such as step
. You may then examine and
change variables, set new breakpoints or remove old ones, and then
continue execution. Usually, the messages shown by provide
ample explanation of the status of your program--but you can also
explicitly request this information at any time.
info program
A breakpoint makes your program stop whenever a certain point in
the program is reached. For each breakpoint, you can add conditions to
control in finer detail whether your program stops. You can set
breakpoints with the break
command and its variants (see section Setting breakpoints), to specify the place where your program
should stop by line number, function name or exact address in the
program.
In HP-UX, SunOS 4.x, SVR4, and Alpha OSF/1 configurations, you can set
breakpoints in shared libraries before the executable is run. There is
a minor limitation on HP-UX systems: you must wait until the executable
is run in order to set breakpoints in shared library routines that are
not called directly by the program (for example, routines that are
arguments in a pthread_create
call).
A watchpoint is a special breakpoint that stops your program when the value of an expression changes. You must use a different command to set watchpoints (see section Setting watchpoints), but aside from that, you can manage a watchpoint like any other breakpoint: you enable, disable, and delete both breakpoints and watchpoints using the same commands.
You can arrange to have values from your program displayed automatically whenever stops at a breakpoint. See section Automatic display.
A catchpoint is another special breakpoint that stops your program
when a certain kind of event occurs, such as the throwing of a C++
exception or the loading of a library. As with watchpoints, you use a
different command to set a catchpoint (see section Setting catchpoints), but aside from that, you can manage a catchpoint like any
other breakpoint. (To stop when your program receives a signal, use the
handle
command; see section Signals.)
assigns a number to each breakpoint, watchpoint, or catchpoint when you create it; these numbers are successive integers starting with one. In many of the commands for controlling various features of breakpoints you use the breakpoint number to say which breakpoint you want to change. Each breakpoint may be enabled or disabled; if disabled, it has no effect on your program until you enable it again.
Some commands accept a range of breakpoints on which to operate. A breakpoint range is either a single breakpoint number, like `5', or two such numbers, in increasing order, separated by a hyphen, like `5-7'. When a breakpoint range is given to a command, all breakpoint in that range are operated on.
Breakpoints are set with the break
command (abbreviated
b
). The debugger convenience variable `$bpnum' records the
number of the breakpoint you've set most recently; see section Convenience variables, for a discussion of what you can do with
convenience variables.
You have several ways to say where the breakpoint should go.
break function
break +offset
break -offset
break linenum
break filename:linenum
break filename:function
break *address
break
break
sets a breakpoint at
the next instruction to be executed in the selected stack frame
(see section Examining the Stack). In any selected frame but the
innermost, this makes your program stop as soon as control
returns to that frame. This is similar to the effect of a
finish
command in the frame inside the selected frame--except
that finish
does not leave an active breakpoint. If you use
break
without an argument in the innermost frame, stops
the next time it reaches the current location; this may be useful
inside loops.
normally ignores breakpoints when it resumes execution, until at
least one instruction has been executed. If it did not do this, you
would be unable to proceed past a breakpoint without first disabling the
breakpoint. This rule applies whether or not the breakpoint already
existed when your program stopped.
break ... if cond
tbreak args
break
command, and the breakpoint is set in the same
way, but the breakpoint is automatically deleted after the first time your
program stops there. See section Disabling breakpoints.
hbreak args
break
command and the breakpoint is set in the same way, but the
breakpoint requires hardware support and some target hardware may not
have this support. The main purpose of this is EPROM/ROM code
debugging, so you can set a breakpoint at an instruction without
changing the instruction. This can be used with the new trap-generation
provided by SPARClite DSU and some x86-based targets. These targets
will generate traps when a program accesses some data or instruction
address that is assigned to the debug registers. However the hardware
breakpoint registers can take a limited number of breakpoints. For
example, on the DSU, only two data breakpoints can be set at a time, and
will reject this command if more than two are used. Delete
or disable unused hardware breakpoints before setting new ones
(see section Disabling breakpoints). See section Break conditions.
thbreak args
hbreak
command and the breakpoint is set in
the same way. However, like the tbreak
command,
the breakpoint is automatically deleted after the
first time your program stops there. Also, like the hbreak
command, the breakpoint requires hardware support and some target hardware
may not have this support. See section Disabling breakpoints.
See also section Break conditions.
rbreak regex
break
command. You can delete them, disable them, or make
them conditional the same way as any other breakpoint.
The syntax of the regular expression is the standard one used with tools
like `grep'. Note that this is different from the syntax used by
shells, so for instance foo*
matches all functions that include
an fo
followed by zero or more o
s. There is an implicit
.*
leading and trailing the regular expression you supply, so to
match only functions that begin with foo
, use ^foo
.
When debugging C++ programs, rbreak
is useful for setting
breakpoints on overloaded functions that are not members of any special
classes.
info breakpoints [n]
info break [n]
info watchpoints [n]
info break
shows the condition on
the line following the affected breakpoint; breakpoint commands, if any,
are listed after that.
info break
with a breakpoint
number n as argument lists only that breakpoint. The
convenience variable $_
and the default examining-address for
the x
command are set to the address of the last breakpoint
listed (see section Examining memory).
info break
displays a count of the number of times the breakpoint
has been hit. This is especially useful in conjunction with the
ignore
command. You can ignore a large number of breakpoint
hits, look at the breakpoint info to see how many times the breakpoint
was hit, and then run again, ignoring one less than that number. This
will get you quickly to the last hit of that breakpoint.
allows you to set any number of breakpoints at the same place in your program. There is nothing silly or meaningless about this. When the breakpoints are conditional, this is even useful (see section Break conditions).
itself sometimes sets breakpoints in your program for special
purposes, such as proper handling of longjmp
(in C programs).
These internal breakpoints are assigned negative numbers, starting with
-1
; `info breakpoints' does not display them.
You can see these breakpoints with the maintenance command `maint info breakpoints'.
maint info breakpoints
breakpoint
watchpoint
longjmp
longjmp
calls.
longjmp resume
longjmp
.
until
until
command.
finish
finish
command.
shlib events
You can use a watchpoint to stop execution whenever the value of an expression changes, without having to predict a particular place where this may happen.
Depending on your system, watchpoints may be implemented in software or hardware. does software watchpointing by single-stepping your program and testing the variable's value each time, which is hundreds of times slower than normal execution. (But this may still be worth it, to catch errors where you have no clue what part of your program is the culprit.)
On some systems, such as HP-UX, Linux and some other x86-based targets, includes support for hardware watchpoints, which do not slow down the running of your program.
watch expr
rwatch expr
awatch expr
info watchpoints
info break
.
sets a hardware watchpoint if possible. Hardware watchpoints execute very quickly, and the debugger reports a change in value at the exact instruction where the change occurs. If cannot set a hardware watchpoint, it sets a software watchpoint, which executes more slowly and reports the change in value at the next statement, not the instruction, after the change occurs.
When you issue the watch
command, reports
Hardware watchpoint num: expr
if it was able to set a hardware watchpoint.
Currently, the awatch
and rwatch
commands can only set
hardware watchpoints, because accesses to data that don't change the
value of the watched expression cannot be detected without examining
every instruction as it is being executed, and does not do
that currently. If finds that it is unable to set a
hardware breakpoint with the awatch
or rwatch
command, it
will print a message like this:
Expression cannot be implemented with read/access watchpoint.
Sometimes, cannot set a hardware watchpoint because the data type of the watched expression is wider than what a hardware watchpoint on the target machine can handle. For example, some systems can only watch regions that are up to 4 bytes wide; on such systems you cannot set hardware watchpoints for an expression that yields a double-precision floating-point number (which is typically 8 bytes wide). As a work-around, it might be possible to break the large region into a series of smaller ones and watch them with separate watchpoints.
If you set too many hardware watchpoints, might be unable to insert all of them when you resume the execution of your program. Since the precise number of active watchpoints is unknown until such time as the program is about to be resumed, might not be able to warn you about this when you set the watchpoints, and the warning will be printed only when the program is resumed:
Hardware watchpoint num: Could not insert watchpoint
If this happens, delete or disable some of the watchpoints.
The SPARClite DSU will generate traps when a program accesses some data
or instruction address that is assigned to the debug registers. For the
data addresses, DSU facilitates the watch
command. However the
hardware breakpoint registers can only take two data watchpoints, and
both watchpoints must be the same kind. For example, you can set two
watchpoints with watch
commands, two with rwatch
commands,
or two with awatch
commands, but you cannot set one
watchpoint with one command and the other with a different command.
will reject the command if you try to mix watchpoints.
Delete or disable unused watchpoint commands before setting new ones.
If you call a function interactively using print
or call
,
any watchpoints you have set will be inactive until reaches another
kind of breakpoint or the call completes.
automatically deletes watchpoints that watch local
(automatic) variables, or expressions that involve such variables, when
they go out of scope, that is, when the execution leaves the block in
which these variables were defined. In particular, when the program
being debugged terminates, all local variables go out of scope,
and so only watchpoints that watch global variables remain set. If you
rerun the program, you will need to set all such watchpoints again. One
way of doing that would be to set a code breakpoint at the entry to the
main
function and when it breaks, set all the watchpoints.
Warning: In multi-thread programs, watchpoints have only limited usefulness. With the current watchpoint implementation, can only watch the value of an expression in a single thread. If you are confident that the expression can only change due to the current thread's activity (and if you are also confident that no other thread can become current), then you can use watchpoints as usual. However, may not notice when a non-current thread's activity changes the expression.
HP-UX Warning: In multi-thread programs, software watchpoints have only limited usefulness. If creates a software watchpoint, it can only watch the value of an expression in a single thread. If you are confident that the expression can only change due to the current thread's activity (and if you are also confident that no other thread can become current), then you can use software watchpoints as usual. However, may not notice when a non-current thread's activity changes the expression. (Hardware watchpoints, in contrast, watch an expression in all threads.)
You can use catchpoints to cause the debugger to stop for certain
kinds of program events, such as C++ exceptions or the loading of a
shared library. Use the catch
command to set a catchpoint.
catch event
throw
catch
exec
exec
. This is currently only available for HP-UX.
fork
fork
. This is currently only available for HP-UX.
vfork
vfork
. This is currently only available for HP-UX.
load
load libname
unload
unload libname
tcatch event
Use the info break
command to list the current catchpoints.
There are currently some limitations to C++ exception handling
(catch throw
and catch catch
) in :
Sometimes catch
is not the best way to debug exception handling:
if you need to know exactly where an exception is raised, it is better to
stop before the exception handler is called, since that way you
can see the stack before any unwinding takes place. If you set a
breakpoint in an exception handler instead, it may not be easy to find
out where the exception was raised.
To stop just before an exception handler is called, you need some
knowledge of the implementation. In the case of GNU C++, exceptions are
raised by calling a library function named __raise_exception
which has the following ANSI C interface:
/* addr is where the exception identifier is stored. id is the exception identifier. */ void __raise_exception (void **addr, void *id);
To make the debugger catch all exceptions before any stack
unwinding takes place, set a breakpoint on __raise_exception
(see section Breakpoints, watchpoints, and catchpoints).
With a conditional breakpoint (see section Break conditions) that depends on the value of id, you can stop your program when a specific exception is raised. You can use multiple conditional breakpoints to stop your program when any of a number of exceptions are raised.
It is often necessary to eliminate a breakpoint, watchpoint, or catchpoint once it has done its job and you no longer want your program to stop there. This is called deleting the breakpoint. A breakpoint that has been deleted no longer exists; it is forgotten.
With the clear
command you can delete breakpoints according to
where they are in your program. With the delete
command you can
delete individual breakpoints, watchpoints, or catchpoints by specifying
their breakpoint numbers.
It is not necessary to delete a breakpoint to proceed past it. automatically ignores breakpoints on the first instruction to be executed when you continue execution without changing the execution address.
clear
clear function
clear filename:function
clear linenum
clear filename:linenum
delete [breakpoints] [range...]
set
confirm off
). You can abbreviate this command as d
.
Rather than deleting a breakpoint, watchpoint, or catchpoint, you might prefer to disable it. This makes the breakpoint inoperative as if it had been deleted, but remembers the information on the breakpoint so that you can enable it again later.
You disable and enable breakpoints, watchpoints, and catchpoints with
the enable
and disable
commands, optionally specifying one
or more breakpoint numbers as arguments. Use info break
or
info watch
to print a list of breakpoints, watchpoints, and
catchpoints if you do not know which numbers to use.
A breakpoint, watchpoint, or catchpoint can have any of four different states of enablement:
break
command starts out in this state.
tbreak
command starts out in this state.
You can use the following commands to enable or disable breakpoints, watchpoints, and catchpoints:
disable [breakpoints] [range...]
disable
as dis
.
enable [breakpoints] [range...]
enable [breakpoints] once range...
enable [breakpoints] delete range...
Except for a breakpoint set with tbreak
(see section Setting breakpoints), breakpoints that you set are initially enabled;
subsequently, they become disabled or enabled only when you use one of
the commands above. (The command until
can set and delete a
breakpoint of its own, but it does not change the state of your other
breakpoints; see section Continuing and stepping.)
The simplest sort of breakpoint breaks every time your program reaches a specified place. You can also specify a condition for a breakpoint. A condition is just a Boolean expression in your programming language (see section Expressions). A breakpoint with a condition evaluates the expression each time your program reaches it, and your program stops only if the condition is true.
This is the converse of using assertions for program validation; in that situation, you want to stop when the assertion is violated--that is, when the condition is false. In C, if you want to test an assertion expressed by the condition assert, you should set the condition `! assert' on the appropriate breakpoint.
Conditions are also accepted for watchpoints; you may not need them, since a watchpoint is inspecting the value of an expression anyhow--but it might be simpler, say, to just set a watchpoint on a variable name, and specify a condition that tests whether the new value is an interesting one.
Break conditions can have side effects, and may even call functions in your program. This can be useful, for example, to activate functions that log program progress, or to use your own print functions to format special data structures. The effects are completely predictable unless there is another enabled breakpoint at the same address. (In that case, might see the other breakpoint first and stop your program without checking the condition of this one.) Note that breakpoint commands are usually more convenient and flexible than break conditions for the purpose of performing side effects when a breakpoint is reached (see section Breakpoint command lists).
Break conditions can be specified when a breakpoint is set, by using
`if' in the arguments to the break
command. See section Setting breakpoints. They can also be changed at any time
with the condition
command.
You can also use the if
keyword with the watch
command.
The catch
command does not recognize the if
keyword;
condition
is the only way to impose a further condition on a
catchpoint.
condition bnum expression
condition
, checks expression immediately for
syntactic correctness, and to determine whether symbols in it have
referents in the context of your breakpoint. If expression uses
symbols not referenced in the context of the breakpoint,
prints an error message:
No symbol "foo" in current context.does not actually evaluate expression at the time the
condition
command (or a command that sets a breakpoint with a condition, like
break if ...
) is given, however. See section Expressions.
condition bnum
A special case of a breakpoint condition is to stop only when the breakpoint has been reached a certain number of times. This is so useful that there is a special way to do it, using the ignore count of the breakpoint. Every breakpoint has an ignore count, which is an integer. Most of the time, the ignore count is zero, and therefore has no effect. But if your program reaches a breakpoint whose ignore count is positive, then instead of stopping, it just decrements the ignore count by one and continues. As a result, if the ignore count value is n, the breakpoint does not stop the next n times your program reaches it.
ignore bnum count
continue
to resume execution of your program from a
breakpoint, you can specify an ignore count directly as an argument to
continue
, rather than using ignore
. See section Continuing and stepping.
If a breakpoint has a positive ignore count and a condition, the
condition is not checked. Once the ignore count reaches zero,
resumes checking the condition.
You could achieve the effect of the ignore count with a condition such
as `$foo-- <= 0' using a debugger convenience variable that
is decremented each time. See section Convenience variables.
Ignore counts apply to breakpoints, watchpoints, and catchpoints.
You can give any breakpoint (or watchpoint or catchpoint) a series of commands to execute when your program stops due to that breakpoint. For example, you might want to print the values of certain expressions, or enable other breakpoints.
commands [bnum]
... command-list ...
end
end
to terminate the commands.
To remove all commands from a breakpoint, type commands
and
follow it immediately with end
; that is, give no commands.
With no bnum argument, commands
refers to the last
breakpoint, watchpoint, or catchpoint set (not to the breakpoint most
recently encountered).
Pressing RET as a means of repeating the last command is disabled within a command-list.
You can use breakpoint commands to start your program up again. Simply
use the continue
command, or step
, or any other command
that resumes execution.
Any other commands in the command list, after a command that resumes
execution, are ignored. This is because any time you resume execution
(even with a simple next
or step
), you may encounter
another breakpoint--which could have its own command list, leading to
ambiguities about which list to execute.
If the first command you specify in a command list is silent
, the
usual message about stopping at a breakpoint is not printed. This may
be desirable for breakpoints that are to print a specific message and
then continue. If none of the remaining commands print anything, you
see no sign that the breakpoint was reached. silent
is
meaningful only at the beginning of a breakpoint command list.
The commands echo
, output
, and printf
allow you to
print precisely controlled output, and are often useful in silent
breakpoints. See section Commands for controlled output.
For example, here is how you could use breakpoint commands to print the
value of x
at entry to foo
whenever x
is positive.
break foo if x>0 commands silent printf "x is %d\n",x cont end
One application for breakpoint commands is to compensate for one bug so
you can test for another. Put a breakpoint just after the erroneous line
of code, give it a condition to detect the case in which something
erroneous has been done, and give it commands to assign correct values
to any variables that need them. End with the continue
command
so that your program does not stop, and start with the silent
command so that no output is produced. Here is an example:
break 403 commands silent set x = y + 4 cont end
Some programming languages (notably C++) permit a single function name
to be defined several times, for application in different contexts.
This is called overloading. When a function name is overloaded,
`break function' is not enough to tell where you want
a breakpoint. If you realize this is a problem, you can use
something like `break function(types)' to specify which
particular version of the function you want. Otherwise, offers
you a menu of numbered choices for different possible breakpoints, and
waits for your selection with the prompt `>'. The first two
options are always `[0] cancel' and `[1] all'. Typing 1
sets a breakpoint at each definition of function, and typing
0 aborts the break
command without setting any new
breakpoints.
For example, the following session excerpt shows an attempt to set a
breakpoint at the overloaded symbol String::after
.
We choose three particular definitions of that function name:
() b String::after [0] cancel [1] all [2] file:String.cc; line number:867 [3] file:String.cc; line number:860 [4] file:String.cc; line number:875 [5] file:String.cc; line number:853 [6] file:String.cc; line number:846 [7] file:String.cc; line number:735 > 2 4 6 Breakpoint 1 at 0xb26c: file String.cc, line 867. Breakpoint 2 at 0xb344: file String.cc, line 875. Breakpoint 3 at 0xafcc: file String.cc, line 846. Multiple breakpoints were set. Use the "delete" command to delete unwanted breakpoints. ()
Under some operating systems, breakpoints cannot be used in a program if any other process is running that program. In this situation, attempting to run or continue a program with a breakpoint causes to print an error message:
Cannot insert breakpoints. The same program may be running in another process.
When this happens, you have three ways to proceed:
exec-file
command to specify
that should run your program under that name.
Then start your program again.
A similar message can be printed if you request too many active hardware-assisted breakpoints and watchpoints:
Stopped; cannot insert breakpoints. You may have requested too many hardware breakpoints and watchpoints.
This message is printed when you attempt to resume the program, since only then knows exactly how many hardware breakpoints and watchpoints it needs to insert.
When this message is printed, you need to disable or remove some of the hardware-assisted breakpoints and watchpoints, and then continue.
Continuing means resuming program execution until your program
completes normally. In contrast, stepping means executing just
one more "step" of your program, where "step" may mean either one
line of source code, or one machine instruction (depending on what
particular command you use). Either when continuing or when stepping,
your program may stop even sooner, due to a breakpoint or a signal. (If
it stops due to a signal, you may want to use handle
, or use
`signal 0' to resume execution. See section Signals.)
continue [ignore-count]
c [ignore-count]
fg [ignore-count]
ignore
(see section Break conditions).
The argument ignore-count is meaningful only when your program
stopped due to a breakpoint. At other times, the argument to
continue
is ignored.
The synonyms c
and fg
(for foreground, as the
debugged program is deemed to be the foreground program) are provided
purely for convenience, and have exactly the same behavior as
continue
.
To resume execution at a different place, you can use return
(see section Returning from a function) to go back to the
calling function; or jump
(see section Continuing at a different address) to go to an arbitrary location in your program.
A typical technique for using stepping is to set a breakpoint (see section Breakpoints, watchpoints, and catchpoints) at the beginning of the function or the section of your program where a problem is believed to lie, run your program until it stops at that breakpoint, and then step through the suspect area, examining the variables that are interesting, until you see the problem happen.
step
s
.
TheWarning: If you use the
step
command while control is within a function that was compiled without debugging information, execution proceeds until control reaches a function that does have debugging information. Likewise, it will not step into a function which is compiled without debugging information. To step through functions without debugging information, use thestepi
command, described below.
step
command only stops at the first instruction of a source
line. This prevents the multiple stops that could otherwise occur in
switch
statements, for
loops, etc. step
continues
to stop if a function that has debugging information is called within
the line. In other words, step
steps inside any functions
called within the line.
Also, the step
command only enters a function if there is line
number information for the function. Otherwise it acts like the
next
command. This avoids problems when using cc -gl
on MIPS machines. Previously, step
entered subroutines if there
was any debugging information about the routine.
step count
step
, but do so count times. If a
breakpoint is reached, or a signal not related to stepping occurs before
count steps, stepping stops right away.
next [count]
step
, but function calls that appear within
the line of code are executed without stopping. Execution stops when
control reaches a different line of code at the original stack level
that was executing when you gave the next
command. This command
is abbreviated n
.
An argument count is a repeat count, as for step
.
The next
command only stops at the first instruction of a
source line. This prevents multiple stops that could otherwise occur in
switch
statements, for
loops, etc.
set step-mode
set step-mode on
set step-mode on
command causes the step
command to
stop at the first instruction of a function which contains no debug line
information rather than stepping over it.
This is useful in cases where you may be interested in inspecting the
machine instructions of a function which has no symbolic info and do not
want to automatically skip over this function.
set step-mode off
step
command to step over any functions which contains no
debug information. This is the default.
finish
return
command (see section Returning from a function).
until
u
next
command, except that when until
encounters a jump, it
automatically continues execution until the program counter is greater
than the address of the jump.
This means that when you reach the end of a loop after single stepping
though it, until
makes your program continue execution until it
exits the loop. In contrast, a next
command at the end of a loop
simply steps back to the beginning of the loop, which forces you to step
through the next iteration.
until
always stops your program if it attempts to exit the current
stack frame.
until
may produce somewhat counterintuitive results if the order
of machine code does not match the order of the source lines. For
example, in the following excerpt from a debugging session, the f
(frame
) command shows that execution is stopped at line
206
; yet when we use until
, we get to line 195
:
() f #0 main (argc=4, argv=0xf7fffae8) at m4.c:206 206 expand_input(); () until 195 for ( ; argc > 0; NEXTARG) {This happened because, for execution efficiency, the compiler had generated code for the loop closure test at the end, rather than the start, of the loop--even though the test in a C
for
-loop is
written before the body of the loop. The until
command appeared
to step back to the beginning of the loop when it advanced to this
expression; however, it has not really gone to an earlier
statement--not in terms of the actual machine code.
until
with no argument works by means of single
instruction stepping, and hence is slower than until
with an
argument.
until location
u location
break
(see section Setting breakpoints). This form of the command uses breakpoints,
and hence is quicker than until
without an argument.
stepi
stepi arg
si
step
.
nexti
nexti arg
ni
next
.
A signal is an asynchronous event that can happen in a program. The
operating system defines the possible kinds of signals, and gives each
kind a name and a number. For example, in Unix SIGINT
is the
signal a program gets when you type an interrupt character (often C-c);
SIGSEGV
is the signal a program gets from referencing a place in
memory far away from all the areas in use; SIGALRM
occurs when
the alarm clock timer goes off (which happens only if your program has
requested an alarm).
Some signals, including SIGALRM
, are a normal part of the
functioning of your program. Others, such as SIGSEGV
, indicate
errors; these signals are fatal (they kill your program immediately) if the
program has not specified in advance some other way to handle the signal.
SIGINT
does not indicate an error in your program, but it is normally
fatal so it can carry out the purpose of the interrupt: to kill the program.
has the ability to detect any occurrence of a signal in your program. You can tell in advance what to do for each kind of signal.
Normally, is set up to let the non-erroneous signals like
SIGALRM
be silently passed to your program
(so as not to interfere with their role in the program's functioning)
but to stop your program immediately whenever an error signal happens.
You can change these settings with the handle
command.
info signals
info handle
info handle
is an alias for info signals
.
handle signal keywords...
The keywords allowed by the handle
command can be abbreviated.
Their full names are:
nostop
stop
print
keyword as well.
print
noprint
nostop
keyword as well.
pass
noignore
pass
and noignore
are synonyms.
nopass
ignore
nopass
and ignore
are synonyms.
When a signal stops your program, the signal is not visible to the
program until you
continue. Your program sees the signal then, if pass
is in
effect for the signal in question at that time. In other words,
after reports a signal, you can use the handle
command with pass
or nopass
to control whether your
program sees that signal when you continue.
The default is set to nostop
, noprint
, pass
for
non-erroneous signals such as SIGALRM
, SIGWINCH
and
SIGCHLD
, and to stop
, print
, pass
for the
erroneous signals.
You can also use the signal
command to prevent your program from
seeing a signal, or cause it to see a signal it normally would not see,
or to give it any signal at any time. For example, if your program stopped
due to some sort of memory reference error, you might store correct
values into the erroneous variables and continue, hoping to see more
execution; but your program would probably terminate immediately as
a result of the fatal signal once it saw the signal. To prevent this,
you can continue with `signal 0'. See section Giving your program a signal.
When your program has multiple threads (see section Debugging programs with multiple threads), you can choose whether to set breakpoints on all threads, or on a particular thread.
break linespec thread threadno
break linespec thread threadno if ...
thread
qualifier on conditional breakpoints as
well; in this case, place `thread threadno' before the
breakpoint condition, like this:
() break frik.c:13 thread 28 if bartab > lim
Whenever your program stops under for any reason, all threads of execution stop, not just the current thread. This allows you to examine the overall state of the program, including switching between threads, without worrying that things may change underfoot.
Conversely, whenever you restart the program, all threads start
executing. This is true even when single-stepping with commands
like step
or next
.
In particular, cannot single-step all threads in lockstep. Since thread scheduling is up to your debugging target's operating system (not controlled by ), other threads may execute more than one statement while the current thread completes a single step. Moreover, in general other threads stop in the middle of a statement, rather than at a clean statement boundary, when the program stops.
You might even find your program stopped in another thread after continuing or even single-stepping. This happens whenever some other thread runs into a breakpoint, a signal, or an exception before the first thread completes whatever you requested.
On some OSes, you can lock the OS scheduler and thus allow only a single thread to run.
set scheduler-locking mode
off
, then there is no
locking and any thread may run at any time. If on
, then only the
current thread may run when the inferior is resumed. The step
mode optimizes for single-stepping. It stops other threads from
"seizing the prompt" by preempting the current thread while you are
stepping. Other threads will only rarely (or never) get a chance to run
when you step. They are more likely to run when you `next' over a
function call, and they are completely free to run when you use commands
like `continue', `until', or `finish'. However, unless another
thread hits a breakpoint during its timeslice, they will never steal the
prompt away from the thread that you are debugging.
show scheduler-locking
When your program has stopped, the first thing you need to know is where it stopped and how it got there.
Each time your program performs a function call, information about the call is generated. That information includes the location of the call in your program, the arguments of the call, and the local variables of the function being called. The information is saved in a block of data called a stack frame. The stack frames are allocated in a region of memory called the call stack.
When your program stops, the commands for examining the stack allow you to see all of this information.
One of the stack frames is selected by and many commands refer implicitly to the selected frame. In particular, whenever you ask for the value of a variable in your program, the value is found in the selected frame. There are special commands to select whichever frame you are interested in. See section Selecting a frame.
When your program stops, automatically selects the
currently executing frame and describes it briefly, similar to the
frame
command (see section Information about a frame).
The call stack is divided up into contiguous pieces called stack frames, or frames for short; each frame is the data associated with one call to one function. The frame contains the arguments given to the function, the function's local variables, and the address at which the function is executing.
When your program is started, the stack has only one frame, that of the
function main
. This is called the initial frame or the
outermost frame. Each time a function is called, a new frame is
made. Each time a function returns, the frame for that function invocation
is eliminated. If a function is recursive, there can be many frames for
the same function. The frame for the function in which execution is
actually occurring is called the innermost frame. This is the most
recently created of all the stack frames that still exist.
Inside your program, stack frames are identified by their addresses. A stack frame consists of many bytes, each of which has its own address; each kind of computer has a convention for choosing one byte whose address serves as the address of the frame. Usually this address is kept in a register called the frame pointer register while execution is going on in that frame.
assigns numbers to all existing stack frames, starting with zero for the innermost frame, one for the frame that called it, and so on upward. These numbers do not really exist in your program; they are assigned by to give you a way of designating stack frames in commands.
Some compilers provide a way to compile functions so that they operate without stack frames. (For example, the option
`-fomit-frame-pointer'
generates functions without a frame.) This is occasionally done with heavily used library functions to save the frame setup time. has limited facilities for dealing with these function invocations. If the innermost function invocation has no stack frame, nevertheless regards it as though it had a separate frame, which is numbered zero as usual, allowing correct tracing of the function call chain. However, has no provision for frameless functions elsewhere in the stack.
frame args
frame
command allows you to move from one stack frame to another,
and to print the stack frame you select. args may be either the
address of the frame or the stack frame number. Without an argument,
frame
prints the current stack frame.
select-frame
select-frame
command allows you to move from one stack frame
to another without printing the frame. This is the silent version of
frame
.
A backtrace is a summary of how your program got where it is. It shows one line per frame, for many frames, starting with the currently executing frame (frame zero), followed by its caller (frame one), and on up the stack.
backtrace
bt
backtrace n
bt n
backtrace -n
bt -n
The names where
and info stack
(abbreviated info s
)
are additional aliases for backtrace
.
Each line in the backtrace shows the frame number and the function name.
The program counter value is also shown--unless you use set
print address off
. The backtrace also shows the source file name and
line number, as well as the arguments to the function. The program
counter value is omitted if it is at the beginning of the code for that
line number.
Here is an example of a backtrace. It was made with the command `bt 3', so it shows the innermost three frames.
#0 m4_traceon (obs=0x24eb0, argc=1, argv=0x2b8c8) at builtin.c:993 #1 0x6e38 in expand_macro (sym=0x2b600) at macro.c:242 #2 0x6840 in expand_token (obs=0x0, t=177664, td=0xf7fffb08) at macro.c:71 (More stack frames follow...)
The display for frame zero does not begin with a program counter
value, indicating that your program has stopped at the beginning of the
code for line 993
of builtin.c
.
Most commands for examining the stack and other data in your program work on whichever stack frame is selected at the moment. Here are the commands for selecting a stack frame; all of them finish by printing a brief description of the stack frame just selected.
frame n
f n
main
.
frame addr
f addr
frame
needs two addresses to
select an arbitrary frame: a frame pointer and a stack pointer.
On the MIPS and Alpha architecture, it needs two addresses: a stack
pointer and a program counter.
On the 29k architecture, it needs three addresses: a register stack
pointer, a program counter, and a memory stack pointer.
up n
down n
down
as do
.
All of these commands end by printing two lines of output describing the frame. The first line shows the frame number, the function name, the arguments, and the source file and line number of execution in that frame. The second line shows the text of that source line.
For example:
() up #1 0x22f0 in main (argc=1, argv=0xf7fffbf4, env=0xf7fffbfc) at env.c:10 10 read_input_file (argv[i]);
After such a printout, the list
command with no arguments
prints ten lines centered on the point of execution in the frame.
See section Printing source lines.
up-silently n
down-silently n
up
and down
,
respectively; they differ in that they do their work silently, without
causing display of the new frame. They are intended primarily for use
in command scripts, where the output might be unnecessary and
distracting.
There are several other commands to print information about the selected stack frame.
frame
f
f
. With an
argument, this command is used to select a stack frame.
See section Selecting a frame.
info frame
info f
info frame addr
info f addr
frame
command.
See section Selecting a frame.
info args
info locals
info catch
up
,
down
, or frame
commands); then type info catch
.
See section Setting catchpoints.
can print parts of your program's source, since the debugging information recorded in the program tells what source files were used to build it. When your program stops, spontaneously prints the line where it stopped. Likewise, when you select a stack frame (see section Selecting a frame), prints the line where execution in that frame has stopped. You can print other portions of source files by explicit command.
If you use through its GNU Emacs interface, you may prefer to use Emacs facilities to view source; see section Using under GNU Emacs.
To print lines from a source file, use the list
command
(abbreviated l
). By default, ten lines are printed.
There are several ways to specify what part of the file you want to print.
Here are the forms of the list
command most commonly used:
list linenum
list function
list
list
command, this prints lines following the last lines
printed; however, if the last line printed was a solitary line printed
as part of displaying a stack frame (see section Examining the Stack), this prints lines centered around that line.
list -
By default, prints ten source lines with any of these forms of
the list
command. You can change this using set listsize
:
set listsize count
list
command display count source lines (unless
the list
argument explicitly specifies some other number).
show listsize
list
prints.
Repeating a list
command with RET discards the argument,
so it is equivalent to typing just list
. This is more useful
than listing the same lines again. An exception is made for an
argument of `-'; that argument is preserved in repetition so that
each repetition moves up in the source file.
In general, the list
command expects you to supply zero, one or two
linespecs. Linespecs specify source lines; there are several ways
of writing them, but the effect is always to specify some source line.
Here is a complete description of the possible arguments for list
:
list linespec
list first,last
list ,last
list first,
list +
list -
list
Here are the ways of specifying a single source line--all the kinds of linespec.
number
list
command has two linespecs, this refers to
the same source file as the first linespec.
+offset
list
command that has
two, this specifies the line offset lines down from the
first linespec.
-offset
filename:number
function
filename:function
*address
There are two commands for searching through the current source file for a regular expression.
forward-search regexp
search regexp
fo
.
reverse-search regexp
rev
.
Executable programs sometimes do not record the directories of the source files from which they were compiled, just the names. Even when they do, the directories could be moved between the compilation and your debugging session. has a list of directories to search for source files; this is called the source path. Each time wants a source file, it tries all the directories in the list, in the order they are present in the list, until it finds a file with the desired name. Note that the executable search path is not used for this purpose. Neither is the current working directory, unless it happens to be in the source path.
If cannot find a source file in the source path, and the object program records a directory, tries that directory too. If the source path is empty, and there is no record of the compilation directory, looks in the current directory as a last resort.
Whenever you reset or rearrange the source path, clears out any information it has cached about where source files are found and where each line is in the file.
When you start , its source path includes only `cdir'
and `cwd', in that order.
To add other directories, use the directory
command.
directory dirname ...
dir dirname ...
directory
show directories
If your source path is cluttered with directories that are no longer of interest, may sometimes cause confusion by finding the wrong versions of source. You can correct the situation as follows:
directory
with no argument to reset the source path to empty.
directory
with suitable arguments to reinstall the
directories you want in the source path. You can add all the
directories in one command.
You can use the command info line
to map source lines to program
addresses (and vice versa), and the command disassemble
to display
a range of addresses as machine instructions. When run under GNU Emacs
mode, the info line
command causes the arrow to point to the
line specified. Also, info line
prints addresses in symbolic form as
well as hex.
info line linespec
list
command (see section Printing source lines).
For example, we can use info line
to discover the location of
the object code for the first line of function
m4_changequote
:
() info line m4_changequote Line 895 of "builtin.c" starts at pc 0x634c and ends at 0x6350.
We can also inquire (using *addr
as the form for
linespec) what source line covers a particular address:
() info line *0x63ff Line 926 of "builtin.c" starts at pc 0x63e4 and ends at 0x6404.
After info line
, the default address for the x
command
is changed to the starting address of the line, so that `x/i' is
sufficient to begin examining the machine code (see section Examining memory). Also, this address is saved as the value of the
convenience variable $_
(see section Convenience variables).
disassemble
The following example shows the disassembly of a range of addresses of HP PA-RISC 2.0 code:
() disas 0x32c4 0x32e4 Dump of assembler code from 0x32c4 to 0x32e4: 0x32c4 <main+204>: addil 0,dp 0x32c8 <main+208>: ldw 0x22c(sr0,r1),r26 0x32cc <main+212>: ldil 0x3000,r31 0x32d0 <main+216>: ble 0x3f8(sr4,r31) 0x32d4 <main+220>: ldo 0(r31),rp 0x32d8 <main+224>: addil -0x800,dp 0x32dc <main+228>: ldo 0x588(r1),r26 0x32e0 <main+232>: ldil 0x3000,r31 End of assembler dump.
Some architectures have more than one commonly-used set of instruction mnemonics or other syntax.
set disassembly-flavor instruction-set
disassemble
or x/i
commands.
Currently this command is only defined for the Intel x86 family. You
can set instruction-set to either intel
or att
.
The default is att
, the AT&T flavor used by default by Unix
assemblers for x86-based targets.
The usual way to examine data in your program is with the print
command (abbreviated p
), or its synonym inspect
. It
evaluates and prints the value of an expression of the language your
program is written in (see section Using with Different Languages).
print expr
print /f expr
print
print /f
A more low-level way of examining data is with the x
command.
It examines data in memory at a specified address and prints it in a
specified format. See section Examining memory.
If you are interested in information about types, or about how the
fields of a struct or a class are declared, use the ptype exp
command rather than print
. See section Examining the Symbol Table.
print
and many other commands accept an expression and
compute its value. Any kind of constant, variable or operator defined
by the programming language you are using is valid in an expression in
. This includes conditional expressions, function calls, casts
and string constants. It unfortunately does not include symbols defined
by preprocessor #define
commands.
supports array constants in expressions input by
the user. The syntax is {element, element...}. For example,
you can use the command print {1, 2, 3}
to build up an array in
memory that is malloc
ed in the target program.
Because C is so widespread, most of the expressions shown in examples in this manual are in C. See section Using with Different Languages, for information on how to use expressions in other languages.
In this section, we discuss operators that you can use in expressions regardless of your programming language.
Casts are supported in all languages, not just in C, because it is so useful to cast a number into a pointer in order to examine a structure at that address in memory.
supports these operators, in addition to those common to programming languages:
@
::
{type} addr
The most common kind of expression to use is the name of a variable in your program.
Variables in expressions are understood in the selected stack frame (see section Selecting a frame); they must be either:
or
This means that in the function
foo (a) int a; { bar (a); { int b = test (); bar (b); } }
you can examine and use the variable a
whenever your program is
executing within the function foo
, but you can only use or
examine the variable b
while your program is executing inside
the block where b
is declared.
There is an exception: you can refer to a variable or function whose scope is a single source file even if the current execution point is not in this file. But it is possible to have more than one such variable or function with the same name (in different source files). If that happens, referring to that name has unpredictable effects. If you wish, you can specify a static variable in a particular function or file, using the colon-colon notation:
file::variable function::variable
Here file or function is the name of the context for the
static variable. In the case of file names, you can use quotes to
make sure parses the file name as a single word--for example,
to print a global value of x
defined in `f2.c':
() p 'f2.c'::x
This use of `::' is very rarely in conflict with the very similar use of the same notation in C++. also supports use of the C++ scope resolution operator in expressions.
Warning: Occasionally, a local variable may appear to have the wrong value at certain points in a function--just after entry to a new scope, and just before exit.
You may see this problem when you are stepping by machine instructions. This is because, on most machines, it takes more than one instruction to set up a stack frame (including local variable definitions); if you are stepping by machine instructions, variables may appear to have the wrong values until the stack frame is completely built. On exit, it usually also takes more than one machine instruction to destroy a stack frame; after you begin stepping through that group of instructions, local variable definitions may be gone.
This may also happen when the compiler does significant optimizations. To be sure of always seeing accurate values, turn off all optimization when compiling.
Another possible effect of compiler optimizations is to optimize unused variables out of existence, or assign variables to registers (as opposed to memory addresses). Depending on the support for such cases offered by the debug info format used by the compiler, might not be able to display values for such local variables. If that happens, will print a message like this:
No symbol "foo" in current context.
To solve such problems, either recompile without optimizations, or use a different debug info format, if the compiler supports several such formats. For example, , the GNU C/C++ compiler usually supports the `-gstabs' option. `-gstabs' produces debug info in a format that is superior to formats such as COFF. You may be able to use DWARF2 (`-gdwarf-2'), which is also an effective form for debug info. See section `Options for Debugging Your Program or GNU CC' in Using GNU CC, for more information.
It is often useful to print out several successive objects of the same type in memory; a section of an array, or an array of dynamically determined size for which only a pointer exists in the program.
You can do this by referring to a contiguous span of memory as an artificial array, using the binary operator `@'. The left operand of `@' should be the first element of the desired array and be an individual object. The right operand should be the desired length of the array. The result is an array value whose elements are all of the type of the left argument. The first element is actually the left argument; the second element comes from bytes of memory immediately following those that hold the first element, and so on. Here is an example. If a program says
int *array = (int *) malloc (len * sizeof (int));
you can print the contents of array
with
p *array@len
The left operand of `@' must reside in memory. Array values made with `@' in this way behave just like other arrays in terms of subscripting, and are coerced to pointers when used in expressions. Artificial arrays most often appear in expressions via the value history (see section Value history), after printing one out.
Another way to create an artificial array is to use a cast. This re-interprets a value as if it were an array. The value need not be in memory:
() p/x (short[2])0x12345678 $1 = {0x1234, 0x5678}
As a convenience, if you leave the array length out (as in `(type[])value') calculates the size to fill the value (as `sizeof(value)/sizeof(type)':
() p/x (short[])0x12345678 $2 = {0x1234, 0x5678}
Sometimes the artificial array mechanism is not quite enough; in
moderately complex data structures, the elements of interest may not
actually be adjacent--for example, if you are interested in the values
of pointers in an array. One useful work-around in this situation is
to use a convenience variable (see section Convenience variables) as a counter in an expression that prints the first
interesting value, and then repeat that expression via RET. For
instance, suppose you have an array dtab
of pointers to
structures, and you are interested in the values of a field fv
in each structure. Here is an example of what you might type:
set $i = 0 p dtab[$i++]->fv RET RET ...
By default, prints a value according to its data type. Sometimes this is not what you want. For example, you might want to print a number in hex, or a pointer in decimal. Or you might want to view data in memory at a certain address as a character string or as an instruction. To do these things, specify an output format when you print a value.
The simplest use of output formats is to say how to print a value
already computed. This is done by starting the arguments of the
print
command with a slash and a format letter. The format
letters supported are:
x
d
u
o
t
a
() p/a 0x54320 $3 = 0x54320 <_initialize_vx+396>The command
info symbol 0x54320
yields similar results.
See section Examining the Symbol Table.
c
f
For example, to print the program counter in hex (see section Registers), type
p/x $pc
Note that no space is required before the slash; this is because command names in cannot contain a slash.
To reprint the last value in the value history with a different format,
you can use the print
command with just a format and no
expression. For example, `p/x' reprints the last value in hex.
You can use the command x
(for "examine") to examine memory in
any of several formats, independently of your program's data types.
x/nfu addr
x addr
x
x
command to examine memory.
n, f, and u are all optional parameters that specify how much memory to display and how to format it; addr is an expression giving the address where you want to start displaying memory. If you use defaults for nfu, you need not type the slash `/'. Several commands set convenient defaults for addr.
print
,
`s' (null-terminated string), or `i' (machine instruction).
The default is `x' (hexadecimal) initially.
The default changes each time you use either x
or print
.
b
h
w
g
x
, that size becomes the
default unit the next time you use x
. (For the `s' and
`i' formats, the unit size is ignored and is normally not written.)
info breakpoints
(to
the address of the last breakpoint listed), info line
(to the
starting address of a line), and print
(if you use it to display
a value from memory).
For example, `x/3uh 0x54320' is a request to display three halfwords
(h
) of memory, formatted as unsigned decimal integers (`u'),
starting at address 0x54320
. `x/4xw $sp' prints the four
words (`w') of memory above the stack pointer (here, `$sp';
see section Registers) in hexadecimal (`x').
Since the letters indicating unit sizes are all distinct from the letters specifying output formats, you do not have to remember whether unit size or format comes first; either order works. The output specifications `4xw' and `4wx' mean exactly the same thing. (However, the count n must come first; `wx4' does not work.)
Even though the unit size u is ignored for the formats `s'
and `i', you might still want to use a count n; for example,
`3i' specifies that you want to see three machine instructions,
including any operands. The command disassemble
gives an
alternative way of inspecting machine instructions; see section Source and machine code.
All the defaults for the arguments to x
are designed to make it
easy to continue scanning memory with minimal specifications each time
you use x
. For example, after you have inspected three machine
instructions with `x/3i addr', you can inspect the next seven
with just `x/7'. If you use RET to repeat the x
command,
the repeat count n is used again; the other arguments default as
for successive uses of x
.
The addresses and contents printed by the x
command are not saved
in the value history because there is often too much of them and they
would get in the way. Instead, makes these values available for
subsequent use in expressions as values of the convenience variables
$_
and $__
. After an x
command, the last address
examined is available for use in expressions in the convenience variable
$_
. The contents of that address, as examined, are available in
the convenience variable $__
.
If the x
command has a repeat count, the address and contents saved
are from the last memory unit printed; this is not the same as the last
address printed if several units were printed on the last line of output.
If you find that you want to print the value of an expression frequently (to see how it changes), you might want to add it to the automatic display list so that prints its value each time your program stops. Each expression added to the list is given a number to identify it; to remove an expression from the list, you specify that number. The automatic display looks like this:
2: foo = 38 3: bar[5] = (struct hack *) 0x3804
This display shows item numbers, expressions and their current values. As with
displays you request manually using x
or print
, you can
specify the output format you prefer; in fact, display
decides
whether to use print
or x
depending on how elaborate your
format specification is--it uses x
if you specify a unit size,
or one of the two formats (`i' and `s') that are only
supported by x
; otherwise it uses print
.
display expr
display
does not repeat if you press RET again after using it.
display/fmt expr
display/fmt addr
For example, `display/i $pc' can be helpful, to see the machine instruction about to be executed each time execution stops (`$pc' is a common name for the program counter; see section Registers).
undisplay dnums...
delete display dnums...
undisplay
does not repeat if you press RET after using it.
(Otherwise you would just get the error `No display number ...'.)
disable display dnums...
enable display dnums...
display
info display
If a display expression refers to local variables, then it does not make
sense outside the lexical context for which it was set up. Such an
expression is disabled when execution enters a context where one of its
variables is not defined. For example, if you give the command
display last_char
while inside a function with an argument
last_char
, displays this argument while your program
continues to stop inside that function. When it stops elsewhere--where
there is no variable last_char
---the display is disabled
automatically. The next time your program stops where last_char
is meaningful, you can enable the display expression once again.
provides the following ways to control how arrays, structures, and symbols are printed.
These settings are useful for debugging programs in any language:
set print address
set print address on
on
. For example, this is what a stack frame display looks like with
set print address on
:
() f #0 set_quotes (lq=0x34c78 "<<", rq=0x34c88 ">>") at input.c:530 530 if (lquote != def_lquote)
set print address off
set print address off
:
() set print addr off () f #0 set_quotes (lq="<<", rq=">>") at input.c:530 530 if (lquote != def_lquote)You can use `set print address off' to eliminate all machine dependent displays from the interface. For example, with
print address off
, you should get the same text for backtraces on
all machines--whether or not they involve pointer arguments.
show print address
When prints a symbolic address, it normally prints the
closest earlier symbol plus an offset. If that symbol does not uniquely
identify the address (for example, it is a name whose scope is a single
source file), you may need to clarify. One way to do this is with
info line
, for example `info line *0x4537'. Alternately,
you can set to print the source file and line number when
it prints a symbolic address:
set print symbol-filename on
set print symbol-filename off
show print symbol-filename
Another situation where it is helpful to show symbol filenames and line numbers is when disassembling code; shows you the line number and source file that corresponds to each instruction.
Also, you may wish to see the symbolic form only if the address being printed is reasonably close to the closest earlier symbol:
set print max-symbolic-offset max-offset
show print max-symbolic-offset
If you have a pointer and you are not sure where it points, try
`set print symbol-filename on'. Then you can determine the name
and source file location of the variable where it points, using
`p/a pointer'. This interprets the address in symbolic form.
For example, here shows that a variable ptt
points
at another variable t
, defined in `hi2.c':
() set print symbol-filename on () p/a ptt $4 = 0xe008 <t in hi2.c>
Warning: For pointers that point to a local variable, `p/a' does not show the symbol name and filename of the referent, even with the appropriate
set print
options turned on.
Other settings control how different kinds of objects are printed:
set print array
set print array on
set print array off
show print array
set print elements number-of-elements
set print elements
command.
This limit also applies to the display of strings.
When starts, this limit is set to 200.
Setting number-of-elements to zero means that the printing is unlimited.
show print elements
set print null-stop
set print pretty on
$1 = { next = 0x0, flags = { sweet = 1, sour = 1 }, meat = 0x54 "Pork" }
set print pretty off
$1 = {next = 0x0, flags = {sweet = 1, sour = 1}, \ meat = 0x54 "Pork"}This is the default format.
show print pretty
set print sevenbit-strings on
\
nnn. This setting is
best if you are working in English (ASCII) and you use the
high-order bit of characters as a marker or "meta" bit.
set print sevenbit-strings off
show print sevenbit-strings
set print union on
set print union off
show print union
typedef enum {Tree, Bug} Species; typedef enum {Big_tree, Acorn, Seedling} Tree_forms; typedef enum {Caterpillar, Cocoon, Butterfly} Bug_forms; struct thing { Species it; union { Tree_forms tree; Bug_forms bug; } form; }; struct thing foo = {Tree, {Acorn}};with
set print union on
in effect `p foo' would print
$1 = {it = Tree, form = {tree = Acorn, bug = Cocoon}}and with
set print union off
in effect it would print
$1 = {it = Tree, form = {...}}
These settings are of interest when debugging C++ programs:
set print demangle
set print demangle on
show print demangle
set print asm-demangle
set print asm-demangle on
show print asm-demangle
set demangle-style style
auto
gnu
g++
) encoding algorithm.
This is the default.
hp
aCC
) encoding algorithm.
lucid
lcc
) encoding algorithm.
arm
cfront
-generated executables. would
require further enhancement to permit that.
show demangle-style
set print object
set print object on
set print object off
show print object
set print static-members
set print static-members on
set print static-members off
show print static-members
set print vtbl
set print vtbl on
vtbl
commands do not work on programs compiled with the HP
ANSI C++ compiler (aCC
).)
set print vtbl off
show print vtbl
Values printed by the print
command are saved in the
value history. This allows you to refer to them in other expressions.
Values are kept until the symbol table is re-read or discarded
(for example with the file
or symbol-file
commands).
When the symbol table changes, the value history is discarded,
since the values may contain pointers back to the types defined in the
symbol table.
The values printed are given history numbers by which you can
refer to them. These are successive integers starting with one.
print
shows you the history number assigned to a value by
printing `$num = ' before the value; here num is the
history number.
To refer to any previous value, use `$' followed by the value's
history number. The way print
labels its output is designed to
remind you of this. Just $
refers to the most recent value in
the history, and $$
refers to the value before that.
$$n
refers to the nth value from the end; $$2
is the value just prior to $$
, $$1
is equivalent to
$$
, and $$0
is equivalent to $
.
For example, suppose you have just printed a pointer to a structure and want to see the contents of the structure. It suffices to type
p *$
If you have a chain of structures where the component next
points
to the next one, you can print the contents of the next one with this:
p *$.next
You can print successive links in the chain by repeating this command--which you can do by just typing RET.
Note that the history records values, not expressions. If the value of
x
is 4 and you type these commands:
print x set x=5
then the value recorded in the value history by the print
command
remains 4 even though the value of x
has changed.
show values
show
values
does not change the history.
show values n
show values +
show values +
produces no display.
Pressing RET to repeat show values n
has exactly the
same effect as `show values +'.
provides convenience variables that you can use within to hold on to a value and refer to it later. These variables exist entirely within ; they are not part of your program, and setting a convenience variable has no direct effect on further execution of your program. That is why you can use them freely.
Convenience variables are prefixed with `$'. Any name preceded by `$' can be used for a convenience variable, unless it is one of the predefined machine-specific register names (see section Registers). (Value history references, in contrast, are numbers preceded by `$'. See section Value history.)
You can save a value in a convenience variable with an assignment expression, just as you would set a variable in your program. For example:
set $foo = *object_ptr
would save in $foo
the value contained in the object pointed to by
object_ptr
.
Using a convenience variable for the first time creates it, but its
value is void
until you assign a new value. You can alter the
value with another assignment at any time.
Convenience variables have no fixed types. You can assign a convenience variable any type of value, including structures and arrays, even if that variable already has a value of a different type. The convenience variable, when used as an expression, has the type of its current value.
show convenience
show conv
.
One of the ways to use a convenience variable is as a counter to be incremented or a pointer to be advanced. For example, to print a field from successive elements of an array of structures:
set $i = 0 print bar[$i++]->contents
Repeat that command by typing RET.
Some convenience variables are created automatically by and given values likely to be useful.
$_
$_
is automatically set by the x
command to
the last address examined (see section Examining memory). Other
commands which provide a default address for x
to examine also
set $_
to that address; these commands include info line
and info breakpoint
. The type of $_
is void *
except when set by the x
command, in which case it is a pointer
to the type of $__
.
$__
$__
is automatically set by the x
command
to the value found in the last address examined. Its type is chosen
to match the format in which the data was printed.
$_exitcode
$_exitcode
is automatically set to the exit code when
the program being debugged terminates.
On HP-UX systems, if you refer to a function or variable name that begins with a dollar sign, searches for a user or system name first, before it searches for a convenience variable.
You can refer to machine register contents, in expressions, as variables
with names starting with `$'. The names of registers are different
for each machine; use info registers
to see the names used on
your machine.
info registers
info all-registers
info registers regname ...
has four "standard" register names that are available (in
expressions) on most machines--whenever they do not conflict with an
architecture's canonical mnemonics for registers. The register names
$pc
and $sp
are used for the program counter register and
the stack pointer. $fp
is used for a register that contains a
pointer to the current stack frame, and $ps
is used for a
register that contains the processor status. For example,
you could print the program counter in hex with
p/x $pc
or print the instruction to be executed next with
x/i $pc
or add four to the stack pointer(3) with
set $sp += 4
Whenever possible, these four standard register names are available on
your machine even though the machine has different canonical mnemonics,
so long as there is no conflict. The info registers
command
shows the canonical names. For example, on the SPARC, info
registers
displays the processor status register as $psr
but you
can also refer to it as $ps
; and on x86-based machines $ps
is an alias for the EFLAGS register.
always considers the contents of an ordinary register as an integer when the register is examined in this way. Some machines have special registers which can hold nothing but floating point; these registers are considered to have floating point values. There is no way to refer to the contents of an ordinary register as floating point value (although you can print it as a floating point value with `print/f $regname').
Some registers have distinct "raw" and "virtual" data formats. This
means that the data format in which the register contents are saved by
the operating system is not the same one that your program normally
sees. For example, the registers of the 68881 floating point
coprocessor are always saved in "extended" (raw) format, but all C
programs expect to work with "double" (virtual) format. In such
cases, normally works with the virtual format only (the format
that makes sense for your program), but the info registers
command
prints the data in both formats.
Normally, register values are relative to the selected stack frame (see section Selecting a frame). This means that you get the value that the register would contain if all stack frames farther in were exited and their saved registers restored. In order to see the true contents of hardware registers, you must select the innermost frame (with `frame 0').
However, must deduce where registers are saved, from the machine code generated by your compiler. If some registers are not saved, or if is unable to locate the saved registers, the selected stack frame makes no difference.
Depending on the configuration, may be able to give you more information about the status of the floating point hardware.
info float
Memory region attributes allow you to describe special handling required by regions of your target's memory. uses attributes to determine whether to allow certain types of memory accesses; whether to use specific width accesses; and whether to cache target memory.
Defined memory regions can be individually enabled and disabled. When a memory region is disabled, uses the default attributes when accessing memory in that region. Similarly, if no memory regions have been defined, uses the default attributes when accessing all memory.
When a memory region is defined, it is given a number to identify it; to enable, disable, or remove a memory region, you specify that number.
mem address1 address1 attributes...
delete mem nums...
disable mem nums...
enable mem nums...
info mem
The access mode attributes set whether may make read or write accesses to a memory region.
While these attributes prevent from performing invalid memory accesses, they do nothing to prevent the target system, I/O DMA, etc. from accessing memory.
ro
wo
rw
The acccess size attributes tells to use specific sized accesses in the memory region. Often memory mapped device registers require specific sized accesses. If no access size attribute is specified, may use accesses of any size.
8
16
32
64
The data cache attributes set whether will cache target memory. While this generally improves performance by reducing debug protocol overhead, it can lead to incorrect results because does not know about volatile variables or memory mapped device registers.
cache
nocache (default)
In some applications, it is not feasible for the debugger to interrupt the program's execution long enough for the developer to learn anything helpful about its behavior. If the program's correctness depends on its real-time behavior, delays introduced by a debugger might cause the program to change its behavior drastically, or perhaps fail, even when the code itself is correct. It is useful to be able to observe the program's behavior without interrupting it.
Using 's trace
and collect
commands, you can
specify locations in the program, called tracepoints, and
arbitrary expressions to evaluate when those tracepoints are reached.
Later, using the tfind
command, you can examine the values
those expressions had when the program hit the tracepoints. The
expressions may also denote objects in memory--structures or arrays,
for example--whose values should record; while visiting
a particular tracepoint, you may inspect those objects as if they were
in memory at that moment. However, because records these
values without interacting with you, it can do so quickly and
unobtrusively, hopefully not disturbing the program's behavior.
The tracepoint facility is currently available only for remote targets. See section Specifying a Debugging Target.
This chapter describes the tracepoint commands and features.
Before running such a trace experiment, an arbitrary number of tracepoints can be set. Like a breakpoint (see section Setting breakpoints), a tracepoint has a number assigned to it by . Like with breakpoints, tracepoint numbers are successive integers starting from one. Many of the commands associated with tracepoints take the tracepoint number as their argument, to identify which tracepoint to work on.
For each tracepoint, you can specify, in advance, some arbitrary set of data that you want the target to collect in the trace buffer when it hits that tracepoint. The collected data can include registers, local variables, or global data. Later, you can use commands to examine the values these data had at the time the tracepoint was hit.
This section describes commands to set tracepoints and associated conditions and actions.
trace
trace
command is very similar to the break
command.
Its argument can be a source line, a function name, or an address in
the target program. See section Setting breakpoints. The trace
command
defines a tracepoint, which is a point in the target program where the
debugger will briefly stop, collect some data, and then allow the
program to continue. Setting a tracepoint or changing its commands
doesn't take effect until the next tstart
command; thus, you
cannot change the tracepoint attributes once a trace experiment is
running.
Here are some examples of using the trace
command:
() trace foo.c:121 // a source file and line number () trace +2 // 2 lines forward () trace my_function // first source line of function () trace *my_function // EXACT start address of function () trace *0x2117c4 // an addressYou can abbreviate
trace
as tr
.
The convenience variable $tpnum
records the tracepoint number
of the most recently set tracepoint.
delete tracepoint [num]
() delete trace 1 2 3 // remove three tracepoints () delete trace // remove all tracepointsYou can abbreviate this command as
del tr
.
disable tracepoint [num]
enable tracepoint
command.
enable tracepoint [num]
passcount [n [num]]
passcount
command sets the
passcount of the most recently defined tracepoint. If no passcount is
given, the trace experiment will run until stopped explicitly by the
user.
Examples:
() passcount 5 2 // Stop on the 5th execution of tracepoint 2 () passcount 12 // Stop on the 12th execution of the // most recently defined tracepoint. () trace foo () pass 3 () trace bar () pass 2 () trace baz () pass 1 // Stop tracing when foo has been // executed 3 times OR when bar has // been executed 2 times // OR when baz has been executed 1 time.
actions [num]
actions
without bothering about its number). You specify the
actions themselves on the following lines, one action at a time, and
terminate the actions list with a line containing just end
. So
far, the only defined actions are collect
and
while-stepping
.
To remove all actions from a tracepoint, type `actions num'
and follow it immediately with `end'.
() collect data // collect some data () while-stepping 5 // single-step 5 times and collect data () end // signals the end of actions.In the following example, the action list begins with
collect
commands indicating the things to be collected when the tracepoint is
hit. Then, in order to single-step and collect additional data
following the tracepoint, a while-stepping
command is used,
followed by the list of things to be collected while stepping. The
while-stepping
command is terminated by its own separate
end
command. Lastly, the action list is terminated by an
end
command.
() trace foo () actions Enter actions for tracepoint 1, one per line: > collect bar,baz > collect $regs > while-stepping 12 > collect $fp, $sp > end end
collect expr1, expr2, ...
$regs
$args
$locals
collect
commands, each one
with a single argument, or one collect
command with several
arguments separated by commas: the effect is the same.
The command info scope
(see section Examining the Symbol Table) is
particularly useful for figuring out what data to collect.
while-stepping n
while-stepping
command is
followed by the list of what to collect while stepping (followed by
its own end
command):
> while-stepping 12 > collect $regs, myglobal > end >You may abbreviate
while-stepping
as ws
or
stepping
.
info tracepoints [num]
passcount n
command
while-stepping n
command
actions
command
() info trace Num Enb Address PassC StepC What 1 y 0x002117c4 0 0 <gdb_asm> 2 y 0x0020dc64 0 0 in gdb_test at gdb_test.c:375 3 y 0x0020b1f4 0 0 in collect_data at ../foo.c:1741 ()This command can be abbreviated
info tp
.
tstart
tstop
tstatus
Here is an example of the commands we described so far:
() trace gdb_c_test () actions Enter actions for tracepoint #1, one per line. > collect $regs,$locals,$args > while-stepping 11 > collect $regs > end > end () tstart [time passes ...] () tstop
After the tracepoint experiment ends, you use commands
for examining the trace data. The basic idea is that each tracepoint
collects a trace snapshot every time it is hit and another
snapshot every time it single-steps. All these snapshots are
consecutively numbered from zero and go into a buffer, and you can
examine them later. The way you examine them is to focus on a
specific trace snapshot. When the remote stub is focused on a trace
snapshot, it will respond to all requests for memory and
registers by reading from the buffer which belongs to that snapshot,
rather than from real memory or registers of the program being
debugged. This means that all commands
(print
, info registers
, backtrace
, etc.) will
behave as if we were currently debugging the program state as it was
when the tracepoint occurred. Any requests for data that are not in
the buffer will fail.
tfind n
The basic command for selecting a trace snapshot from the buffer is
tfind n
, which finds trace snapshot number n,
counting from zero. If no argument n is given, the next
snapshot is selected.
Here are the various forms of using the tfind
command.
tfind start
tfind 0
(since 0 is the number of the first snapshot).
tfind none
tfind end
tfind
tfind -
tfind tracepoint num
tfind pc addr
tfind outside addr1, addr2
tfind range addr1, addr2
tfind line [file:]n
tfind line
repeatedly can appear to have the same effect as
stepping from line to line in a live debugging session.
The default arguments for the tfind
commands are specifically
designed to make it easy to scan through the trace buffer. For
instance, tfind
with no argument selects the next trace
snapshot, and tfind -
with no argument selects the previous
trace snapshot. So, by giving one tfind
command, and then
simply hitting RET repeatedly you can examine all the trace
snapshots in order. Or, by saying tfind -
and then hitting
RET repeatedly you can examine the snapshots in reverse order.
The tfind line
command with no argument selects the snapshot
for the next source line executed. The tfind pc
command with
no argument selects the next snapshot with the same program counter
(PC) as the current frame. The tfind tracepoint
command with
no argument selects the next trace snapshot collected by the same
tracepoint as the current one.
In addition to letting you scan through the trace buffer manually, these commands make it easy to construct scripts that scan through the trace buffer and print out whatever collected data you are interested in. Thus, if we want to examine the PC, FP, and SP registers from each trace frame in the buffer, we can say this:
() tfind start () while ($trace_frame != -1) > printf "Frame %d, PC = %08X, SP = %08X, FP = %08X\n", \ $trace_frame, $pc, $sp, $fp > tfind > end Frame 0, PC = 0020DC64, SP = 0030BF3C, FP = 0030BF44 Frame 1, PC = 0020DC6C, SP = 0030BF38, FP = 0030BF44 Frame 2, PC = 0020DC70, SP = 0030BF34, FP = 0030BF44 Frame 3, PC = 0020DC74, SP = 0030BF30, FP = 0030BF44 Frame 4, PC = 0020DC78, SP = 0030BF2C, FP = 0030BF44 Frame 5, PC = 0020DC7C, SP = 0030BF28, FP = 0030BF44 Frame 6, PC = 0020DC80, SP = 0030BF24, FP = 0030BF44 Frame 7, PC = 0020DC84, SP = 0030BF20, FP = 0030BF44 Frame 8, PC = 0020DC88, SP = 0030BF1C, FP = 0030BF44 Frame 9, PC = 0020DC8E, SP = 0030BF18, FP = 0030BF44 Frame 10, PC = 00203F6C, SP = 0030BE3C, FP = 0030BF14
Or, if we want to examine the variable X
at each source line in
the buffer:
() tfind start () while ($trace_frame != -1) > printf "Frame %d, X == %d\n", $trace_frame, X > tfind line > end Frame 0, X = 1 Frame 7, X = 2 Frame 13, X = 255
tdump
This command takes no arguments. It prints all the data collected at the current trace snapshot.
() trace 444 () actions Enter actions for tracepoint #2, one per line: > collect $regs, $locals, $args, gdb_long_test > end () tstart () tfind line 444 #0 gdb_test (p1=0x11, p2=0x22, p3=0x33, p4=0x44, p5=0x55, p6=0x66) at gdb_test.c:444 444 printp( "%s: arguments = 0x%X 0x%X 0x%X 0x%X 0x%X 0x%X\n", ) () tdump Data collected at tracepoint 2, trace frame 1: d0 0xc4aa0085 -995491707 d1 0x18 24 d2 0x80 128 d3 0x33 51 d4 0x71aea3d 119204413 d5 0x22 34 d6 0xe0 224 d7 0x380035 3670069 a0 0x19e24a 1696330 a1 0x3000668 50333288 a2 0x100 256 a3 0x322000 3284992 a4 0x3000698 50333336 a5 0x1ad3cc 1758156 fp 0x30bf3c 0x30bf3c sp 0x30bf34 0x30bf34 ps 0x0 0 pc 0x20b2c8 0x20b2c8 fpcontrol 0x0 0 fpstatus 0x0 0 fpiaddr 0x0 0 p = 0x20e5b4 "gdb-test" p1 = (void *) 0x11 p2 = (void *) 0x22 p3 = (void *) 0x33 p4 = (void *) 0x44 p5 = (void *) 0x55 p6 = (void *) 0x66 gdb_long_test = 17 '\021' ()
save-tracepoints filename
This command saves all current tracepoint definitions together with
their actions and passcounts, into a file `filename'
suitable for use in a later debugging session. To read the saved
tracepoint definitions, use the source
command (see section Command files).
(int) $trace_frame
(int) $tracepoint
(int) $trace_line
(char []) $trace_file
(char []) $trace_func
$tracepoint
.
Note: $trace_file
is not suitable for use in printf
,
use output
instead.
Here's a simple example of using these convenience variables for stepping through all the trace snapshots and printing some of their data.
() tfind start () while $trace_frame != -1 > output $trace_file > printf ", line %d (tracepoint #%d)\n", $trace_line, $tracepoint > tfind > end
Although programming languages generally have common aspects, they are
rarely expressed in the same manner. For instance, in ANSI C,
dereferencing a pointer p
is accomplished by *p
, but in
Modula-2, it is accomplished by p^
. Values can also be
represented (and displayed) differently. Hex numbers in C appear as
`0x1ae', while in Modula-2 they appear as `1AEH'.
Language-specific information is built into for some languages, allowing you to express operations like the above in your program's native language, and allowing to output values in a manner consistent with the syntax of your program's native language. The language you use to build expressions is called the working language.
There are two ways to control the working language--either have
set it automatically, or select it manually yourself. You can use the
set language
command for either purpose. On startup,
defaults to setting the language automatically. The working language is
used to determine how expressions you type are interpreted, how values
are printed, etc.
In addition to the working language, every source file that
knows about has its own working language. For some object
file formats, the compiler might indicate which language a particular
source file is in. However, most of the time infers the
language from the name of the file. The language of a source file
controls whether C++ names are demangled--this way backtrace
can
show each frame appropriately for its own language. There is no way to
set the language of a source file from within , but you can
set the language associated with a filename extension. See section Displaying the language.
This is most commonly a problem when you use a program, such
as cfront
or f2c
, that generates C but is written in
another language. In that case, make the
program use #line
directives in its C output; that way
will know the correct language of the source code of the original
program, and will display that source code, not the generated C code.
If a source file name ends in one of the following extensions, then infers that its language is the one indicated.
In addition, you may set the language associated with a filename extension. See section Displaying the language.
If you allow to set the language automatically, expressions are interpreted the same way in your debugging session and your program.
If you wish, you may set the language manually. To do this, issue the
command `set language lang', where lang is the name of
a language, such as
c
or modula-2
.
For a list of the supported languages, type `set language'.
Setting the language manually prevents from updating the working language automatically. This can lead to confusion if you try to debug a program when the working language is not the same as the source language, when an expression is acceptable to both languages--but means different things. For instance, if the current source file were written in C, and was parsing Modula-2, a command such as:
print a = b + c
might not have the effect you intended. In C, this means to add
b
and c
and place the result in a
. The result
printed would be the value of a
. In Modula-2, this means to compare
a
to the result of b+c
, yielding a BOOLEAN
value.
To have set the working language automatically, use `set language local' or `set language auto'. then infers the working language. That is, when your program stops in a frame (usually by encountering a breakpoint), sets the working language to the language recorded for the function in that frame. If the language for a frame is unknown (that is, if the function or block corresponding to the frame was defined in a source file that does not have a recognized extension), the current working language is not changed, and issues a warning.
This may not seem necessary for most programs, which are written entirely in one source language. However, program modules and libraries written in one source language can be used by a main program written in a different source language. Using `set language auto' in this case frees you from having to set the working language manually.
The following commands help you find out which language is the working language, and also what language source files were written in.
show language
print
to
build and compute expressions that may involve variables in your program.
info frame
info source
In unusual circumstances, you may have source files with extensions not in the standard list. You can then set the extension associated with a language explicitly:
set extension-language .ext language
info extensions
Warning: In this release, the commands for type and range checking are included, but they do not yet have any effect. This section documents the intended facilities.
Some languages are designed to guard you against making seemingly common errors through a series of compile- and run-time checks. These include checking the type of arguments to functions and operators, and making sure mathematical overflows are caught at run time. Checks such as these help to ensure a program's correctness once it has been compiled by eliminating type mismatches, and providing active checks for range errors when your program is running.
can check for conditions like the above if you wish.
Although does not check the statements in your program, it
can check expressions entered directly into for evaluation via
the print
command, for example. As with the working language,
can also decide whether or not to check automatically based on
your program's source language. See section Supported languages,
for the default settings of supported languages.
Some languages, such as Modula-2, are strongly typed, meaning that the arguments to operators and functions have to be of the correct type, otherwise an error occurs. These checks prevent type mismatch errors from ever causing any run-time problems. For example,
1 + 2 => 3 but error--> 1 + 2.3
The second example fails because the CARDINAL
1 is not
type-compatible with the REAL
2.3.
For the expressions you use in commands, you can tell the type checker to skip checking; to treat any mismatches as errors and abandon the expression; or to only issue warnings when type mismatches occur, but evaluate the expression anyway. When you choose the last of these, evaluates expressions like the second example above, but also issues a warning.
Even if you turn type checking off, there may be other reasons
related to type that prevent from evaluating an expression.
For instance, does not know how to add an int
and
a struct foo
. These particular type errors have nothing to do
with the language in use, and usually arise from expressions, such as
the one described above, which make little sense to evaluate anyway.
Each language defines to what degree it is strict about type. For instance, both Modula-2 and C require the arguments to arithmetical operators to be numbers. In C, enumerated types and pointers can be represented as numbers, so that they are valid arguments to mathematical operators. See section Supported languages, for further details on specific languages.
provides some additional commands for controlling the type checker:
set check type auto
set check type on
set check type off
set check type warn
show type
In some languages (such as Modula-2), it is an error to exceed the bounds of a type; this is enforced with run-time checks. Such range checking is meant to ensure program correctness by making sure computations do not overflow, or indices on an array element access do not exceed the bounds of the array.
For expressions you use in commands, you can tell to treat range errors in one of three ways: ignore them, always treat them as errors and abandon the expression, or issue warnings but evaluate the expression anyway.
A range error can result from numerical overflow, from exceeding an array index bound, or when you type a constant that is not a member of any type. Some languages, however, do not treat overflows as an error. In many implementations of C, mathematical overflow causes the result to "wrap around" to lower values--for example, if m is the largest integer value, and s is the smallest, then
m + 1 => s
This, too, is specific to individual languages, and in some cases specific to individual compilers or machines. See section Supported languages, for further details on specific languages.
provides some additional commands for controlling the range checker:
set check range auto
set check range on
set check range off
set check range warn
show range
supports C, C++, Fortran, Java, Chill, assembly, and Modula-2.
Some features may be used in expressions regardless of the
language you use: the @
and ::
operators,
and the `{type}addr' construct (see section Expressions) can be used with the constructs of any supported
language.
The following sections detail to what degree each source language is supported by . These sections are not meant to be language tutorials or references, but serve only as a reference guide to what the expression parser accepts, and what input and output formats should look like for different languages. There are many good books written on each of these languages; please look to these for a language reference or tutorial.
Since C and C++ are so closely related, many features of apply to both languages. Whenever this is the case, we discuss those languages together.
The C++ debugging facilities are jointly implemented by the C++
compiler and . Therefore, to debug your C++ code
effectively, you must compile your C++ programs with a supported
C++ compiler, such as GNU g++
, or the HP ANSI C++
compiler (aCC
).
For best results when using GNU C++, use the stabs debugging
format. You can select that format explicitly with the g++
command-line options `-gstabs' or `-gstabs+'. See
section `Options for Debugging Your Program or GNU CC' in Using GNU CC, for more information.
Operators must be defined on values of specific types. For instance,
+
is defined on numbers, but not on structures. Operators are
often defined on groups of types.
For the purposes of C and C++, the following definitions hold:
int
with any of its storage-class
specifiers; char
; enum
; and, for C++, bool
.
float
, double
, and
long double
(if supported by the target platform).
(type *)
.
The following operators are supported. They are listed here in order of increasing precedence:
,
=
op=
a op= b
,
and translated to a = a op b
.
op=
and =
have the same precedence.
op is any one of the operators |
, ^
, &
,
<<
, >>
, +
, -
, *
, /
, %
.
?:
a ? b : c
can be thought
of as: if a then b else c. a should be of an
integral type.
||
&&
|
^
&
==, !=
<, >, <=, >=
<<, >>
@
+, -
*, /, %
++, --
*
++
.
&
++
.
For debugging C++, implements a use of `&' beyond what is
allowed in the C++ language itself: you can use `&(&ref)'
(or, if you prefer, simply `&&ref') to examine the address
where a C++ reference variable (declared with `&ref') is
stored.
-
++
.
!
++
.
~
++
.
., ->
struct
and union
data.
.*, ->*
[]
a[i]
is defined as
*(a+i)
. Same precedence as ->
.
()
->
.
::
struct
, union
,
and class
types.
::
::
,
above.
If an operator is redefined in the user code, usually attempts to invoke the redefined version instead of using the operator's predefined meaning.
allows you to express the constants of C and C++ in the following ways:
long
value.
float
(as opposed to the default double
) type; or with
a letter `l' or `L', which specifies a long double
constant.
'
), or a number--the ordinal value of the corresponding character
(usually its ASCII value). Within quotes, the single character may
be represented by a letter or by escape sequences, which are of
the form `\nnn', where nnn is the octal representation
of the character's ordinal value; or of the form `\x', where
`x' is a predefined special character--for example,
`\n' for newline.
"
). Any valid character constant (as described
above) may appear. Double quotes within the string must be preceded by
a backslash, so for instance `"a\"b'c"' is a string of five
characters.
expression handling can interpret most C++ expressions.
Warning: can only debug C++ code if you use the proper compiler. Typically, C++ debugging depends on the use of additional debugging information in the symbol table, and thus requires special support. In particular, if your compiler generates a.out, MIPS ECOFF, RS/6000 XCOFF, or ELF with stabs extensions to the symbol table, these facilities are all available. (With GNU CC, you can use the `-gstabs' option to request stabs debugging extensions explicitly.) Where the object code format is standard COFF or DWARF in ELF, on the other hand, most of the C++ support in does not work.
count = aml->GetOriginal(x, y)
this
following the same rules as C++.
set overload-resolution off
. See section features for C++.
You must specify set overload-resolution off
in order to use an
explicit function signature to call an overloaded function, as in
p 'foo(char,int)'('x', 13)The command-completion facility can simplify this; see section Command completion.
::
---your
expressions can use it just as expressions in your program do. Since
one scope may be defined in another, you can use ::
repeatedly if
necessary, for example in an expression like
`scope1::scope2::name'. also allows
resolving name scope by reference to source files, in both C and C++
debugging (see section Program variables).
In addition, when used with HP's C++ compiler, supports calling virtual functions correctly, printing out virtual bases of objects, calling functions in a base subobject, casting objects, and invoking user-defined operators.
If you allow to set type and range checking automatically, they
both default to off
whenever the working language changes to
C or C++. This happens regardless of whether you or
selects the working language.
If you allow to set the language automatically, it recognizes source files whose names end with `.c', `.C', or `.cc', etc, and when enters code compiled from one of these files, it sets the working language to C or C++. See section Having infer the source language, for further details.
By default, when parses C or C++ expressions, type checking is not used. However, if you turn type checking on, considers two variables type equivalent if:
typedef
.
Range checking, if turned on, is done on mathematical operations. Array indices are not checked, since they are often used to index a pointer that is not itself an array.
The set print union
and show print union
commands apply to
the union
type. When set to `on', any union
that is
inside a struct
or class
is also printed. Otherwise, it
appears as `{...}'.
The @
operator aids in the debugging of dynamic arrays, formed
with pointers and a memory allocation function. See section Expressions.
Some commands are particularly useful with C++, and some are designed specifically for use with C++. Here is a summary:
breakpoint menus
rbreak regex
catch throw
catch catch
ptype typename
set print demangle
show print demangle
set print asm-demangle
show print asm-demangle
set print object
show print object
set print vtbl
show print vtbl
vtbl
commands do not work on programs compiled with the HP
ANSI C++ compiler (aCC
).)
set overload-resolution on
set overload-resolution off
Overloaded symbol names
symbol(types)
rather than just symbol. You can
also use the command-line word completion facilities to list the
available choices, or to finish the type list for you.
See section Command completion, for details on how to do this.
The extensions made to to support Modula-2 only support output from the GNU Modula-2 compiler (which is currently being developed). Other Modula-2 compilers are not currently supported, and attempting to debug executables produced by them is most likely to give an error as reads in the executable's symbol table.
Operators must be defined on values of specific types. For instance,
+
is defined on numbers, but not on structures. Operators are
often defined on groups of types. For the purposes of Modula-2, the
following definitions hold:
INTEGER
, CARDINAL
, and
their subranges.
CHAR
and its subranges.
REAL
.
POINTER TO
type
.
SET
and BITSET
types.
BOOLEAN
.
The following operators are supported, and appear in order of increasing precedence:
,
:=
:=
value is
value.
<, >
<=, >=
<
.
=, <>, #
<
. In scripts, only <>
is
available for inequality, since #
conflicts with the script
comment character.
IN
<
.
OR
AND, &
@
+, -
*
/
*
.
DIV, MOD
*
.
-
INTEGER
and REAL
data.
^
NOT
^
.
.
RECORD
field selector. Defined on RECORD
data. Same
precedence as ^
.
[]
ARRAY
data. Same precedence as ^
.
()
PROCEDURE
objects. Same precedence
as ^
.
::, .
Warning: Sets and their operations are not yet supported, so treats the use of the operator
IN
, or the use of operators+
,-
,*
,/
,=
, ,<>
,#
,<=
, and>=
on sets as an error.
Modula-2 also makes available several built-in procedures and functions. In describing these, the following metavariables are used:
ARRAY
variable.
CHAR
constant or variable.
SET OF mtype
(where mtype is the type of m).
All Modula-2 built-in procedures also return a result, described below.
ABS(n)
CAP(c)
CHR(i)
DEC(v)
DEC(v,i)
EXCL(m,s)
FLOAT(i)
HIGH(a)
INC(v)
INC(v,i)
INCL(m,s)
MAX(t)
MIN(t)
ODD(i)
ORD(x)
SIZE(x)
TRUNC(r)
VAL(t,i)
Warning: Sets and their operations are not yet supported, so treats the use of procedures
INCL
andEXCL
as an error.
allows you to express the constants of Modula-2 in the following ways:
'
) or double ("
). They may
also be expressed by their ordinal value (their ASCII value, usually)
followed by a `C'.
'
) or double ("
).
Escape sequences in the style of C are also allowed. See section C and C++ constants, for a brief explanation of escape
sequences.
TRUE
and
FALSE
.
If type and range checking are set automatically by , they
both default to on
whenever the working language changes to
Modula-2. This happens regardless of whether you or
selected the working language.
If you allow to set the language automatically, then entering code compiled from a file whose name ends with `.mod' sets the working language to Modula-2. See section Having infer the source language, for further details.
A few changes have been made to make Modula-2 programs easier to debug. This is done primarily via loosening its type strictness:
:=
) returns the value of its right-hand
argument.
Warning: in this release, does not yet perform type or range checking.
considers two Modula-2 variables type equivalent if:
TYPE
t1 = t2
statement
As long as type checking is enabled, any attempt to combine variables whose types are not equivalent is an error.
Range checking is done on all mathematical operations, assignment, array index bounds, and all built-in functions and procedures.
::
and .
There are a few subtle differences between the Modula-2 scope operator
(.
) and the scope operator (::
). The two have
similar syntax:
module . id scope :: id
where scope is the name of a module or a procedure, module the name of a module, and id is any declared identifier within your program, except another module.
Using the ::
operator makes search the scope
specified by scope for the identifier id. If it is not
found in the specified scope, then searches all scopes
enclosing the one specified by scope.
Using the .
operator makes search the current scope for
the identifier specified by id that was imported from the
definition module specified by module. With this operator, it is
an error if the identifier id was not imported from definition
module module, or if id is not an identifier in
module.
Some commands have little use when debugging Modula-2 programs.
Five subcommands of set print
and show print
apply
specifically to C and C++: `vtbl', `demangle',
`asm-demangle', `object', and `union'. The first four
apply to C++, and the last to the C union
type, which has no direct
analogue in Modula-2.
The @
operator (see section Expressions), while available
with any language, is not useful with Modula-2. Its
intent is to aid the debugging of dynamic arrays, which cannot be
created in Modula-2 as they can in C or C++. However, because an
address can be specified by an integral constant, the construct
`{type}adrexp' is still useful.
In scripts, the Modula-2 inequality operator #
is
interpreted as the beginning of a comment. Use <>
instead.
The extensions made to to support Chill only support output from the GNU Chill compiler. Other Chill compilers are not currently supported, and attempting to debug executables produced by them is most likely to give an error as reads in the executable's symbol table.
This section covers the Chill related topics and the features of which support these topics.
The Chill Datatype- (Mode) support of is directly related with the functionality of the GNU Chill compiler, and therefore deviates slightly from the standard specification of the Chill language. The provided modes are:
Discrete modes:
BYTE, UBYTE, INT,
UINT, LONG, ULONG
,
BOOL
,
CHAR
,
SET
.
() ptype x type = SET (karli = 10, susi = 20, fritzi = 100)If the type is an unnumbered set the set element values are omitted.
type = <basemode>(<lower bound> : <upper bound>)
where <lower bound>, <upper bound>
can be of any discrete literal
expression (e.g. set element names).
Powerset Mode:
POWERSET
followed by
the member mode of the powerset. The member mode can be any discrete mode.
() ptype x type = POWERSET SET (egon, hugo, otto)
Reference Modes:
REF
followed by the mode name to which the reference is bound.
PTR
.
Procedure mode
type = PROC(<parameter list>)
<return mode> EXCEPTIONS (<exception list>)
. The <parameter
list>
is a list of the parameter modes. <return mode>
indicates
the mode of the result of the procedure if any. The exceptionlist lists
all possible exceptions which can be raised by the procedure.
Synchronization Modes:
EVENT (<event length>)
where (<event length>)
is optional.
BUFFER (<buffer length>)<buffer element mode>
where (<buffer length>)
is optional.
Timing Modes:
DURATION
TIME
Real Modes:
REAL
and LONG_REAL
.
String Modes:
CHARS(<string length>)
followed by the keyword VARYING
if the String Mode is a varying
mode
BOOLS(<string
length>)
Array Mode:
ARRAY(<range>)
followed by the element mode (which may in turn be an array mode).
() ptype x type = ARRAY (1:42) ARRAY (1:20) SET (karli = 10, susi = 20, fritzi = 100)
Structure Mode
STRUCT(<field
list>)
. The <field list>
consists of names and modes of fields
of the structure. Variant structures have the keyword CASE <field>
OF <variant fields> ESAC
in their field list. Since the current version
of the GNU Chill compiler doesn't implement tag processing (no runtime
checks of variant fields, and therefore no debugging info), the output
always displays all variant fields.
() ptype str type = STRUCT ( as x, bs x, CASE bs OF (karli): cs a (ott): ds x ESAC )
A location in Chill is an object which can contain values.
A value of a location is generally accessed by the (declared) name of the location. The output conforms to the specification of values in Chill programs. How values are specified is the topic of the next section, section Values and their Operations.
The pseudo-location RESULT
(or result
) can be used to
display or change the result of a currently-active procedure:
set result := EXPR
This does the same as the Chill action RESULT EXPR
(which
is not available in ).
Values of reference mode locations are printed by PTR(<hex
value>)
in case of a free reference mode, and by (REF <reference
mode>) (<hex-value>)
in case of a bound reference. <hex value>
represents the address where the reference points to. To access the
value of the location referenced by the pointer, use the dereference
operator `->'.
Values of procedure mode locations are displayed by
{ PROC
(<argument modes> ) <return mode> } <address> <name of procedure
location>
<argument modes>
is a list of modes according to the parameter
specification of the procedure and <address>
shows the address of
the entry point.
Substructures of string mode-, array mode- or structure mode-values (e.g. array slices, fields of structure locations) are accessed using certain operations which are described in the next section, section Values and their Operations.
A location value may be interpreted as having a different mode using the
location conversion. This mode conversion is written as <mode
name>(<location>)
. The user has to consider that the sizes of the modes
have to be equal otherwise an error occurs. Furthermore, no range
checking of the location against the destination mode is performed, and
therefore the result can be quite confusing.
() print int (s(3 up 4)) XXX TO be filled in !! XXX
Values are used to alter locations, to investigate complex structures in more detail or to filter relevant information out of a large amount of data. There are several (mode dependent) operations defined which enable such investigations. These operations are not only applicable to constant values but also to locations, which can become quite useful when debugging complex structures. During parsing the command line (e.g. evaluating an expression) treats location names as the values behind these locations.
This section describes how values have to be specified and which operations are legal to be used with such values.
Literal Values
Tuple Values
<mode name>[<tuple>]
, where <mode
name>
can be omitted if the mode of the tuple is unambiguous. This
unambiguity is derived from the context of a evaluated expression.
<tuple>
can be one of the following:
String Element Value
<string value>(<index>)
where <index>
is a integer expression. It delivers a character
value which is equivalent to the character indexed by <index>
in
the string.
String Slice Value
<string value>(<slice
spec>)
, where <slice spec>
can be either a range of integer
expressions or specified by <start expr> up <size>
.
<size>
denotes the number of elements which the slice contains.
The delivered value is a string value, which is part of the specified
string.
Array Element Values
<array value>(<expr>)
and
delivers a array element value of the mode of the specified array.
Array Slice Values
<array value>(<slice spec>)
, where
<slice spec>
can be either a range specified by expressions or by
<start expr> up <size>
. <size>
denotes the number of
arrayelements the slice contains. The delivered value is an array value
which is part of the specified array.
Structure Field Values
<structure value>.<field
name>
, where <field name>
indicates the name of a field specified
in the mode definition of the structure. The mode of the delivered value
corresponds to this mode definition in the structure definition.
Procedure Call Value
ULONG
literals.
Values of time mode locations appear as
TIME(<secs>:<nsecs>)
Zero-adic Operator Value
Expression Values
OR, ORIF, XOR
AND, ANDIF
NOT
=, /=
>, >=
<, <=
+, -
*, /, MOD, REM
-
//
()
->
->loc
), or to dereference a reference
location (loc->
).
OR, XOR
AND
NOT
>, >=
<, <=
IN
considers two Chill variables mode equivalent if the sizes of the two modes are equal. This rule applies recursively to more complex datatypes which means that complex modes are treated equivalent if all element modes (which also can be complex modes like structures, arrays, etc.) have the same size.
Range checking is done on all mathematical operations, assignment, array index bounds and all built in procedures.
Strong type checks are forced using the command set
check strong
. This enforces strong type and range checks on all
operations where Chill constructs are used (expressions, built in
functions, etc.) in respect to the semantics as defined in the z.200
language specification.
All checks can be disabled by the command set check
off
.
If type and range checking are set automatically by , they
both default to on
whenever the working language changes to
Chill. This happens regardless of whether you or
selected the working language.
If you allow to set the language automatically, then entering code compiled from a file whose name ends with `.ch' sets the working language to Chill. See section Having infer the source language, for further details.
The commands described in this chapter allow you to inquire about the symbols (names of variables, functions and types) defined in your program. This information is inherent in the text of your program and does not change as your program executes. finds it in your program's symbol table, in the file indicated when you started (see section Choosing files), or by one of the file-management commands (see section Commands to specify files).
Occasionally, you may need to refer to symbols that contain unusual characters, which ordinarily treats as word delimiters. The most frequent case is in referring to static variables in other source files (see section Program variables). File names are recorded in object files as debugging symbols, but would ordinarily parse a typical file name, like `foo.c', as the three words `foo' `.' `c'. To allow to recognize `foo.c' as a single symbol, enclose it in single quotes; for example,
p 'foo.c'::x
looks up the value of x
in the scope of the file `foo.c'.
info address symbol
info symbol addr
() info symbol 0x54320 _initialize_vx + 396 in section .textThis is the opposite of the
info address
command. You can use
it to find out the name of a variable or a function given its address.
whatis expr
whatis
$
, the last value in the value history.
ptype typename
ptype expr
ptype
ptype
differs from whatis
by printing a detailed description, instead
of just the name of the type.
For example, for this variable declaration:
struct complex {double real; double imag;} v;the two commands give this output:
() whatis v type = struct complex () ptype v type = struct complex { double real; double imag; }As with
whatis
, using ptype
without an argument refers to
the type of $
, the last value in the value history.
info types regexp
info types
value
, but `i type ^value$' gives
information only on types whose complete name is value
.
This command differs from ptype
in two ways: first, like
whatis
, it does not print a detailed description; second, it
lists all source files where a type is defined.
info scope addr
() info scope command_line_handler Scope for command_line_handler: Symbol rl is an argument at stack/frame offset 8, length 4. Symbol linebuffer is in static storage at address 0x150a18, length 4. Symbol linelength is in static storage at address 0x150a1c, length 4. Symbol p is a local variable in register $esi, length 4. Symbol p1 is a local variable in register $ebx, length 4. Symbol nline is a local variable in register $edx, length 4. Symbol repeat is a local variable at frame offset -8, length 4.This command is especially useful for determining what data to collect during a trace experiment, see section Tracepoint Action Lists.
info source
info sources
info functions
info functions regexp
step
; `info fun ^step' finds those whose names
start with step
.
info variables
info variables regexp
set symbol-reloading on
set symbol-reloading off
symbol-reloading
off, since otherwise
may discard symbols when linking large programs, that may contain
several modules (from different directories or libraries) with the same
name.
show symbol-reloading
on
or off
setting.
set opaque-type-resolution on
struct
, class
, or
union
---for example, struct MyType *
---that is used in one
source file although the full declaration of struct MyType
is in
another source file. The default is on.
A change in the setting of this subcommand will not take effect until
the next time symbols for a file are loaded.
set opaque-type-resolution off
{<no data fields>}
show opaque-type-resolution
maint print symbols filename
maint print psymbols filename
maint print msymbols filename
info sources
to find out which files these are. If you
use `maint print psymbols' instead, the dump shows information about
symbols that only knows partially--that is, symbols defined in
files that has skimmed, but not yet read completely. Finally,
`maint print msymbols' dumps just the minimal symbol information
required for each object file from which has read some symbols.
See section Commands to specify files, for a discussion of how
reads symbols (in the description of symbol-file
).
Once you think you have found an error in your program, you might want to find out for certain whether correcting the apparent error would lead to correct results in the rest of the run. You can find the answer by experiment, using the features for altering execution of the program.
For example, you can store new values into variables or memory locations, give your program a signal, restart it at a different address, or even return prematurely from a function.
To alter the value of a variable, evaluate an assignment expression. See section Expressions. For example,
print x=4
stores the value 4 into the variable x
, and then prints the
value of the assignment expression (which is 4).
See section Using with Different Languages, for more
information on operators in supported languages.
If you are not interested in seeing the value of the assignment, use the
set
command instead of the print
command. set
is
really the same as print
except that the expression's value is
not printed and is not put in the value history (see section Value history). The expression is evaluated only for its effects.
If the beginning of the argument string of the set
command
appears identical to a set
subcommand, use the set
variable
command instead of just set
. This command is identical
to set
except for its lack of subcommands. For example, if your
program has a variable width
, you get an error if you try to set
a new value with just `set width=13', because has the
command set width
:
() whatis width type = double () p width $4 = 13 () set width=47 Invalid syntax in expression.
The invalid expression, of course, is `=47'. In
order to actually set the program's variable width
, use
() set var width=47
Because the set
command has many subcommands that can conflict
with the names of program variables, it is a good idea to use the
set variable
command instead of just set
. For example, if
your program has a variable g
, you run into problems if you try
to set a new value with just `set g=4', because has
the command set gnutarget
, abbreviated set g
:
() whatis g type = double () p g $1 = 1 () set g=4 () p g $2 = 1 () r The program being debugged has been started already. Start it from the beginning? (y or n) y Starting program: /home/smith/cc_progs/a.out "/home/smith/cc_progs/a.out": can't open to read symbols: Invalid bfd target. () show g The current BFD target is "=4".
The program variable g
did not change, and you silently set the
gnutarget
to an invalid value. In order to set the variable
g
, use
() set var g=4
allows more implicit conversions in assignments than C; you can freely store an integer value into a pointer variable or vice versa, and you can convert any structure to any other structure that is the same length or shorter.
To store values into arbitrary places in memory, use the `{...}'
construct to generate a value of specified type at a specified address
(see section Expressions). For example, {int}0x83040
refers
to memory location 0x83040
as an integer (which implies a certain size
and representation in memory), and
set {int}0x83040 = 4
stores the value 4 into that memory location.
Ordinarily, when you continue your program, you do so at the place where
it stopped, with the continue
command. You can instead continue at
an address of your own choosing, with the following commands:
jump linespec
tbreak
command
in conjunction with jump
. See section Setting breakpoints.
The jump
command does not change the current stack frame, or
the stack pointer, or the contents of any memory location or any
register other than the program counter. If line linespec is in
a different function from the one currently executing, the results may
be bizarre if the two functions expect different patterns of arguments or
of local variables. For this reason, the jump
command requests
confirmation if the specified line is not in the function currently
executing. However, even bizarre results are predictable if you are
well acquainted with the machine-language code of your program.
jump *address
On many systems, you can get much the same effect as the jump
command by storing a new value into the register $pc
. The
difference is that this does not start your program running; it only
changes the address of where it will run when you continue. For
example,
set $pc = 0x485
makes the next continue
command or stepping command execute at
address 0x485
, rather than at the address where your program stopped.
See section Continuing and stepping.
The most common occasion to use the jump
command is to back
up--perhaps with more breakpoints set--over a portion of a program
that has already executed, in order to examine its execution in more
detail.
signal signal
signal 2
and signal
SIGINT
are both ways of sending an interrupt signal.
Alternatively, if signal is zero, continue execution without
giving a signal. This is useful when your program stopped on account of
a signal and would ordinary see the signal when resumed with the
continue
command; `signal 0' causes it to resume without a
signal.
signal
does not repeat when you press RET a second time
after executing the command.
Invoking the signal
command is not the same as invoking the
kill
utility from the shell. Sending a signal with kill
causes to decide what to do with the signal depending on
the signal handling tables (see section Signals). The signal
command
passes the signal directly to your program.
return
return expression
return
command. If you give an
expression argument, its value is used as the function's return
value.
When you use return
, discards the selected stack frame
(and all frames within it). You can think of this as making the
discarded frame return prematurely. If you wish to specify a value to
be returned, give that value as the argument to return
.
This pops the selected stack frame (see section Selecting a frame), and any other frames inside of it, leaving its caller as the innermost remaining frame. That frame becomes selected. The specified value is stored in the registers used for returning values of functions.
The return
command does not resume execution; it leaves the
program stopped in the state that would exist if the function had just
returned. In contrast, the finish
command (see section Continuing and stepping) resumes execution until the
selected stack frame returns naturally.
call expr
void
returned values.
You can use this variant of the print
command if you want to
execute a function from your program, but without cluttering the output
with void
returned values. If the result is not void, it
is printed and saved in the value history.
For the A29K, a user-controlled variable call_scratch_address
,
specifies the location of a scratch area to be used when
calls a function in the target. This is necessary because the usual
method of putting the scratch area on the stack does not work in systems
that have separate instruction and data spaces.
By default, opens the file containing your program's executable code (or the corefile) read-only. This prevents accidental alterations to machine code; but it also prevents you from intentionally patching your program's binary.
If you'd like to be able to patch the binary, you can specify that
explicitly with the set write
command. For example, you might
want to turn on internal debugging flags, or even to make emergency
repairs.
set write on
set write off
exec-file
or core-file
command) after changing set
write
, for your new setting to take effect.
show write
needs to know the file name of the program to be debugged, both in order to read its symbol table and in order to start your program. To debug a core dump of a previous run, you must also tell the name of the core dump file.
You may want to specify executable and core dump file names. The usual way to do this is at start-up time, using the arguments to 's start-up commands (see section Getting In and Out of).
Occasionally it is necessary to change to a different file during a session. Or you may run and forget to specify a file you want to use. In these situations the commands to specify new files are useful.
file filename
run
command. If you do not specify a
directory and the file is not found in the working directory,
uses the environment variable PATH
as a list of
directories to search, just as the shell does when looking for a program
to run. You can change the value of this variable, for both
and your program, using the path
command.
On systems with memory-mapped files, an auxiliary file named
`filename.syms' may hold symbol table information for
filename. If so, maps in the symbol table from
`filename.syms', starting up more quickly. See the
descriptions of the file options `-mapped' and `-readnow'
(available on the command line, and with the commands file
,
symbol-file
, or add-symbol-file
, described below),
for more information.
file
file
with no argument makes discard any information it
has on both executable file and the symbol table.
exec-file [ filename ]
PATH
if necessary to locate your program. Omitting filename means to
discard information on the executable file.
symbol-file [ filename ]
PATH
is
searched when necessary. Use the file
command to get both symbol
table and program to run from the same file.
symbol-file
with no argument clears out information on your
program's symbol table.
The symbol-file
command causes to forget the contents
of its convenience variables, the value history, and all breakpoints and
auto-display expressions. This is because they may contain pointers to
the internal data recording symbols and data types, which are part of
the old symbol table data being discarded inside .
symbol-file
does not repeat if you press RET again after
executing it once.
When is configured for a particular environment, it
understands debugging information in whatever format is the standard
generated for that environment; you may use either a GNU compiler, or
other compilers that adhere to the local conventions.
Best results are usually obtained from GNU compilers; for example,
using
you can generate debugging information for
optimized code.
For most kinds of object files, with the exception of old SVR3 systems
using COFF, the symbol-file
command does not normally read the
symbol table in full right away. Instead, it scans the symbol table
quickly to find which source files and which symbols are present. The
details are read later, one source file at a time, as they are needed.
The purpose of this two-stage reading strategy is to make
start up faster. For the most part, it is invisible except for
occasional pauses while the symbol table details for a particular source
file are being read. (The set verbose
command can turn these
pauses into messages if desired. See section Optional warnings and messages.)
We have not implemented the two-stage strategy for COFF yet. When the
symbol table is stored in COFF format, symbol-file
reads the
symbol table data in full right away. Note that "stabs-in-COFF"
still does the two-stage strategy, since the debug info is actually
in stabs format.
symbol-file filename [ -readnow ] [ -mapped ]
file filename [ -readnow ] [ -mapped ]
mmap
system call, you can use another option, `-mapped', to
cause to write the symbols for your program into a reusable
file. Future debugging sessions map in symbol information
from this auxiliary symbol file (if the program has not changed), rather
than spending time reading the symbol table from the executable
program. Using the `-mapped' option has the same effect as
starting with the `-mapped' command-line option.
You can use both options together, to make sure the auxiliary symbol
file has all the symbol information for your program.
The auxiliary symbol file for a program called myprog is called
`myprog.syms'. Once this file exists (so long as it is newer
than the corresponding executable), always attempts to use
it when you debug myprog; no special options or commands are
needed.
The `.syms' file is specific to the host machine where you run
. It holds an exact image of the internal
symbol table. It cannot be shared across multiple host platforms.
core-file [ filename ]
core-file
with no argument specifies that no core file is
to be used.
Note that the core file is ignored when your program is actually running
under . So, if you have been running your program and you
wish to debug a core file instead, you must kill the subprocess in which
the program is running. To do this, use the kill
command
(see section Killing the child process).
add-symbol-file filename address
add-symbol-file filename address [ -readnow ] [ -mapped ]
add-symbol-file filename -ssection address
add-symbol-file
command reads additional symbol table
information from the file filename. You would use this command
when filename has been dynamically loaded (by some other means)
into the program that is running. address should be the memory
address at which the file has been loaded; cannot figure
this out for itself. You can additionally specify an arbitrary number
of `-ssection address' pairs, to give an explicit
section name and base address for that section. You can specify any
address as an expression.
The symbol table of the file filename is added to the symbol table
originally read with the symbol-file
command. You can use the
add-symbol-file
command any number of times; the new symbol data
thus read keeps adding to the old. To discard all old symbol data
instead, use the symbol-file
command without any arguments.
add-symbol-file
does not repeat if you press RET after using it.
You can use the `-mapped' and `-readnow' options just as with
the symbol-file
command, to change how manages the symbol
table information for filename.
add-shared-symbol-file
add-shared-symbol-file
command can be used only under Harris' CXUX
operating system for the Motorola 88k. automatically looks for
shared libraries, however if does not find yours, you can run
add-shared-symbol-file
. It takes no arguments.
section
section
command changes the base address of section SECTION of
the exec file to ADDR. This can be used if the exec file does not contain
section addresses, (such as in the a.out format), or when the addresses
specified in the file itself are wrong. Each section must be changed
separately. The info files
command, described below, lists all
the sections and their addresses.
info files
info target
info files
and info target
are synonymous; both print the
current target (see section Specifying a Debugging Target),
including the names of the executable and core dump files currently in
use by , and the files from which symbols were loaded. The
command help target
lists all possible targets rather than
current ones.
All file-specifying commands allow both absolute and relative file names as arguments. always converts the file name to an absolute file name and remembers it that way.
supports HP-UX, SunOS, SVr4, Irix 5, and IBM RS/6000 shared libraries.
automatically loads symbol definitions from shared libraries
when you use the run
command, or when you examine a core file.
(Before you issue the run
command, does not understand
references to a function in a shared library, however--unless you are
debugging a core file).
On HP-UX, if the program loads a library explicitly,
automatically loads the symbols at the time of the shl_load
call.
info share
info sharedlibrary
sharedlibrary regex
share regex
run
. If
regex is omitted all shared libraries required by your program are
loaded.
On HP-UX systems, detects the loading of a shared library and automatically reads in symbols from the newly loaded library, up to a threshold that is initially set but that you can modify if you wish.
Beyond that threshold, symbols from shared libraries must be explicitly
loaded. To load these symbols, use the command sharedlibrary
filename
. The base address of the shared library is determined
automatically by and need not be specified.
To display or set the threshold, use the commands:
set auto-solib-add threshold
sharedlibrary
command. The default threshold is 100 megabytes.
show auto-solib-add
While reading a symbol file, occasionally encounters problems,
such as symbol types it does not recognize, or known bugs in compiler
output. By default, does not notify you of such problems, since
they are relatively common and primarily of interest to people
debugging compilers. If you are interested in seeing information
about ill-constructed symbol tables, you can either ask to print
only one message about each such type of problem, no matter how many
times the problem occurs; or you can ask to print more messages,
to see how many times the problems occur, with the set
complaints
command (see section Optional warnings and messages).
The messages currently printed, and their meanings, include:
inner block not inside outer block in symbol
(don't know)
" if the outer block is not a
function.
block at address out of order
set verbose on
. See section Optional warnings and messages.)
bad block start address patched
bad string table offset in symbol n
foo
, which may cause other problems if many symbols end up
with this name.
unknown symbol type 0xnn
0xnn
is the symbol type of the
uncomprehended information, in hexadecimal.
circumvents the error by ignoring this symbol information.
This usually allows you to debug your program, though certain symbols
are not accessible. If you encounter such a problem and feel like
debugging it, you can debug
with itself, breakpoint
on complain
, then go up to the function read_dbx_symtab
and examine *bufp
to see the symbol.
stub type has NULL name
const/volatile indicator missing (ok if using g++ v1.x), got...
info mismatch between compiler and debugger
A target is the execution environment occupied by your program.
Often, runs in the same host environment as your program;
in that case, the debugging target is specified as a side effect when
you use the file
or core
commands. When you need more
flexibility--for example, running on a physically separate
host, or controlling a standalone system over a serial port or a
realtime system over a TCP/IP connection--you can use the target
command to specify one of the target types configured for
(see section Commands for managing targets).
There are three classes of targets: processes, core files, and executable files. can work concurrently on up to three active targets, one in each class. This allows you to (for example) start a process and inspect its activity without abandoning your work on a core file.
For example, if you execute `gdb a.out', then the executable file
a.out
is the only active target. If you designate a core file as
well--presumably from a prior run that crashed and coredumped--then
has two active targets and uses them in tandem, looking
first in the corefile target, then in the executable file, to satisfy
requests for memory addresses. (Typically, these two classes of target
are complementary, since core files contain only a program's
read-write memory--variables and so on--plus machine status, while
executable files contain only the program text and initialized data.)
When you type run
, your executable file becomes an active process
target as well. When a process target is active, all
commands requesting memory addresses refer to that target; addresses in
an active core file or executable file target are obscured while the
process target is active.
Use the core-file
and exec-file
commands to select a new
core file or executable target (see section Commands to specify files). To specify as a target a process that is already running, use
the attach
command (see section Debugging an already-running process).
target type parameters
target
command does not repeat if you press RET again
after executing the command.
help target
info target
or info files
(see section Commands to specify files).
help target name
set gnutarget args
set gnutarget
command. Unlike most target
commands,
with gnutarget
the target
refers to a program, not a machine.
See section Commands to specify files.Warning: To specify a file format with
set gnutarget
, you must know the actual BFD name.
show gnutarget
show gnutarget
command to display what file format
gnutarget
is set to read. If you have not set gnutarget
,
will determine the file format for each file automatically,
and show gnutarget
displays `The current BDF target is "auto"'.
Here are some common targets (available, or not, depending on the GDB configuration):
target exec program
target core filename
target remote dev
target remote
supports the load
command. This is only useful if you have
some other way of getting the stub to the target system, and you can put
it somewhere in memory where it won't get clobbered by the download.
target sim
target sim load runworks; however, you cannot assume that a specific memory map, device drivers, or even basic I/O is available, although some simulators do provide these. For info about any processor-specific simulator details, see the appropriate section in section Embedded Processors.
Some configurations may include these targets as well:
target nrom dev
Different targets are available on different configurations of ; your configuration may have more or fewer targets.
Many remote targets require you to download the executable's code once you've successfully established a connection.
load filename
load
command may be available. Where it exists, it
is meant to make filename (an executable) available for debugging
on the remote system--by downloading, or dynamic linking, for example.
load
also records the filename symbol table in , like
the add-symbol-file
command.
If your does not have a load
command, attempting to
execute it gets the error message "You can't do that when your
target is ...
"
The file is loaded at whatever address is specified in the executable.
For some object file formats, you can specify the load address when you
link the program; for other formats, like a.out, the object file format
specifies a fixed address.
load
does not repeat if you press RET again after using it.
Some types of processors, such as the MIPS, PowerPC, and Hitachi SH, offer the ability to run either big-endian or little-endian byte orders. Usually the executable or symbol will include a bit to designate the endian-ness, and you will not need to worry about which to use. However, you may still find it useful to adjust 's idea of processor endian-ness manually.
set endian big
set endian little
set endian auto
show endian
Note that these commands merely adjust interpretation of symbolic data on the host, and that they have absolutely no effect on the target system.
If you are trying to debug a program running on a machine that cannot run in the usual way, it is often useful to use remote debugging. For example, you might use remote debugging on an operating system kernel, or on a small system which does not have a general purpose operating system powerful enough to run a full-featured debugger.
Some configurations of have special serial or TCP/IP interfaces to make this work with particular debugging targets. In addition, comes with a generic serial protocol (specific to , but not specific to any particular target system) which you can use if you write the remote stubs--the code that runs on the remote system to communicate with .
Other remote targets may be available in your
configuration of ; use help target
to list them.
To debug a program running on another machine (the debugging target machine), you must first arrange for all the usual prerequisites for the program to run by itself. For example, for a C program, you need:
The next step is to arrange for your program to use a serial port to communicate with the machine where is running (the host machine). In general terms, the scheme looks like this:
gdbserver
instead of linking a stub into your program.
See section Using the gdbserver
program, for details.
The debugging stub is specific to the architecture of the remote machine; for example, use `sparc-stub.c' to debug programs on SPARC boards.
These working remote stubs are distributed with :
i386-stub.c
m68k-stub.c
sh-stub.c
sparc-stub.c
sparcl-stub.c
The `README' file in the distribution may list other recently added stubs.
The debugging stub for your architecture supplies these three subroutines:
set_debug_traps
handle_exception
to run when your
program stops. You must call this subroutine explicitly near the
beginning of your program.
handle_exception
handle_exception
to
run when a trap is triggered.
handle_exception
takes control when your program stops during
execution (for example, on a breakpoint), and mediates communications
with on the host machine. This is where the communications
protocol is implemented; handle_exception
acts as the
representative on the target machine. It begins by sending summary
information on the state of your program, then continues to execute,
retrieving and transmitting any information needs, until you
execute a command that makes your program resume; at that point,
handle_exception
returns control to your own code on the target
machine.
breakpoint
handle_exception
---in effect, to . On some machines,
simply receiving characters on the serial port may also trigger a trap;
again, in that situation, you don't need to call breakpoint
from
your own program--simply running `target remote' from the host
session gets control.
Call breakpoint
if none of these is true, or if you simply want
to make certain your program stops at a predetermined point for the
start of your debugging session.
The debugging stubs that come with are set up for a particular chip architecture, but they have no information about the rest of your debugging target machine.
First of all you need to tell the stub how to communicate with the serial port.
int getDebugChar()
getchar
for your target system; a
different name is used to allow you to distinguish the two if you wish.
void putDebugChar(int)
putchar
for your target system; a
different name is used to allow you to distinguish the two if you wish.
If you want to be able to stop your program while it is
running, you need to use an interrupt-driven serial driver, and arrange
for it to stop when it receives a ^C
(`\003', the control-C
character). That is the character which uses to tell the
remote system to stop.
Getting the debugging target to return the proper status to
probably requires changes to the standard stub; one quick and dirty way
is to just execute a breakpoint instruction (the "dirty" part is that
reports a SIGTRAP
instead of a SIGINT
).
Other routines you need to supply are:
void exceptionHandler (int exception_number, void *exception_address)
exceptionHandler
.
void flush_i_cache()
You must also make sure this library routine is available:
void *memset(void *, int, int)
memset
that sets an area of
memory to a known value. If you have one of the free versions of
libc.a
, memset
can be found there; otherwise, you must
either obtain it from your hardware manufacturer, or write your own.
If you do not use the GNU C compiler, you may need other standard
library subroutines as well; this varies from one stub to another,
but in general the stubs are likely to use any of the common library
subroutines which generates as inline code.
In summary, when your program is ready to debug, you must follow these steps.
getDebugChar
,putDebugChar
,flush_i_cache
,memset
,exceptionHandler
.
set_debug_traps(); breakpoint();
exceptionHook
. Normally you just use:
void (*exceptionHook)() = 0;but if before calling
set_debug_traps
, you set it to point to a
function in your program, that function is called when
continues after stopping on a trap (for example, bus
error). The function indicated by exceptionHook
is called with
one parameter: an int
which is the exception number.
target remote
command.
Its argument specifies how to communicate with the target
machine--either via a devicename attached to a direct serial line, or a
TCP port (usually to a terminal server which in turn has a serial line
to the target). For example, to use a serial line connected to the
device named `/dev/ttyb':
target remote /dev/ttybTo use a TCP connection, use an argument of the form
host:port
. For example, to connect to port 2828 on a
terminal server named manyfarms
:
target remote manyfarms:2828
Now you can use all the usual commands to examine and change data and to step and continue the remote program.
To resume the remote program and stop debugging it, use the detach
command.
Whenever is waiting for the remote program, if you type the interrupt character (often C-C), attempts to stop the program. This may or may not succeed, depending in part on the hardware and the serial drivers the remote system uses. If you type the interrupt character once again, displays this prompt:
Interrupted while waiting for the program. Give up (and stop debugging it)? (y or n)
If you type y, abandons the remote debugging session. (If you decide you want to try again later, you can use `target remote' again to connect once more.) If you type n, goes back to waiting.
The stub files provided with implement the target side of the communication protocol, and the side is implemented in the source file `remote.c'. Normally, you can simply allow these subroutines to communicate, and ignore the details. (If you're implementing your own stub file, you can still ignore the details: start with one of the existing stub files. `sparc-stub.c' is the best organized, and therefore the easiest to read.)
However, there may be occasions when you need to know something about the protocol--for example, if there is only one serial port to your target machine, you might want your program to do something special if it recognizes a packet meant for .
In the examples below, `<-' and `->' are used to indicate transmitted and received data respectfully.
All commands and responses (other than acknowledgments) are sent as a packet. A packet is introduced with the character `$', the actual packet-data, and the terminating character `#' followed by a two-digit checksum:
$
packet-data#
checksum
The two-digit checksum is computed as the modulo 256 sum of all characters between the leading `$' and the trailing `#' (an eight bit unsigned checksum).
Implementors should note that prior to 5.0 the protocol specification also included an optional two-digit sequence-id:
$
sequence-id:
packet-data#
checksum
That sequence-id was appended to the acknowledgment. has never output sequence-ids. Stubs that handle packets added since 5.0 must not accept sequence-id.
When either the host or the target machine receives a packet, the first response expected is an acknowledgment: either `+' (to indicate the package was received correctly) or `-' (to request retransmission):
<-$
packet-data#
checksum ->+
The host () sends commands, and the target (the debugging stub incorporated in your program) sends a response. In the case of step and continue commands, the response is only sent when the operation has completed (the target has again stopped).
packet-data consists of a sequence of characters with the exception of `#' and `$' (see `X' packet for additional exceptions).
Fields within the packet should be separated using `,' `;' or `:'. Except where otherwise noted all numbers are represented in HEX with leading zeros suppressed.
Implementors should note that prior to 5.0, the character `:' could not appear as the third character in a packet (as it would potentially conflict with the sequence-id).
Response data can be run-length encoded to save space. A `*'
means that the next character is an ASCII encoding giving a repeat count
which stands for that many repetitions of the character preceding the
`*'. The encoding is n+29
, yielding a printable character
where n >=3
(which is where rle starts to win). The printable
characters `$', `#', `+' and `-' or with a numeric
value greater than 126 should not be used.
Some remote systems have used a different run-length encoding mechanism loosely refered to as the cisco encoding. Following the `*' character are two hex digits that indicate the size of the packet.
So:
"0*
"
means the same as "0000".
The error response returned for some packets includes a two character error number. That number is not well defined.
For any command not supported by the stub, an empty response (`$#00') should be returned. That way it is possible to extend the protocol. A newer can tell if a packet is supported based on that response.
A stub is required to support the `g', `G', `m', `M', `c', and `s' commands. All other commands are optional.
Below is a complete list of all currently defined commands and their corresponding response data:
Packet | Request | Description |
extended mode | !
| Enable extended mode. In extended mode, the remote server is made persistent. The `R' packet is used to restart the program being debugged. |
reply `OK' | The remote target both supports and has enabled extended mode. | |
last signal | ?
| Indicate the reason the target halted. The reply is the same as for step and continue. |
reply | see below | |
reserved | a
| Reserved for future use |
set program arguments (reserved) | A arglen, argnum, arg,...
| |
Initialized `argv[]' array passed into program. arglen specifies the number of bytes in the hex encoded byte stream arg. See `gdbserver' for more details. | ||
reply OK
| ||
reply E NN
| ||
set baud (deprecated) | b baud
| Change the serial line speed to baud. JTC: When does the transport layer state change? When it's received, or after the ACK is transmitted. In either case, there are problems if the command or the acknowledgment packet is dropped. Stan: If people really wanted to add something like this, and get it working for the first time, they ought to modify ser-unix.c to send some kind of out-of-band message to a specially-setup stub and have the switch happen "in between" packets, so that from remote protocol's point of view, nothing actually happened. |
set breakpoint (deprecated) | B addr,mode
| Set (mode is `S') or clear (mode is `C') a breakpoint at addr. This has been replaced by the `Z' and `z' packets. |
continue | c addr
| addr is address to resume. If addr is omitted, resume at current address. |
reply | see below | |
continue with signal | C sig; addr
|
Continue with signal sig (hex signal number). If
; addr is omitted, resume at same address.
|
reply | see below | |
toggle debug (deprecated) | d
| toggle debug flag. |
detach | D
| Detach from the remote system. Sent to the remote target before disconnects. |
reply no response | does not check for any response after sending this packet. | |
reserved | e
| Reserved for future use |
reserved | E
| Reserved for future use |
reserved | f
| Reserved for future use |
reserved | F
| Reserved for future use |
read registers | g
| Read general registers. |
reply XX... |
Each byte of register data is described by two hex digits. The bytes
with the register are transmitted in target byte order. The size of
each register and their position within the `g' packet are
determined by the internal macros REGISTER_RAW_SIZE and
REGISTER_NAME macros. The specification of several standard
g packets is specified below.
| |
E NN
| for an error. | |
write regs | G XX...
| See `g' for a description of the XX... data. |
reply OK
| for success | |
reply E NN
| for an error | |
reserved | h
| Reserved for future use |
set thread | H ct...
| Set thread for subsequent operations (`m', `M', `g', `G', et.al.). c = `c' for thread used in step and continue; t... can be -1 for all threads. c = `g' for thread used in other operations. If zero, pick a thread, any thread. |
reply OK
| for success | |
reply E NN
| for an error | |
cycle step (draft) | i addr, nnn
|
Step the remote target by a single clock cycle. If , nnn is
present, cycle step nnn cycles. If addr is present, cycle
step starting at that address.
|
signal then cycle step (reserved) | I
| See `i' and `S' for likely syntax and semantics. |
reserved | j
| Reserved for future use |
reserved | J
| Reserved for future use |
kill request | k
| FIXME: There is no description of how operate when a specific thread context has been selected (ie. does 'k' kill only that thread?). |
reserved | l
| Reserved for future use |
reserved | L
| Reserved for future use |
read memory | m addr, length
| Read length bytes of memory starting at address addr. Neither nor the stub assume that sized memory transfers are assumed using word alligned accesses. FIXME: A word aligned memory transfer mechanism is needed. |
reply XX... | XX... is mem contents. Can be fewer bytes than requested if able to read only part of the data. Neither nor the stub assume that sized memory transfers are assumed using word alligned accesses. FIXME: A word aligned memory transfer mechanism is needed. | |
reply E NN
| NN is errno | |
write mem | M addr,length: XX...
| Write length bytes of memory starting at address addr. XX... is the data. |
reply OK
| for success | |
reply E NN
| for an error (this includes the case where only part of the data was written). | |
reserved | n
| Reserved for future use |
reserved | N
| Reserved for future use |
reserved | o
| Reserved for future use |
reserved | O
| Reserved for future use |
read reg (reserved) | p n...
| See write register. |
return r.... | The hex encoded value of the register in target byte order. | |
write reg | P n...= r...
| Write register n... with value r..., which contains two hex digits for each byte in the register (target byte order). |
reply OK
| for success | |
reply E NN
| for an error | |
general query | q query
| Request info about query. In general queries have a leading upper case letter. Custom vendor queries should use a company prefix (in lower case) ex: `qfsf.var'. query may optionally be followed by a `,' or `;' separated list. Stubs must ensure that they match the full query name. |
reply XX...
| Hex encoded data from query. The reply can not be empty. | |
reply E NN
| error reply | |
reply `' | Indicating an unrecognized query. | |
general set | Q var= val
| Set value of var to val. See `q' for a discussing of naming conventions. |
reset (deprecated) | r
| Reset the entire system. |
remote restart | R XX
| Restart the program being debugged. XX, while needed, is ignored. This packet is only available in extended mode. |
no reply | The `R' packet has no reply. | |
step | s addr
| addr is address to resume. If addr is omitted, resume at same address. |
reply | see below | |
step with signal | S sig; addr
| Like `C' but step not continue. |
reply | see below | |
search | t addr: PP, MM
| Search backwards starting at address addr for a match with pattern PP and mask MM. PP and MM are 4 bytes. addr must be at least 3 digits. |
thread alive | T XX
| Find out if the thread XX is alive. |
reply OK
| thread is still alive | |
reply E NN
| thread is dead | |
reserved | u
| Reserved for future use |
reserved | U
| Reserved for future use |
reserved | v
| Reserved for future use |
reserved | V
| Reserved for future use |
reserved | w
| Reserved for future use |
reserved | W
| Reserved for future use |
reserved | x
| Reserved for future use |
write mem (binary) | X addr, length:XX...
|
addr is address, length is number of bytes, XX... is
binary data. The characters $ , # , and 0x7d are
escaped using 0x7d .
|
reply OK
| for success | |
reply E NN
| for an error | |
reserved | y
| Reserved for future use |
reserved | Y
| Reserved for future use |
remove break or watchpoint (draft) | z t, addr, length
| See `Z'. |
insert break or watchpoint (draft) | Z t, addr, length
| t is type: `0' - software breakpoint, `1' - hardware breakpoint, `2' - write watchpoint, `3' - read watchpoint, `4' - access watchpoint; addr is address; length is in bytes. For a software breakpoint, length specifies the size of the instruction to be patched. For hardware breakpoints and watchpoints length specifies the memory region to be monitored. To avoid potential problems with duplicate packets, the operations should be implemented in an idempotent way. |
reply E NN
| for an error | |
reply OK
| for success | |
`' | If not supported. | |
reserved | <other> | Reserved for future use |
The `C', `c', `S', `s' and `?' packets can receive any of the below as a reply. In the case of the `C', `c', `S' and `s' packets, that reply is only returned when the target halts. In the below the exact meaning of `signal number' is poorly defined. In general one of the UNIX signal numbering conventions is used.
S AA |
AA is the signal number |
T AAn...: r...; n...: r...; n...: r...; |
AA = two hex digit signal number; n... = register number
(hex), r... = target byte ordered register contents, size defined
by REGISTER_RAW_SIZE ; n... = `thread', r... =
thread process ID, this is a hex integer; n... = other string not
starting with valid hex digit. should ignore this
n..., r... pair and go on to the next. This way we can
extend the protocol.
|
W AA |
The process exited, and AA is the exit status. This is only applicable for certains sorts of targets. |
X AA |
The process terminated with signal AA. |
N AA; t...; d...; b... (obsolete) |
AA = signal number; t... = address of symbol "_start"; d... = base of data section; b... = base of bss section. Note: only used by Cisco Systems targets. The difference between this reply and the "qOffsets" query is that the 'N' packet may arrive spontaneously whereas the 'qOffsets' is a query initiated by the host debugger. |
O XX... |
XX... is hex encoding of ASCII data. This can happen at any time while the program is running and the debugger should continue to wait for 'W', 'T', etc. |
The following set and query packets have already been defined.
current thread | q C
| Return the current thread id. |
reply QC pid
| Where pid is a HEX encoded 16 bit process id. | |
reply * | Any other reply implies the old pid. | |
all thread ids | q fThreadInfo
| |
q sThreadInfo
|
Obtain a list of active thread ids from the target (OS). Since there
may be too many active threads to fit into one reply packet, this query
works iteratively: it may require more than one query/reply sequence to
obtain the entire list of threads. The first query of the sequence will
be the qf ThreadInfo query; subsequent queries in the
sequence will be the qs ThreadInfo query.
| |
NOTE: replaces the qL query (see below).
| ||
reply m <id>
| A single thread id | |
reply m <id>,<id>...
| a comma-separated list of thread ids | |
reply l
| (lower case 'el') denotes end of list. | |
In response to each query, the target will reply with a list of one
or more thread ids, in big-endian hex, separated by commas. GDB will
respond to each reply with a request for more thread ids (using the
qs form of the query), until the target responds with l
(lower-case el, for 'last' ).
| ||
extra thread info | q ThreadExtraInfo , id
| |
Where <id> is a thread-id in big-endian hex. Obtain a printable string description of a thread's attributes from the target OS. This string may contain anything that the target OS thinks is interesting for to tell the user about the thread. The string is displayed in 's `info threads' display. Some examples of possible thread extra info strings are "Runnable", or "Blocked on Mutex". | ||
reply XX... | Where XX... is a hex encoding of ASCII data, comprising the printable string containing the extra information about the thread's attributes. | |
query LIST or threadLIST (deprecated) | q L startflagthreadcountnextthread
| |
Obtain thread information from RTOS. Where: startflag (one hex digit) is one to indicate the first query and zero to indicate a subsequent query; threadcount (two hex digits) is the maximum number of threads the response packet can contain; and nextthread (eight hex digits), for subsequent queries (startflag is zero), is returned in the response as argthread. | ||
NOTE: this query is replaced by the q fThreadInfo
query (see above).
| ||
reply q M countdoneargthreadthread...
| ||
Where: count (two hex digits) is the number of threads being
returned; done (one hex digit) is zero to indicate more threads
and one indicates no further threads; argthreadid (eight hex
digits) is nextthread from the request packet; thread... is
a sequence of thread IDs from the target. threadid (eight hex
digits). See remote.c:parse_threadlist_response() .
| ||
compute CRC of memory block | q CRC: addr, length
| |
reply E NN
| An error (such as memory fault) | |
reply C CRC32
| A 32 bit cyclic redundancy check of the specified memory region. | |
query sect offs | q Offsets
|
Get section offsets that the target used when re-locating the downloaded
image. Note: while a Bss offset is included in the
response, ignores this and instead applies the Data
offset to the Bss section.
|
reply Text= xxx;Data= yyy;Bss= zzz
| ||
thread info request | q P modethreadid
| |
Returns information on threadid. Where: mode is a hex encoded 32 bit mode; threadid is a hex encoded 64 bit thread ID. | ||
reply * |
See remote.c:remote_unpack_thread_info_response() .
| |
remote command | q Rcmd, COMMAND
| |
COMMAND (hex encoded) is passed to the local interpreter for
execution. Invalid commands should be reported using the output string.
Before the final result packet, the target may also respond with a
number of intermediate O OUTPUT console output
packets. Implementors should note that providing access to a
stubs's interpreter may have security implications.
| ||
reply OK
| A command response with no output. | |
reply OUTPUT | A command response with the hex encoded output string OUTPUT. | |
reply E NN
| Indicate a badly formed request. | |
reply `' | When `q'`Rcmd' is not recognized. | |
symbol lookup | qSymbol::
| Notify the target that is prepared to serve symbol lookup requests. Accept requests from the target for the values of symbols. |
reply OK
| The target does not need to look up any (more) symbols. | |
reply qSymbol: sym_name
|
The target requests the value of symbol sym_name (hex encoded).
may provide the value by using the
qSymbol: sym_value:sym_name
message, described below.
| |
symbol value | qSymbol: sym_value:sym_name
| Set the value of SYM_NAME to SYM_VALUE. |
sym_name (hex encoded) is the name of a symbol whose value the target has previously requested. | ||
sym_value (hex) is the value for symbol sym_name. If cannot supply a value for sym_name, then this field will be empty. | ||
reply OK
| The target does not need to look up any (more) symbols. | |
reply qSymbol: sym_name
| The target requests the value of a new symbol sym_name (hex encoded). will continue to supply the values of symbols (if available), until the target ceases to request them. |
The following `g'/`G' packets have previously been defined. In the below, some thirty-two bit registers are transferred as sixty-four bits. Those registers should be zero/sign extended (which?) to fill the space allocated. Register bytes are transfered in target byte order. The two nibbles within a register byte are transfered most-significant - least-significant.
MIPS32 | All registers are transfered as thirty-two bit quantities in the order: 32 general-purpose; sr; lo; hi; bad; cause; pc; 32 floating-point registers; fsr; fir; fp. |
MIPS64 |
All registers are transfered as sixty-four bit quantities (including
thirty-two bit registers such as sr ). The ordering is the same
as MIPS32 .
|
Example sequence of a target being re-started. Notice how the restart does not get any direct output:
<-R00
->+
target restarts <-?
->+
->T001:1234123412341234
<-+
Example sequence of a target being stepped by a single instruction:
<-G1445...
->+
<-s
->+
time passes ->T001:1234123412341234
<-+
<-g
->+
->1455...
<-+
gdbserver
program
gdbserver
is a control program for Unix-like systems, which
allows you to connect your program with a remote via
target remote
---but without linking in the usual debugging stub.
gdbserver
is not a complete replacement for the debugging stubs,
because it requires essentially the same operating-system facilities
that itself does. In fact, a system that can run
gdbserver
to connect to a remote could also run
locally! gdbserver
is sometimes useful nevertheless,
because it is a much smaller program than itself. It is
also easier to port than all of , so you may be able to get
started more quickly on a new system by using gdbserver
.
Finally, if you develop code for real-time systems, you may find that
the tradeoffs involved in real-time operation make it more convenient to
do as much development work as possible on another system, for example
by cross-compiling. You can use gdbserver
to make a similar
choice for debugging.
and gdbserver
communicate via either a serial line
or a TCP connection, using the standard remote serial
protocol.
gdbserver
does not need your program's symbol table, so you can
strip the program if necessary to save space. on the host
system does all the symbol handling.
To use the server, you must tell it how to communicate with ;
the name of your program; and the arguments for your program. The
syntax is:
target> gdbserver comm program [ args ... ]comm is either a device name (to use a serial line) or a TCP hostname and portnumber. For example, to debug Emacs with the argument `foo.txt' and communicate with over the serial port `/dev/com1':
target> gdbserver /dev/com1 emacs foo.txt
gdbserver
waits passively for the host to communicate
with it.
To use a TCP connection instead of a serial line:
target> gdbserver host:2345 emacs foo.txtThe only difference from the previous example is the first argument, specifying that you are communicating with the host via TCP. The `host:2345' argument means that
gdbserver
is to
expect a TCP connection from machine `host' to local TCP port 2345.
(Currently, the `host' part is ignored.) You can choose any number
you want for the port number as long as it does not conflict with any
TCP ports already in use on the target system (for example, 23
is
reserved for telnet
).(5) You must use the same port number with the host
target remote
command.
target
remote
to establish communications with gdbserver
. Its argument
is either a device name (usually a serial device, like
`/dev/ttyb'), or a TCP port descriptor in the form
host:PORT
. For example:
() target remote /dev/ttybcommunicates with the server via serial line `/dev/ttyb', and
() target remote the-target:2345communicates via a TCP connection to port 2345 on host `the-target'. For TCP connections, you must start up
gdbserver
prior to using
the target remote
command. Otherwise you may get an error whose
text depends on the host system, but which usually looks something like
`Connection refused'.
gdbserve.nlm
program
gdbserve.nlm
is a control program for NetWare systems, which
allows you to connect your program with a remote via
target remote
.
and gdbserve.nlm
communicate via a serial line,
using the standard remote serial protocol.
gdbserve.nlm
does not need your program's symbol table, so you
can strip the program if necessary to save space. on the
host system does all the symbol handling.
To use the server, you must tell it how to communicate with
; the name of your program; and the arguments for your
program. The syntax is:
load gdbserve [ BOARD=board ] [ PORT=port ] [ BAUD=baud ] program [ args ... ]board and port specify the serial line; baud specifies the baud rate used by the connection. port and node default to 0, baud defaults to 9600bps. For example, to debug Emacs with the argument `foo.txt'and communicate with over serial port number 2 or board 1 using a 19200bps connection:
load gdbserve BOARD=1 PORT=2 BAUD=19200 emacs foo.txt
target
remote
to establish communications with gdbserve.nlm
. Its
argument is a device name (usually a serial device, like
`/dev/ttyb'). For example:
() target remote /dev/ttybcommunications with the server via serial line `/dev/ttyb'.
Some targets support kernel object display. Using this facility, communicates specially with the underlying operating system and can display information about operating system-level objects such as mutexes and other synchronization objects. Exactly which objects can be displayed is determined on a per-OS basis.
Use the set os
command to set the operating system. This tells
which kernel object display module to initialize:
() set os cisco
If set os
succeeds, will display some information
about the operating system, and will create a new info
command
which can be used to query the target. The info
command is named
after the operating system:
() info cisco List of Cisco Kernel Objects Object Description any Any and all objects
Further subcommands can be used to query about particular objects known by the kernel.
There is currently no way to determine whether a given operating system is supported other than to try it.
While nearly all commands are available for all native and cross versions of the debugger, there are some exceptions. This chapter describes things that are only available in certain configurations.
There are three major categories of configurations: native configurations, where the host and target are the same, embedded operating system configurations, which are usually the same for several different processor architectures, and bare embedded processors, which are quite different from each other.
This section describes details specific to particular native configurations.
On HP-UX systems, if you refer to a function or variable name that begins with a dollar sign, searches for a user or system name first, before it searches for a convenience variable.
Many versions of SVR4 provide a facility called `/proc' that can be
used to examine the image of a running process using file-system
subroutines. If is configured for an operating system with
this facility, the command info proc
is available to report on
several kinds of information about the process running your program.
info proc
works only on SVR4 systems that include the
procfs
code. This includes OSF/1 (Digital Unix), Solaris, Irix,
and Unixware, but not HP-UX or Linux, for example.
info proc
info proc mappings
info proc times
info proc id
info proc status
info proc all
DJGPP is the port of GNU development tools to MS-DOS and MS-Windows. DJGPP programs are 32-bit protected-mode programs that use the DPMI (DOS Protected-Mode Interface) API to run on top of real-mode DOS systems and their emulations.
supports native debugging of DJGPP programs, and defines a few commands specific to the DJGPP port. This subsection describes those commands.
info dos
info dos sysinfo
info dos gdt
info dos ldt
info dos idt
() info dos ldt $ds 0x13f: base=0x11970000 limit=0x0009ffff 32-Bit Data (Read/Write, Exp-up)This comes in handy when you want to see whether a pointer is outside the data segment's limit (i.e. garbled).
info dos pde
info dos pte
info dos address-pte
i
is stored:
() info dos address-pte __djgpp_base_address + (char *)&i Page Table entry for address 0x11a00d30: Base=0x02698000 Dirty Acc. Not-Cached Write-Back Usr Read-Write +0xd30This says that
i
is stored at offset 0xd30
from the page
whose physical base address is 0x02698000
, and prints all the
attributes of that page.
Note that you must cast the addresses of variables to a char *
,
since otherwise the value of __djgpp_base_address
, the base
address of all variables and functions in a DJGPP program, will
be added using the rules of C pointer arithmetics: if i
is
declared an int
, will add 4 times the value of
__djgpp_base_address
to the address of i
.
Here's another example, it displays the Page Table entry for the
transfer buffer:
() info dos address-pte *((unsigned *)&_go32_info_block + 3) Page Table entry for address 0x29110: Base=0x00029000 Dirty Acc. Not-Cached Write-Back Usr Read-Write +0x110(The
+ 3
offset is because the transfer buffer's address is the
3rd member of the _go32_info_block
structure.) The output of
this command clearly shows that addresses in conventional memory are
mapped 1:1, i.e. the physical and linear addresses are identical.
This command is supported only with some DPMI servers.
This section describes configurations involving the debugging of embedded operating systems that are available for several different architectures.
includes the ability to debug programs running on various real-time operating systems.
target vxworks machinename
On VxWorks, load
links filename dynamically on the
current target system as well as adding its symbols in .
enables developers to spawn and debug tasks running on networked
VxWorks targets from a Unix host. Already-running tasks spawned from
the VxWorks shell can also be debugged. uses code that runs on
both the Unix host and on the VxWorks target. The program
is installed and executed on the Unix host. (It may be
installed with the name
vxgdb
, to distinguish it from a
for debugging programs on the host itself.)
VxWorks-timeout args
vxworks-timeout
.
This option is set by the user, and args represents the number of
seconds waits for responses to rpc's. You might use this if
your VxWorks target is a slow software simulator or is on the far side
of a thin network line.
The following information on connecting to VxWorks was current when this manual was produced; newer releases of VxWorks may use revised procedures.
To use with VxWorks, you must rebuild your VxWorks kernel
to include the remote debugging interface routines in the VxWorks
library `rdb.a'. To do this, define INCLUDE_RDB
in the
VxWorks configuration file `configAll.h' and rebuild your VxWorks
kernel. The resulting kernel contains `rdb.a', and spawns the
source debugging task tRdbTask
when VxWorks is booted. For more
information on configuring and remaking VxWorks, see the manufacturer's
manual.
Once you have included `rdb.a' in your VxWorks system image and set
your Unix execution search path to find , you are ready to
run . From your Unix host, run (or
vxgdb
, depending on your installation).
comes up showing the prompt:
(vxgdb)
The command target
lets you connect to a VxWorks target on the
network. To connect to a target whose host name is "tt
", type:
(vxgdb) target vxworks tt
displays messages like these:
Attaching remote machine across net... Connected to tt.
then attempts to read the symbol tables of any object modules loaded into the VxWorks target since it was last booted. locates these files by searching the directories listed in the command search path (see section Your program's environment); if it fails to find an object file, it displays a message such as:
prog.o: No such file or directory.
When this happens, add the appropriate directory to the search path with
the command path
, and execute the target
command again.
If you have connected to the VxWorks target and you want to debug an
object that has not yet been loaded, you can use the
load
command to download a file from Unix to VxWorks
incrementally. The object file given as an argument to the load
command is actually opened twice: first by the VxWorks target in order
to download the code, then by in order to read the symbol
table. This can lead to problems if the current working directories on
the two systems differ. If both systems have NFS mounted the same
filesystems, you can avoid these problems by using absolute paths.
Otherwise, it is simplest to set the working directory on both systems
to the directory in which the object file resides, and then to reference
the file by its name, without any path. For instance, a program
`prog.o' may reside in `vxpath/vw/demo/rdb' in VxWorks
and in `hostpath/vw/demo/rdb' on the host. To load this
program, type this on VxWorks:
-> cd "vxpath/vw/demo/rdb"
Then, in , type:
(vxgdb) cd hostpath/vw/demo/rdb (vxgdb) load prog.o
displays a response similar to this:
Reading symbol data from wherever/vw/demo/rdb/prog.o... done.
You can also use the load
command to reload an object module
after editing and recompiling the corresponding source file. Note that
this makes delete all currently-defined breakpoints,
auto-displays, and convenience variables, and to clear the value
history. (This is necessary in order to preserve the integrity of
debugger's data structures that reference the target system's symbol
table.)
You can also attach to an existing task using the attach
command as
follows:
(vxgdb) attach task
where task is the VxWorks hexadecimal task ID. The task can be running or suspended when you attach to it. Running tasks are suspended at the time of attachment.
This section goes into details specific to particular embedded configurations.
target adapt dev
target amd-eb dev speed PROG
target remote
;
speed allows you to specify the linespeed; and PROG is the
name of the program to be debugged, as it appears to DOS on the PC.
See section EBMON protocol for AMD29K.
supports AMD's UDI ("Universal Debugger Interface")
protocol for debugging the a29k processor family. To use this
configuration with AMD targets running the MiniMON monitor, you need the
program MONTIP
, available from AMD at no charge. You can also
use with the UDI-conformant a29k simulator program
ISSTIP
, also available from AMD.
target udi keyword
AMD distributes a 29K development board meant to fit in a PC, together
with a DOS-hosted monitor program called EBMON
. As a shorthand
term, this development system is called the "EB29K". To use
from a Unix system to run programs on the EB29K board, you
must first connect a serial cable between the PC (which hosts the EB29K
board) and a serial port on the Unix system. In the following, we
assume you've hooked the cable between the PC's `COM1' port and
`/dev/ttya' on the Unix system.
The next step is to set up the PC's port, by doing something like this in DOS on the PC:
C:\> MODE com1:9600,n,8,1,none
This example--run on an MS DOS 4.0 system--sets the PC port to 9600 bps, no parity, eight data bits, one stop bit, and no "retry" action; you must match the communications parameters when establishing the Unix end of the connection as well.
To give control of the PC to the Unix side of the serial line, type the following at the DOS console:
C:\> CTTY com1
(Later, if you wish to return control to the DOS console, you can use
the command CTTY con
---but you must send it over the device that
had control, in our example over the `COM1' serial line.)
From the Unix host, use a communications program such as tip
or
cu
to communicate with the PC; for example,
cu -s 9600 -l /dev/ttya
The cu
options shown specify, respectively, the linespeed and the
serial port to use. If you use tip
instead, your command line
may look something like the following:
tip -9600 /dev/ttya
Your system may require a different name where we show
`/dev/ttya' as the argument to tip
. The communications
parameters, including which port to use, are associated with the
tip
argument in the "remote" descriptions file--normally the
system table `/etc/remote'.
Using the tip
or cu
connection, change the DOS working
directory to the directory containing a copy of your 29K program, then
start the PC program EBMON
(an EB29K control program supplied
with your board by AMD). You should see an initial display from
EBMON
similar to the one that follows, ending with the
EBMON
prompt `#'---
C:\> G: G:\> CD \usr\joe\work29k G:\USR\JOE\WORK29K> EBMON Am29000 PC Coprocessor Board Monitor, version 3.0-18 Copyright 1990 Advanced Micro Devices, Inc. Written by Gibbons and Associates, Inc. Enter '?' or 'H' for help PC Coprocessor Type = EB29K I/O Base = 0x208 Memory Base = 0xd0000 Data Memory Size = 2048KB Available I-RAM Range = 0x8000 to 0x1fffff Available D-RAM Range = 0x80002000 to 0x801fffff PageSize = 0x400 Register Stack Size = 0x800 Memory Stack Size = 0x1800 CPU PRL = 0x3 Am29027 Available = No Byte Write Available = Yes # ~.
Then exit the cu
or tip
program (done in the example by
typing ~.
at the EBMON
prompt). EBMON
keeps
running, ready for to take over.
For this example, we've assumed what is probably the most convenient way to make sure the same 29K program is on both the PC and the Unix system: a PC/NFS connection that establishes "drive `G:'" on the PC as a file system on the Unix host. If you do not have PC/NFS or something similar connecting the two systems, you must arrange some other way--perhaps floppy-disk transfer--of getting the 29K program from the Unix system to the PC; does not download it over the serial line.
Finally, cd
to the directory containing an image of your 29K
program on the Unix system, and start ---specifying as argument the
name of your 29K program:
cd /usr/joe/work29k myfoo
Now you can use the target
command:
target amd-eb /dev/ttya 9600 MYFOO
In this example, we've assumed your program is in a file called
`myfoo'. Note that the filename given as the last argument to
target amd-eb
should be the name of the program as it appears to DOS.
In our example this is simply MYFOO
, but in general it can include
a DOS path, and depending on your transfer mechanism may not resemble
the name on the Unix side.
At this point, you can set any breakpoints you wish; when you are ready
to see your program run on the 29K board, use the command
run
.
To stop debugging the remote program, use the detach
command.
To return control of the PC to its console, use tip
or cu
once again, after your session has concluded, to attach to
EBMON
. You can then type the command q
to shut down
EBMON
, returning control to the DOS command-line interpreter.
Type CTTY con to return command input to the main DOS console,
and type ~. to leave tip
or cu
.
The target amd-eb
command creates a file `eb.log' in the
current working directory, to help debug problems with the connection.
`eb.log' records all the output from EBMON
, including echoes
of the commands sent to it. Running `tail -f' on this file in
another window often helps to understand trouble with EBMON
, or
unexpected events on the PC side of the connection.
target rdi dev
target rdp dev
target hms dev
device
and speed
to control the serial
line and the communications speed used.
target e7000 dev
target sh3 dev
target sh3e dev
When you select remote debugging to a Hitachi SH, H8/300, or H8/500
board, the load
command downloads your program to the Hitachi
board and also opens it as the current executable target for
on your host (like the file
command).
needs to know these things to talk to your Hitachi SH, H8/300, or H8/500:
Use the special command `device port' if you
need to explicitly set the serial device. The default port is the
first available port on your host. This is only necessary on Unix
hosts, where it is typically something like `/dev/ttya'.
has another special command to set the communications
speed: `speed bps'. This command also is only used from Unix
hosts; on DOS hosts, set the line speed as usual from outside with
the DOS
mode
command (for instance,
mode com2:9600,n,8,1,p for a 9600bps connection).
The `device' and `speed' commands are available only when you
use a Unix host to debug your Hitachi microprocessor programs. If you
use a DOS host,
depends on an auxiliary terminate-and-stay-resident program
called asynctsr
to communicate with the development board
through a PC serial port. You must also use the DOS mode
command
to set up the serial port on the DOS side.
The following sample session illustrates the steps needed to start a program under control on an H8/300. The example uses a sample H8/300 program called `t.x'. The procedure is the same for the Hitachi SH and the H8/500.
First hook up your development board. In this example, we use a
board attached to serial port COM2
; if you use a different serial
port, substitute its name in the argument of the mode
command.
When you call asynctsr
, the auxiliary comms program used by the
debugger, you give it just the numeric part of the serial port's name;
for example, `asyncstr 2' below runs asyncstr
on
COM2
.
C:\H8300\TEST> asynctsr 2 C:\H8300\TEST> mode com2:9600,n,8,1,p Resident portion of MODE loaded COM2: 9600, n, 8, 1, p
Warning: We have noticed a bug in PC-NFS that conflicts with
asynctsr
. If you also run PC-NFS on your DOS host, you may need to disable it, or even boot without it, to useasynctsr
to control your development board.
Now that serial communications are set up, and the development board is
connected, you can start up . Call with
the name of your program as the argument.
prompts
you, as usual, with the prompt `()'. Use two special
commands to begin your debugging session: `target hms' to specify
cross-debugging to the Hitachi board, and the
load
command to
download your program to the board. load
displays the names of
the program's sections, and a `*' for each 2K of data downloaded.
(If you want to refresh data on symbols or on the
executable file without downloading, use the commands
file
or symbol-file
. These commands, and load
itself, are described in section Commands to specify files.)
(eg-C:\H8300\TEST) t.x is free software and you are welcome to distribute copies of it under certain conditions; type "show copying" to see the conditions. There is absolutely no warranty for ; type "show warranty" for details. , Copyright 1992 Free Software Foundation, Inc... () target hms Connected to remote H8/300 HMS system. () load t.x .text : 0x8000 .. 0xabde *********** .data : 0xabde .. 0xad30 * .stack : 0xf000 .. 0xf014 *
At this point, you're ready to run or debug your program. From here on,
you can use all the usual commands. The break
command
sets breakpoints; the run
command starts your program;
print
or x
display data; the continue
command
resumes execution after stopping at a breakpoint. You can use the
help
command at any time to find out more about commands.
Remember, however, that operating system facilities aren't available on your development board; for example, if your program hangs, you can't send an interrupt--but you can press the RESET switch!
Use the RESET button on the development board
In either case, sees the effect of a RESET on the development board as a "normal exit" of your program.
You can use the E7000 in-circuit emulator to develop code for either the Hitachi SH or the H8/300H. Use one of these forms of the `target e7000' command to connect to your E7000:
target e7000 port speed
target e7000 hostname
telnet
to connect.
Some commands are available only for the H8/300:
set machine h8300
set machine h8300h
set memory mod
show memory
small
,
big
, medium
, and compact
.
target mon960 dev
target nindy devicename
Nindy is a ROM Monitor program for Intel 960 target systems. When is configured to control a remote Intel 960 using Nindy, you can tell how to connect to the 960 in several ways:
target
command at any point during your
session. See section Commands for managing targets.
With the Nindy interface to an Intel 960 board, load
downloads filename to the 960 as well as adding its symbols in
.
If you simply start without using any command-line
options, you are prompted for what serial port to use, before you
reach the ordinary prompt:
Attach /dev/ttyNN -- specify NN, or "quit" to quit:
Respond to the prompt with whatever suffix (after `/dev/tty')
identifies the serial port you want to use. You can, if you choose,
simply start up with no Nindy connection by responding to the prompt
with an empty line. If you do this and later wish to attach to Nindy,
use target
(see section Commands for managing targets).
These are the startup options for beginning your session with a Nindy-960 board attached:
-r port
tty
(e.g. `-r a').
-O
Warning: if you specify `-O', but are actually trying to connect to a target system that expects the newer protocol, the connection fails, appearing to be a speed mismatch. repeatedly attempts to reconnect at several different line speeds. You can abort this process with an interrupt.
-brk
BREAK
signal to the target
system, in an attempt to reset it, before connecting to a Nindy target.
Warning: Many target systems do not have the hardware that this requires; it only works with a few boards.
The standard `-b' option controls the line speed used on the serial port.
reset
target m32r dev
The Motorola m68k configuration includes ColdFire support, and target command for the following ROM monitors.
target abug dev
target cpu32bug dev
target dbug dev
target est dev
target rom68k dev
If is configured with m68*-ericsson-*
, it will
instead have only a single special target command:
target es1800 dev
[context?]
target rombug dev
target bug dev
can use the MIPS remote debugging protocol to talk to a MIPS board attached to a serial line. This is available when you configure with `--target=mips-idt-ecoff'.
Use these commands to specify the connection to your target board:
target mips port
with the
name of your program as the argument. To connect to the board, use the
command `target mips port', where port is the name of
the serial port connected to the board. If the program has not already
been downloaded to the board, you may use the load
command to
download it. You can then use all the usual commands.
For example, this sequence connects to the target board through a serial
port, and loads and runs a program called prog through the
debugger:
host$ prog is free software and ... () target mips /dev/ttyb () load prog () run
target mips hostname:portnumber
target pmon port
target ddb port
target lsi port
target r3900 dev
target array dev
also supports these special commands for MIPS targets:
set processor args
show processor
set processor
command to set the type of MIPS
processor when you want to access processor-type-specific registers.
For example, set processor r3041
tells
to use the CPU registers appropriate for the 3041 chip.
Use the show processor
command to see what MIPS processor
is using. Use the info reg
command to see what registers
is using.
set mipsfpu double
set mipsfpu single
set mipsfpu none
show mipsfpu
mipsfpu
variable with
`show mipsfpu'.
set remotedebug n
show remotedebug
remotedebug
variable. If you set it to 1
using
`set remotedebug 1', every packet is displayed. If you set it
to 2
, every character is displayed. You can check the current value
at any time with the command `show remotedebug'.
set timeout seconds
set retransmit-timeout seconds
show timeout
show retransmit-timeout
set timeout seconds
command. The
default is 5 seconds. Similarly, you can control the timeout used while
waiting for an acknowledgement of a packet with the set
retransmit-timeout seconds
command. The default is 3 seconds.
You can inspect both values with show timeout
and show
retransmit-timeout
. (These commands are only available when
is configured for `--target=mips-idt-ecoff'.)
The timeout set by set timeout
does not apply when
is waiting for your program to stop. In that case, waits
forever because it has no way of knowing how long the program is going
to run before stopping.
target dink32 dev
target ppcbug dev
target ppcbug1 dev
target sds dev
target op50n dev
target w89k dev
target hms dev
device
and speed
to control the serial line and
the communications speed used.
target e7000 dev
target sh3 dev
target sh3e dev
enables developers to debug tasks running on
Sparclet targets from a Unix host.
uses code that runs on
both the Unix host and on the Sparclet target. The program
is installed and executed on the Unix host.
remotetimeout args
remotetimeout
.
This option is set by the user, and args represents the number of
seconds waits for responses.
When compiling for debugging, include the options `-g' to get debug information and `-Ttext' to relocate the program to where you wish to load it on the target. You may also want to add the options `-n' or `-N' in order to reduce the size of the sections. Example:
sparclet-aout-gcc prog.c -Ttext 0x12010000 -g -o prog -N
You can use objdump
to verify that the addresses are what you intended:
sparclet-aout-objdump --headers --syms prog
Once you have set
your Unix execution search path to find , you are ready to
run . From your Unix host, run
(or
sparclet-aout-gdb
, depending on your installation).
comes up showing the prompt:
(gdbslet)
The command file
lets you choose with program to debug.
(gdbslet) file prog
then attempts to read the symbol table of `prog'. locates the file by searching the directories listed in the command search path. If the file was compiled with debug information (option "-g"), source files will be searched as well. locates the source files by searching the directories listed in the directory search path (see section Your program's environment). If it fails to find a file, it displays a message such as:
prog: No such file or directory.
When this happens, add the appropriate directories to the search paths with
the commands path
and dir
, and execute the
target
command again.
The command target
lets you connect to a Sparclet target.
To connect to a target on serial port "ttya
", type:
(gdbslet) target sparclet /dev/ttya Remote target sparclet connected to /dev/ttya main () at ../prog.c:3
displays messages like these:
Connected to ttya.
Once connected to the Sparclet target,
you can use the
load
command to download the file from the host to the target.
The file name and load offset should be given as arguments to the load
command.
Since the file format is aout, the program must be loaded to the starting
address. You can use objdump
to find out what this value is. The load
offset is an offset which is added to the VMA (virtual memory address)
of each of the file's sections.
For instance, if the program
`prog' was linked to text address 0x1201000, with data at 0x12010160
and bss at 0x12010170, in , type:
(gdbslet) load prog 0x12010000 Loading section .text, size 0xdb0 vma 0x12010000
If the code is loaded at a different address then what the program was linked
to, you may need to use the section
and add-symbol-file
commands
to tell where to map the symbol table.
You can now begin debugging the task using 's execution control
commands, b
, step
, run
, etc. See the
manual for the list of commands.
(gdbslet) b main Breakpoint 1 at 0x12010000: file prog.c, line 3. (gdbslet) run Starting program: prog Breakpoint 1, main (argc=1, argv=0xeffff21c) at prog.c:3 3 char *symarg = 0; (gdbslet) step 4 char *execarg = "hello!"; (gdbslet)
target sparclite dev
may be used with a Tandem ST2000 phone switch, running Tandem's STDBUG protocol.
To connect your ST2000 to the host system, see the manufacturer's manual. Once the ST2000 is physically attached, you can run:
target st2000 dev speed
to establish it as your debugging environment. dev is normally
the name of a serial device, such as `/dev/ttya', connected to the
ST2000 via a serial line. You can instead specify dev as a TCP
connection (for example, to a serial line attached via a terminal
concentrator) using the syntax hostname:portnumber
.
The load
and attach
commands are not defined for
this target; you must load your program into the ST2000 as you normally
would for standalone operation. reads debugging information
(such as symbols) from a separate, debugging version of the program
available on your host computer.
These auxiliary commands are available to help you with the ST2000 environment:
st2000 command
connect
When configured for debugging Zilog Z8000 targets, includes a Z8000 simulator.
For the Z8000 family, `target sim' simulates either the Z8002 (the unsegmented variant of the Z8000 architecture) or the Z8001 (the segmented variant). The simulator recognizes which architecture is appropriate by inspecting the object code.
target sim args
After specifying this target, you can debug programs for the simulated
CPU in the same style as programs for your host computer; use the
file
command to load a new program image, the run
command
to run your program, and so on.
As well as making available all the usual machine registers (see section Registers), the Z8000 simulator provides three additional items of information as specially named registers:
cycles
insts
time
You can refer to these values in expressions with the usual conventions; for example, `b fputc if $cycles>5000' sets a conditional breakpoint that suspends only after at least 5000 simulated clock ticks.
This section describes characteristics of architectures that affect all uses of with the architecture, both native and cross.
set rstack_high_address address
set rstack_high_address
command. The argument should be an
address, which you probably want to precede with `0x' to specify in
hexadecimal.
show rstack_high_address
See the following section.
Alpha- and MIPS-based computers use an unusual stack frame, which sometimes requires to search backward in the object code to find the beginning of a function.
To improve response time (especially for embedded applications, where may be restricted to a slow serial line for this search) you may want to limit the size of this search, using one of these commands:
set heuristic-fence-post limit
heuristic-fence-post
must search
and therefore the longer it takes to run.
show heuristic-fence-post
These commands are available only when is configured for debugging programs on Alpha or MIPS processors.
You can alter the way interacts with you by using the
set
command. For commands controlling how displays
data, see section Print settings. Other settings are
described here.
indicates its readiness to read a command by printing a string
called the prompt. This string is normally `()'. You
can change the prompt string with the set prompt
command. For
instance, when debugging with , it is useful to change
the prompt in one of the sessions so that you can always tell
which one you are talking to.
Note: set prompt
does not add a space for you after the
prompt you set. This allows you to set a prompt which ends in a space
or a prompt that does not.
set prompt newprompt
show prompt
reads its input commands via the readline interface. This
GNU library provides consistent behavior for programs which provide a
command line interface to the user. Advantages are GNU Emacs-style
or vi-style inline editing of commands, csh
-like history
substitution, and a storage and recall of command history across
debugging sessions.
You may control the behavior of command line editing in with the
command set
.
set editing
set editing on
set editing off
show editing
can keep track of the commands you type during your debugging sessions, so that you can be certain of precisely what happened. Use these commands to manage the command history facility.
set history filename fname
GDBHISTFILE
, or to
`./.gdb_history' (`./_gdb_history' on MS-DOS) if this variable
is not set.
set history save
set history save on
set history filename
command. By default, this option is disabled.
set history save off
set history size size
HISTSIZE
, or to 256 if this variable is not set.
History expansion assigns special meaning to the character !.
Since ! is also the logical not operator in C, history expansion
is off by default. If you decide to enable history expansion with the
set history expansion on
command, you may sometimes need to
follow ! (when it is used as logical not, in an expression) with
a space or a tab to prevent it from being expanded. The readline
history facilities do not attempt substitution on the strings
!= and !(, even when history expansion is enabled.
The commands to control history expansion are:
set history expansion on
set history expansion
set history expansion off
vi
may wish to read it.
show history
show history filename
show history save
show history size
show history expansion
show history
by itself displays all four states.
show commands
show commands n
show commands +
Certain commands to may produce large amounts of information output to the screen. To help you read all of it, pauses and asks you for input at the end of each page of output. Type RET when you want to continue the output, or q to discard the remaining output. Also, the screen width setting determines when to wrap lines of output. Depending on what is being printed, tries to break the line at a readable place, rather than simply letting it overflow onto the following line.
Normally knows the size of the screen from the terminal
driver software. For example, on Unix uses the termcap data base
together with the value of the TERM
environment variable and the
stty rows
and stty cols
settings. If this is not correct,
you can override it with the set height
and set
width
commands:
set height lpp
show height
set width cpl
show width
set
commands specify a screen height of lpp lines and
a screen width of cpl characters. The associated show
commands display the current settings.
If you specify a height of zero lines, does not pause during
output no matter how long the output is. This is useful if output is to a
file or to an editor buffer.
Likewise, you can specify `set width 0' to prevent
from wrapping its output.
You can always enter numbers in octal, decimal, or hexadecimal in
by the usual conventions: octal numbers begin with
`0', decimal numbers end with `.', and hexadecimal numbers
begin with `0x'. Numbers that begin with none of these are, by
default, entered in base 10; likewise, the default display for
numbers--when no particular format is specified--is base 10. You can
change the default base for both input and output with the set
radix
command.
set input-radix base
set radix 012 set radix 10. set radix 0xasets the base to decimal. On the other hand, `set radix 10' leaves the radix unchanged no matter what it was.
set output-radix base
show input-radix
show output-radix
By default, is silent about its inner workings. If you are
running on a slow machine, you may want to use the set verbose
command. This makes tell you when it does a lengthy
internal operation, so you will not think it has crashed.
Currently, the messages controlled by set verbose
are those
which announce that the symbol table for a source file is being read;
see symbol-file
in section Commands to specify files.
set verbose on
set verbose off
show verbose
set verbose
is on or off.
By default, if encounters bugs in the symbol table of an object file, it is silent; but if you are debugging a compiler, you may find this information useful (see section Errors reading symbol files).
set complaints limit
show complaints
By default, is cautious, and asks what sometimes seems to be a lot of stupid questions to confirm certain commands. For example, if you try to run a program which is already running:
() run The program being debugged has been started already. Start it from the beginning? (y or n)
If you are willing to unflinchingly face the consequences of your own commands, you can disable this "feature":
set confirm off
set confirm on
show confirm
set debug arch
show debug arch
set debug event
show debug event
set debug expression
show debug expression
set debug overload
show debug overload
set debug remote
show debug remote
set debug serial
show debug serial
set debug target
show debug target
set debug varobj
show debug varobj
Aside from breakpoint commands (see section Breakpoint command lists), provides two ways to store sequences of commands for execution as a unit: user-defined commands and command files.
A user-defined command is a sequence of commands to
which you assign a new name as a command. This is done with the
define
command. User commands may accept up to 10 arguments
separated by whitespace. Arguments are accessed within the user command
via $arg0...$arg9. A trivial example:
define adder print $arg0 + $arg1 + $arg2
To execute the command use:
adder 1 2 3
This defines the command adder
, which prints the sum of
its three arguments. Note the arguments are text substitutions, so they may
reference variables, use complex expressions, or even perform inferior
functions calls.
define commandname
define
command. The end of these
commands is marked by a line containing end
.
if
else
, followed
by a series of commands that are only executed if the expression
was false. The end of the list is marked by a line containing end
.
while
if
: the command takes a single argument,
which is an expression to evaluate, and must be followed by the commands to
execute, one per line, terminated by an end
.
The commands are executed repeatedly as long as the expression
evaluates to true.
document commandname
help
. The command commandname must already be
defined. This command reads lines of documentation just as define
reads the lines of the command definition, ending with end
.
After the document
command is finished, help
on command
commandname displays the documentation you have written.
You may use the document
command again to change the
documentation of a command. Redefining the command with define
does not change the documentation.
help user-defined
show user
show user commandname
When user-defined commands are executed, the commands of the definition are not printed. An error in any command stops execution of the user-defined command.
If used interactively, commands that would ask for confirmation proceed without asking when used inside a user-defined command. Many commands that normally print messages to say what they are doing omit the messages when used in a user-defined command.
You may define hooks, which are a special kind of user-defined command. Whenever you run the command `foo', if the user-defined command `hook-foo' exists, it is executed (with no arguments) before that command.
A hook may also be defined which is run after the command you executed. Whenever you run the command `foo', if the user-defined command `hookpost-foo' exists, it is executed (with no arguments) after that command. Post-execution hooks may exist simultaneously with pre-execution hooks, for the same command.
It is valid for a hook to call the command which it hooks. If this occurs, the hook is not re-executed, thereby avoiding infinte recursion.
In addition, a pseudo-command, `stop' exists. Defining (`hook-stop') makes the associated commands execute every time execution stops in your program: before breakpoint commands are run, displays are printed, or the stack frame is printed.
For example, to ignore SIGALRM
signals while
single-stepping, but treat them normally during normal execution,
you could define:
define hook-stop handle SIGALRM nopass end define hook-run handle SIGALRM pass end define hook-continue handle SIGLARM pass end
As a further example, to hook at the begining and end of the echo
command, and to add extra text to the beginning and end of the message,
you could define:
define hook-echo echo <<<--- end define hookpost-echo echo --->>>\n end () echo Hello World <<<---Hello World--->>> ()
You can define a hook for any single-word command in , but
not for command aliases; you should define a hook for the basic command
name, e.g. backtrace
rather than bt
.
If an error occurs during the execution of your hook, execution of
commands stops and issues a prompt
(before the command that you actually typed had a chance to run).
If you try to define a hook which does not match any known command, you
get a warning from the define
command.
A command file for is a file of lines that are commands. Comments (lines starting with #) may also be included. An empty line in a command file does nothing; it does not mean to repeat the last command, as it would from the terminal.
When you start , it automatically executes commands from its init files. These are files named `.gdbinit' on Unix and `gdb.ini' on DOS/Windows. During startup, does the following:
The init file in your home directory can set options (such as `set complaints') that affect subsequent processing of command line options and operands. Init files are not executed if you use the `-nx' option (see section Choosing modes).
On some configurations of , the init file is known by a different name (these are typically environments where a specialized form of may need to coexist with other forms, hence a different name for the specialized version's init file). These are the environments with special init file names:
You can also request the execution of a command file with the
source
command:
source filename
The lines in a command file are executed sequentially. They are not printed as they are executed. An error in any command terminates execution of the command file.
Commands that would ask for confirmation if used interactively proceed without asking when used in a command file. Many commands that normally print messages to say what they are doing omit the messages when called from command files.
During the execution of a command file or a user-defined command, normal output is suppressed; the only output that appears is what is explicitly printed by the commands in the definition. This section describes three commands useful for generating exactly the output you want.
echo text
echo This is some text\n\ which is continued\n\ onto several lines.\nproduces the same output as
echo This is some text\n echo which is continued\n echo onto several lines.\n
output expression
output/fmt expression
print
. See section Output formats, for more information.
printf string, expressions...
printf (string, expressions...);For example, you can print two values in hex like this:
printf "foo, bar-foo = 0x%x, 0x%x\n", foo, bar-fooThe only backslash-escape sequences that you can use in the format string are the simple ones that consist of backslash followed by a letter.
The Text User Interface, TUI in short,
is a terminal interface which uses the curses
library
to show the source file, the assembly output, the program registers
and commands in separate text windows.
The TUI is available only when is configured
with the --enable-tui
configure option (see section configure
options).
The TUI has two display modes that can be switched while runs:
In the TUI mode, can display several text window on the terminal:
The source, assembly and register windows are attached to the thread and the frame position. They are updated when the current thread changes, when the frame changes or when the program counter changes. These three windows are arranged by the TUI according to several layouts. The layout defines which of these three windows are visible. The following layouts are available:
The TUI installs several key bindings in the readline keymaps (@xref{Command Line Editing}). They allow to leave or enter in the TUI mode or they operate directly on the TUI layout and windows. The following key bindings are installed for both TUI mode and the standard mode.
The following key bindings are handled only by the TUI mode:
In the TUI mode, the arrow keys are used by the active window for scrolling. This means they are not available for readline. It is necessary to use other readline key bindings such as C-p, C-n, C-b and C-f.
The TUI has specific commands to control the text windows. These commands are always available, that is they do not depend on the current terminal mode in which runs. When is in the standard mode, using these commands will automatically switch in the TUI mode.
layout next
layout prev
layout src
layout asm
layout split
layout regs
focus next | prev | src | asm | regs | split
refresh
update
winheight name +count
winheight name -count
The TUI has several configuration variables that control the appearance of windows on the terminal.
set tui border-kind kind
space
ascii
acs
set tui active-border-mode mode
normal
, standout
, reverse
,
half
, half-standout
, bold
and bold-standout
.
set tui border-mode mode
normal
standout
reverse
half
half-standout
bold
bold-standout
A special interface allows you to use GNU Emacs to view (and edit) the source files for the program you are debugging with .
To use this interface, use the command M-x gdb in Emacs. Give the executable file you want to debug as an argument. This command starts as a subprocess of Emacs, with input and output through a newly created Emacs buffer.
Using under Emacs is just like using normally except for two things:
This applies both to commands and their output, and to the input and output done by the program you are debugging.
This is useful because it means that you can copy the text of previous commands and input them again; you can even use parts of the output in this way.
All the facilities of Emacs' Shell mode are available for interacting with your program. In particular, you can send signals the usual way--for example, C-c C-c for an interrupt, C-c C-z for a stop.
Each time displays a stack frame, Emacs automatically finds the source file for that frame and puts an arrow (`=>') at the left margin of the current line. Emacs uses a separate buffer for source display, and splits the screen to show both your session and the source.
Explicit list
or search commands still produce output as
usual, but you probably have no reason to use them from Emacs.
Warning: If the directory where your program resides is not your current directory, it can be easy to confuse Emacs about the location of the source files, in which case the auxiliary display buffer does not appear to show your source. can find programs by searching your environment's
PATH
variable, so the input and output session proceeds normally; but Emacs does not get enough information back from to locate the source files in this situation. To avoid this problem, either start mode from the directory where your program resides, or specify an absolute file name when prompted for the M-x gdb argument.A similar confusion can result if you use the
file
command to switch to debugging a program in some other location, from an existing buffer in Emacs.
By default, M-x gdb calls the program called `gdb'. If
you need to call by a different name (for example, if you keep
several configurations around, with different names) you can set the
Emacs variable gdb-command-name
; for example,
(setq gdb-command-name "mygdb")
(preceded by M-: or ESC :, or typed in the *scratch*
buffer, or
in your `.emacs' file) makes Emacs call the program named
"mygdb
" instead.
In the I/O buffer, you can use these special Emacs commands in addition to the standard Shell mode commands:
step
command; also
update the display window to show the current file and location.
next
command. Then update the display window
to show the current file and location.
stepi
command; update
display window accordingly.
nexti
command; update
display window accordingly.
finish
command.
continue
command.
Warning: In Emacs v19, this command is C-c C-p.
up
command.
Warning: In Emacs v19, this command is C-c C-u.
down
command.
Warning: In Emacs v19, this command is C-c C-d.
disassemble
by typing C-x &.
You can customize this further by defining elements of the list
gdb-print-command
; once it is defined, you can format or
otherwise process numbers picked up by C-x & before they are
inserted. A numeric argument to C-x & indicates that you
wish special formatting, and also acts as an index to pick an element of the
list. If the list element is a string, the number to be inserted is
formatted using the Emacs function format
; otherwise the number
is passed as an argument to the corresponding list element.
In any source file, the Emacs command C-x SPC (gdb-break
)
tells to set a breakpoint on the source line point is on.
If you accidentally delete the source-display buffer, an easy way to get
it back is to type the command f
in the buffer, to
request a frame display; when you run under Emacs, this recreates
the source buffer if necessary to show you the context of the current
frame.
The source files displayed in Emacs are in ordinary Emacs buffers which are visiting the source files in the usual way. You can edit the files with these buffers if you wish; but keep in mind that communicates with Emacs in terms of line numbers. If you add or delete lines from the text, the line numbers that knows cease to correspond properly with the code.
This chapter describes annotations in . Annotations are designed to interface to graphical user interfaces or other similar programs which want to interact with at a relatively high level.
To produce annotations, start with the --annotate=2
option.
Annotations start with a newline character, two `control-z' characters, and the name of the annotation. If there is no additional information associated with this annotation, the name of the annotation is followed immediately by a newline. If there is additional information, the name of the annotation is followed by a space, the additional information, and a newline. The additional information cannot contain newline characters.
Any output not beginning with a newline and two `control-z' characters denotes literal output from . Currently there is no need for to output a newline followed by two `control-z' characters, but if there was such a need, the annotations could be extended with an `escape' annotation which means those three characters as output.
A simple example of starting up with annotations is:
$ gdb --annotate=2 GNU GDB 5.0 Copyright 2000 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "sparc-sun-sunos4.1.3" ^Z^Zpre-prompt (gdb) ^Z^Zprompt quit ^Z^Zpost-prompt $
Here `quit' is input to ; the rest is output from . The three lines beginning `^Z^Z' (where `^Z' denotes a `control-z' character) are annotations; the rest is output from .
To issue a command to without affecting certain aspects of the state which is seen by users, prefix it with `server '. This means that this command will not affect the command history, nor will it affect 's notion of which command to repeat if RET is pressed on a line by itself.
The server prefix does not affect the recording of values into the value
history; to print a value without recording it into the value history,
use the output
command instead of the print
command.
When a value is printed in various contexts, uses annotations to delimit the value from the surrounding text.
If a value is printed using print
and added to the value history,
the annotation looks like
^Z^Zvalue-history-begin history-number value-flags history-string ^Z^Zvalue-history-value the-value ^Z^Zvalue-history-end
where history-number is the number it is getting in the value history, history-string is a string, such as `$5 = ', which introduces the value to the user, the-value is the output corresponding to the value itself, and value-flags is `*' for a value which can be dereferenced and `-' for a value which cannot.
If the value is not added to the value history (it is an invalid float
or it is printed with the output
command), the annotation is similar:
^Z^Zvalue-begin value-flags the-value ^Z^Zvalue-end
When prints an argument to a function (for example, in the output
from the backtrace
command), it annotates it as follows:
^Z^Zarg-begin argument-name ^Z^Zarg-name-end separator-string ^Z^Zarg-value value-flags the-value ^Z^Zarg-end
where argument-name is the name of the argument,
separator-string is text which separates the name from the value
for the user's benefit (such as `='), and value-flags and
the-value have the same meanings as in a
value-history-begin
annotation.
When printing a structure, annotates it as follows:
^Z^Zfield-begin value-flags field-name ^Z^Zfield-name-end separator-string ^Z^Zfield-value the-value ^Z^Zfield-end
where field-name is the name of the field, separator-string
is text which separates the name from the value for the user's benefit
(such as `='), and value-flags and the-value have the
same meanings as in a value-history-begin
annotation.
When printing an array, annotates it as follows:
^Z^Zarray-section-begin array-index value-flags
where array-index is the index of the first element being
annotated and value-flags has the same meaning as in a
value-history-begin
annotation. This is followed by any number
of elements, where is element can be either a single element:
`,' whitespace ; omitted for the first element the-value ^Z^Zelt
or a repeated element
`,' whitespace ; omitted for the first element the-value ^Z^Zelt-rep number-of-repititions repetition-string ^Z^Zelt-rep-end
In both cases, the-value is the output for the value of the element and whitespace can contain spaces, tabs, and newlines. In the repeated case, number-of-repititons is the number of consecutive array elements which contain that value, and repetition-string is a string which is designed to convey to the user that repitition is being depicted.
Once all the array elements have been output, the array annotation is ended with
^Z^Zarray-section-end
Whenever prints a frame, it annotates it. For example, this applies
to frames printed when stops, output from commands such as
backtrace
or up
, etc.
The frame annotation begins with
^Z^Zframe-begin level address level-string
where level is the number of the frame (0 is the innermost frame, and other frames have positive numbers), address is the address of the code executing in that frame, and level-string is a string designed to convey the level to the user. address is in the form `0x' followed by one or more lowercase hex digits (note that this does not depend on the language). The frame ends with
^Z^Zframe-end
Between these annotations is the main body of the frame, which can consist of
^Z^Zfunction-call function-call-stringwhere function-call-string is text designed to convey to the user that this frame is associated with a function call made by to a function in the program being debugged.
^Z^Zsignal-handler-caller signal-handler-caller-stringwhere signal-handler-caller-string is text designed to convey to the user that this frame is associated with whatever mechanism is used by this operating system to call a signal handler (it is the frame which calls the signal handler, not the frame for the signal handler itself).
^Z^Zframe-address address ^Z^Zframe-address-end separator-stringwhere address is the address executing in the frame (the same address as in the
frame-begin
annotation, but printed in a form
which is intended for user consumption--in particular, the syntax varies
depending on the language), and separator-string is a string
intended to separate this address from what follows for the user's
benefit.
Then comes
^Z^Zframe-function-name function-name ^Z^Zframe-args argumentswhere function-name is the name of the function executing in the frame, or `??' if not known, and arguments are the arguments to the frame, with parentheses around them (each argument is annotated individually as well, see section Values). If source information is available, a reference to it is then printed:
^Z^Zframe-source-begin source-intro-string ^Z^Zframe-source-file filename ^Z^Zframe-source-file-end : ^Z^Zframe-source-line line-number ^Z^Zframe-source-endwhere source-intro-string separates for the user's benefit the reference from the text which precedes it, filename is the name of the source file, and line-number is the line number within that file (the first line is line 1). If prints some information about where the frame is from (which library, which load segment, etc.; currently only done on the RS/6000), it is annotated with
^Z^Zframe-where informationThen, if source is to actually be displayed for this frame (for example, this is not true for output from the
backtrace
command), then a
source
annotation (see section Displaying Source) is displayed. Unlike
most annotations, this is output instead of the normal text which would be
output, not in addition.
When is told to display something using the display
command,
the results of the display are annotated:
^Z^Zdisplay-begin number ^Z^Zdisplay-number-end number-separator ^Z^Zdisplay-format format ^Z^Zdisplay-expression expression ^Z^Zdisplay-expression-end expression-separator ^Z^Zdisplay-value value ^Z^Zdisplay-end
where number is the number of the display, number-separator is intended to separate the number from what follows for the user, format includes information such as the size, format, or other information about how the value is being displayed, expression is the expression being displayed, expression-separator is intended to separate the expression from the text that follows for the user, and value is the actual value being displayed.
When prompts for input, it annotates this fact so it is possible to know when to send output, when the output from a given command is over, etc.
Different kinds of input each have a different input type. Each
input type has three annotations: a pre-
annotation, which
denotes the beginning of any prompt which is being output, a plain
annotation, which denotes the end of the prompt, and then a post-
annotation which denotes the end of any echo which may (or may not) be
associated with the input. For example, the prompt
input type
features the following annotations:
^Z^Zpre-prompt ^Z^Zprompt ^Z^Zpost-prompt
The input types are
prompt
commands
commands
command. The annotations are repeated for each command which is input.
overload-choice
query
prompt-for-continue
set height 0
to disable
prompting. This is because the counting of lines is buggy in the
presence of annotations.
^Z^Zquit
This annotation occurs right before responds to an interrupt.
^Z^Zerror
This annotation occurs right before responds to an error.
Quit and error annotations indicate that any annotations which was
in the middle of may end abruptly. For example, if a
value-history-begin
annotation is followed by a error
, one
cannot expect to receive the matching value-history-end
. One
cannot expect not to receive it either, however; an error annotation
does not necessarily mean that is immediately returning all the way
to the top level.
A quit or error annotation may be preceded by
^Z^Zerror-begin
Any output between that and the quit or error annotation is the error message.
Warning messages are not yet annotated.
The output from the info breakpoints
command is annotated as follows:
^Z^Zbreakpoints-headers header-entry ^Z^Zbreakpoints-table
where header-entry has the same syntax as an entry (see below) but instead of containing data, it contains strings which are intended to convey the meaning of each field to the user. This is followed by any number of entries. If a field does not apply for this entry, it is omitted. Fields may contain trailing whitespace. Each entry consists of:
^Z^Zrecord ^Z^Zfield 0 number ^Z^Zfield 1 type ^Z^Zfield 2 disposition ^Z^Zfield 3 enable ^Z^Zfield 4 address ^Z^Zfield 5 what ^Z^Zfield 6 frame ^Z^Zfield 7 condition ^Z^Zfield 8 ignore-count ^Z^Zfield 9 commands
Note that address is intended for user consumption--the syntax varies depending on the language.
The output ends with
^Z^Zbreakpoints-table-end
The following annotations say that certain pieces of state may have changed.
^Z^Zframes-invalid
backtrace
command) may
have changed.
^Z^Zbreakpoints-invalid
When the program starts executing due to a command such as
step
or continue
,
^Z^Zstarting
is output. When the program stops,
^Z^Zstopped
is output. Before the stopped
annotation, a variety of
annotations describe how the program stopped.
^Z^Zexited exit-status
^Z^Zsignalled
^Z^Zsignalled
, the
annotation continues:
intro-text ^Z^Zsignal-name name ^Z^Zsignal-name-end middle-text ^Z^Zsignal-string string ^Z^Zsignal-string-end end-textwhere name is the name of the signal, such as
SIGILL
or
SIGSEGV
, and string is the explanation of the signal, such
as Illegal Instruction
or Segmentation fault
.
intro-text, middle-text, and end-text are for the
user's benefit and have no particular format.
^Z^Zsignal
signalled
, but is
just saying that the program received the signal, not that it was
terminated with it.
^Z^Zbreakpoint number
^Z^Zwatchpoint number
The following annotation is used instead of displaying source code:
^Z^Zsource filename:line:character:middle:addr
where filename is an absolute file name indicating which source file, line is the line number within that file (where 1 is the first line in the file), character is the character position within the file (where 0 is the first character in the file) (for most debug formats this will necessarily point to the beginning of a line), middle is `middle' if addr is in the middle of the line, or `beg' if addr is at the beginning of the line, and addr is the address in the target program associated with the source which is being displayed. addr is in the form `0x' followed by one or more lowercase hex digits (note that this does not depend on the language).
- target-invalid the target might have changed (registers, heap contents, or execution status). For performance, we might eventually want to hit `registers-invalid' and `all-registers-invalid' with greater precision - systematic annotation for set/show parameters (including invalidation notices). - similarly, `info' returns a list of candidates for invalidation notices.
Your bug reports play an essential role in making reliable.
Reporting a bug may help you by bringing a solution to your problem, or it may not. But in any case the principal function of a bug report is to help the entire community by making the next version of work better. Bug reports are your contribution to the maintenance of .
In order for a bug report to serve its purpose, you must include the information that enables us to fix the bug.
If you are not sure whether you have found a bug, here are some guidelines:
A number of companies and individuals offer support for GNU products. If you obtained from a support organization, we recommend you contact that organization first.
You can find contact information for many support companies and individuals in the file `etc/SERVICE' in the GNU Emacs distribution.
In any event, we also recommend that you send bug reports for to this addresses:
[email protected]
Do not send bug reports to `info-gdb', or to `help-gdb', or to any newsgroups. Most users of do not want to receive bug reports. Those that do have arranged to receive `bug-gdb'.
The mailing list `bug-gdb' has a newsgroup `gnu.gdb.bug' which serves as a repeater. The mailing list and the newsgroup carry exactly the same messages. Often people think of posting bug reports to the newsgroup instead of mailing them. This appears to work, but it has one problem which can be crucial: a newsgroup posting often lacks a mail path back to the sender. Thus, if we need to ask for more information, we may be unable to reach you. For this reason, it is better to send bug reports to the mailing list.
As a last resort, send bug reports on paper to:
GNU Debugger Bugs Free Software Foundation Inc. 59 Temple Place - Suite 330 Boston, MA 02111-1307 USA
The fundamental principle of reporting bugs usefully is this: report all the facts. If you are not sure whether to state a fact or leave it out, state it!
Often people omit facts because they think they know what causes the problem and assume that some details do not matter. Thus, you might assume that the name of the variable you use in an example does not matter. Well, probably it does not, but one cannot be sure. Perhaps the bug is a stray memory reference which happens to fetch from the location where that name is stored in memory; perhaps, if the name were different, the contents of that location would fool the debugger into doing the right thing despite the bug. Play it safe and give a specific, complete example. That is the easiest thing for you to do, and the most helpful.
Keep in mind that the purpose of a bug report is to enable us to fix the bug. It may be that the bug has been reported previously, but neither you nor we can know that unless your bug report is complete and self-contained.
Sometimes people give a few sketchy facts and ask, "Does this ring a bell?" Those bug reports are useless, and we urge everyone to refuse to respond to them except to chide the sender to report bugs properly.
To enable us to fix the bug, you should include all these things:
show
version
.
Without this, we will not know whether there is any point in looking for
the bug in the current version of .
gcc --version
to get this
information; for other compilers, see the documentation for those
compilers.
Here are some things that are not necessary:
The 4 release includes an already-formatted reference card, ready for printing with PostScript or Ghostscript, in the `gdb' subdirectory of the main source directory(7). If you can use PostScript or Ghostscript with your printer, you can print the reference card immediately with `refcard.ps'.
The release also includes the source for the reference card. You can format it, using TeX, by typing:
make refcard.dvi
The reference card is designed to print in landscape mode on US "letter" size paper; that is, on a sheet 11 inches wide by 8.5 inches high. You will need to specify this form of printing as an option to your DVI output program.
All the documentation for comes as part of the machine-readable
distribution. The documentation is written in Texinfo format, which is
a documentation system that uses a single source file to produce both
on-line information and a printed manual. You can use one of the Info
formatting commands to create the on-line version of the documentation
and TeX (or texi2roff
) to typeset the printed version.
includes an already formatted copy of the on-line Info
version of this manual in the `gdb' subdirectory. The main Info
file is `gdb-/gdb/gdb.info', and it refers to
subordinate files matching `gdb.info*' in the same directory. If
necessary, you can print out these files, or read them with any editor;
but they are easier to read using the info
subsystem in GNU
Emacs or the standalone info
program, available as part of the
GNU Texinfo distribution.
If you want to format these Info files yourself, you need one of the
Info formatting programs, such as texinfo-format-buffer
or
makeinfo
.
If you have makeinfo
installed, and are in the top level
source directory (`gdb-', in the case of
version ), you can make the Info file by typing:
cd gdb make gdb.info
If you want to typeset and print copies of this manual, you need TeX, a program to print its DVI output files, and `texinfo.tex', the Texinfo definitions file.
TeX is a typesetting program; it does not print files directly, but produces output files called DVI files. To print a typeset document, you need a program to print DVI files. If your system has TeX installed, chances are it has such a program. The precise command to use depends on your system; lpr -d is common; another (for PostScript devices) is dvips. The DVI print command may require a file name without any extension or a `.dvi' extension.
TeX also requires a macro definitions file called `texinfo.tex'. This file tells TeX how to typeset a document written in Texinfo format. On its own, TeX cannot either read or typeset a Texinfo file. `texinfo.tex' is distributed with GDB and is located in the `gdb-version-number/texinfo' directory.
If you have TeX and a DVI printer program installed, you can typeset and print this manual. First switch to the the `gdb' subdirectory of the main source directory (for example, to `gdb-/gdb') and type:
make gdb.dvi
Then give `gdb.dvi' to your DVI printing program.
comes with a configure
script that automates the process
of preparing for installation; you can then use make
to
build the gdb
program.
(8)
The distribution includes all the source code you need for in a single directory, whose name is usually composed by appending the version number to `gdb'.
For example, the version distribution is in the `gdb-' directory. That directory contains:
gdb-/configure (and supporting files)
gdb-/gdb
gdb-/bfd
gdb-/include
gdb-/libiberty
gdb-/opcodes
gdb-/readline
gdb-/glob
gdb-/mmalloc
The simplest way to configure and build is to run configure
from the `gdb-version-number' source directory, which in
this example is the `gdb-' directory.
First switch to the `gdb-version-number' source directory
if you are not already in it; then run configure
. Pass the
identifier for the platform on which will run as an
argument.
For example:
cd gdb- ./configure host make
where host is an identifier such as `sun4' or
`decstation', that identifies the platform where will run.
(You can often leave off host; configure
tries to guess the
correct value by examining your system.)
Running `configure host' and then running make
builds the
`bfd', `readline', `mmalloc', and `libiberty'
libraries, then gdb
itself. The configured source files, and the
binaries, are left in the corresponding source directories.
configure
is a Bourne-shell (/bin/sh
) script; if your
system does not recognize this automatically when you run a different
shell, you may need to run sh
on it explicitly:
sh configure host
If you run configure
from a directory that contains source
directories for multiple libraries or programs, such as the
`gdb-' source directory for version , configure
creates configuration files for every directory level underneath (unless
you tell it not to, with the `--norecursion' option).
You can run the configure
script from any of the
subordinate directories in the distribution if you only want to
configure that subdirectory, but be sure to specify a path to it.
For example, with version , type the following to configure only
the bfd
subdirectory:
cd gdb-/bfd ../configure host
You can install anywhere; it has no hardwired paths.
However, you should make sure that the shell on your path (named by
the `SHELL' environment variable) is publicly readable. Remember
that uses the shell to start your program--some systems refuse to
let debug child processes whose programs are not readable.
If you want to run versions for several host or target machines,
you need a different gdb
compiled for each combination of
host and target. configure
is designed to make this easy by
allowing you to generate each configuration in a separate subdirectory,
rather than in the source directory. If your make
program
handles the `VPATH' feature (GNU make
does), running
make
in each of these directories builds the gdb
program specified there.
To build gdb
in a separate directory, run configure
with the `--srcdir' option to specify where to find the source.
(You also need to specify a path to find configure
itself from your working directory. If the path to configure
would be the same as the argument to `--srcdir', you can leave out
the `--srcdir' option; it is assumed.)
For example, with version , you can build in a separate directory for a Sun 4 like this:
cd gdb- mkdir ../gdb-sun4 cd ../gdb-sun4 ../gdb-/configure sun4 make
When configure
builds a configuration using a remote source
directory, it creates a tree for the binaries with the same structure
(and using the same names) as the tree under the source directory. In
the example, you'd find the Sun 4 library `libiberty.a' in the
directory `gdb-sun4/libiberty', and itself in
`gdb-sun4/gdb'.
One popular reason to build several configurations in separate
directories is to configure for cross-compiling (where
runs on one machine--the host---while debugging
programs that run on another machine--the target).
You specify a cross-debugging target by
giving the `--target=target' option to configure
.
When you run make
to build a program or library, you must run
it in a configured directory--whatever directory you were in when you
called configure
(or one of its subdirectories).
The Makefile
that configure
generates in each source
directory also runs recursively. If you type make
in a source
directory such as `gdb-' (or in a separate configured
directory configured with `--srcdir=dirname/gdb-'), you
will build all the required libraries, and then build GDB.
When you have multiple hosts or targets configured in separate
directories, you can run make
on them in parallel (for example,
if they are NFS-mounted on each of the hosts); they will not interfere
with each other.
The specifications used for hosts and targets in the configure
script are based on a three-part naming scheme, but some short predefined
aliases are also supported. The full naming scheme encodes three pieces
of information in the following pattern:
architecture-vendor-os
For example, you can use the alias sun4
as a host argument,
or as the value for target in a --target=target
option. The equivalent full name is `sparc-sun-sunos4'.
The configure
script accompanying does not provide
any query facility to list all supported host and target names or
aliases. configure
calls the Bourne shell script
config.sub
to map abbreviations to full names; you can read the
script, if you wish, or you can use it to test your guesses on
abbreviations--for example:
% sh config.sub i386-linux i386-pc-linux-gnu % sh config.sub alpha-linux alpha-unknown-linux-gnu % sh config.sub hp9k700 hppa1.1-hp-hpux % sh config.sub sun4 sparc-sun-sunos4.1.1 % sh config.sub sun3 m68k-sun-sunos4.1.1 % sh config.sub i986v Invalid configuration `i986v': machine `i986v' not recognized
config.sub
is also distributed in the source
directory (`gdb-', for version ).
configure
options
Here is a summary of the configure
options and arguments that
are most often useful for building . configure
also has
several other options not listed here. See Info file `configure.info', node `What Configure Does', for a full explanation of configure
.
configure [--help] [--prefix=dir] [--exec-prefix=dir] [--srcdir=dirname] [--norecursion] [--rm] [--target=target] host
You may introduce options with a single `-' rather than `--' if you prefer; but you may abbreviate option names if you use `--'.
--help
configure
.
--prefix=dir
--exec-prefix=dir
--srcdir=dirname
make
, or another
make
that implements the VPATH
feature.configure
writes configuration specific files in
the current directory, but arranges for them to use the source in the
directory dirname. configure
creates directories under
the working directory in parallel to the source directories below
dirname.
--norecursion
configure
is executed; do not
propagate configuration to subdirectories.
--target=target
host ...
There are many other options available as well, but they are generally needed for special purposes only.
Jump to: " - # - $ - - - . - / - : - @ - a - b - c - d - e - f - g - h - i - j - k - l - m - n - o - p - q - r - s - t - u - v - w - x - z - {
#
in Modula-2
$
$$
$_
and info breakpoints
$_
and info line
$_
, $__
, and value history
--annotate
--async
--batch
--baud
--cd
--command
--core
--directory
--epoch
--exec
--fullname
--interpreter
--mapped
--noasync
--nowindows
--nx
--quiet
--readnow
--se
--silent
--statistics
--symbols
--tty
--tui
--version
--windows
--write
-b
-c
-d
-e
-f
-m
-n
-nw
-q
-r
-s
-t
-w
-x
.
, Modula-2 scope operator
::
, context for variables/functions
break
)
breakpoint
subroutine, remote
backtrace
)
continue
)
delete
)
disable
)
down
)
frame
)
g++
, GNU C++ compiler
help
)
heuristic-fence-post
(Alpha, MIPS)
info
)
info frame
)
info stack
)
list
)
remotedebug
protocol
next
)
New
systag message
New
systag message, on HP-UX
nexti
)
quit
)
run
)
remotedebug
, MIPS protocol
retransmit-timeout
, MIPS protocol
step
)
target remote
stepi
)
target remote
timeout
, MIPS protocol
until
)
built with DJGPP tools for MS-DOS/MS-Windows supports this mode of operation, but the event loop is suspended when the debuggee runs.
`b' cannot be used because these format letters are also
used with the x
command, where `b' stands for "byte";
see section Examining memory.
This is a way of removing
one word from the stack, on machines where stacks grow downward in
memory (most machines, nowadays). This assumes that the innermost
stack frame is selected; setting $sp
is not allowed when other
stack frames are selected. To pop entire frames off the stack,
regardless of machine architecture, use return
;
see section Returning from a function.
If a procedure call is used for instance in an expression, then this procedure is called with all its side effects. This can lead to confusing results if used carelessly.
If you choose a port number that
conflicts with another service, gdbserver
prints an error message
and exits.
On
DOS/Windows systems, the home directory is the one pointed to by the
HOME
environment variable.
In `gdb-/gdb/refcard.ps' of the version release.
If you have a more recent version of than , look at the `README' file in the sources; we may have improved the installation procedures since publishing this manual.
This document was generated on 23 January 2002 using texi2html 1.56k.