The DBGBCR<n>_EL1 characteristics are:
Holds control information for a breakpoint. Forms breakpoint n together with value register DBGBVR<n>_EL1.
This register is part of the Debug registers functional group.
AArch64 System register DBGBCR<n>_EL1 is architecturally mapped to AArch32 System register DBGBCR<n>.
AArch64 System register DBGBCR<n>_EL1 is architecturally mapped to External register DBGBCR<n>_EL1.
If breakpoint n is not implemented then this register is unallocated.
This register is in the Cold reset domain. On a Cold reset RW fields in this register reset to architecturally UNKNOWN values. The register is not affected by a Warm reset.
DBGBCR<n>_EL1 is a 32-bit register.
The DBGBCR<n>_EL1 bit assignments are:
31 | 30 | 29 | 28 | 27 | 26 | 25 | 24 | 23 | 22 | 21 | 20 | 19 | 18 | 17 | 16 | 15 | 14 | 13 | 12 | 11 | 10 | 9 | 8 | 7 | 6 | 5 | 4 | 3 | 2 | 1 | 0 |
0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | BT | LBN | SSC | HMC | 0 | 0 | 0 | 0 | BAS | 0 | 0 | PMC | E |
Reserved, RES0.
Breakpoint Type. Possible values are:
BT | Meaning |
---|---|
0000 |
Unlinked instruction address match. |
0001 |
Linked instruction address match. |
0010 |
Unlinked Context ID match. |
0011 |
Linked Context ID match. |
0110 |
Unlinked CONTEXTIDR_EL1 match (introduced in ARMv8.1). |
0111 |
Linked CONTEXTIDR_EL1 match (introduced in ARMv8.1). |
1000 |
Unlinked VMID match. |
1001 |
Linked VMID match. |
1010 |
Unlinked VMID and Context ID match. |
1011 |
Linked VMID and Context ID match. |
1100 |
Unlinked CONTEXTIDR_EL2 match (introduced in ARMv8.1). |
1101 |
Linked CONTEXTIDR_EL2 match (introduced in ARMv8.1). |
1110 |
Unlinked Full Context ID match (introduced in ARMv8.1). |
1111 |
Linked Full Context ID match (introduced in ARMv8.1). |
The field breaks down as follows:
All other values are reserved. Constraints on breakpoint programming mean other values are reserved under some conditions. For more information, including the effect of programming this field to a reserved value, see 'Reserved DBGBCR<n>_EL1.BT values' in the ARMv8 ARM, section D2 (AArch64 Self-hosted Debug).
When this register has an architecturally-defined reset value, this field resets to a value that is architecturally UNKNOWN.
Linked breakpoint number. For Linked address matching breakpoints, this specifies the index of the Context-matching breakpoint linked to.
For all other breakpoint types this field is ignored and reads of the register return an UNKNOWN value.
This field is ignored when the value of DBGBCR<n>_EL1.E is 0.
When this register has an architecturally-defined reset value, this field resets to a value that is architecturally UNKNOWN.
Security state control. Determines the Security states under which a Breakpoint debug event for breakpoint n is generated. This field must be interpreted along with the HMC and PMC fields, and there are constraints on the permitted values of the {HMC, SSC, PMC} fields. For more information, including the effect of programming the fields to a reserved set of values, see 'Reserved DBGBCR<n>_EL1.{SSC, HMC, PMC} values' in the ARMv8 ARM, section D2 (AArch64 Self-hosted Debug).
For more information on the operation of the SSC, HMC, and PMC fields, see 'Execution conditions for which a breakpoint generates Breakpoint exceptions' in the ARMv8 ARM, section D2 (AArch64 Self-hosted Debug).
When this register has an architecturally-defined reset value, this field resets to a value that is architecturally UNKNOWN.
Higher mode control. Determines the debug perspective for deciding when a Breakpoint debug event for breakpoint n is generated. This field must be interpreted along with the SSC and PMC fields, and there are constraints on the permitted values of the {HMC, SSC, PMC} fields. For more information see the SSC, bits [15:14] description.
For more information on the operation of the SSC, HMC, and PMC fields, see 'Execution conditions for which a breakpoint generates Breakpoint exceptions' in the ARMv8 ARM, section D2 (AArch64 Self-hosted Debug).
When this register has an architecturally-defined reset value, this field resets to a value that is architecturally UNKNOWN.
Reserved, RES0.
Byte address select. Defines which half-words an address-matching breakpoint matches, regardless of the instruction set and Execution state. In an AArch64-only implementation, this field is reserved, RES1.
The permitted values depend on the breakpoint type.
For Address match breakpoints, the permitted values are:
BAS | Match instruction at | Constraint for debuggers |
---|---|---|
0011 | DBGBVR<n>_EL1 | Use for T32 instructions. |
1100 | DBGBVR<n>_EL1+2 | Use for T32 instructions. |
1111 | DBGBVR<n>_EL1 | Use for A64 and A32 instructions. |
All other values are reserved. For more information, see 'Reserved DBGBCR<n>_EL1.BAS values' in the ARMv8 ARM, section D2 (AArch64 Self-hosted Debug).
For more information on using the BAS field in address match breakpoints, see 'Using the BAS field in Address Match breakpoints' in the ARMv8 ARM, section G2 (AArch32 Self-hosted Debug).
For Context matching breakpoints, this field is RES1 and ignored.
When this register has an architecturally-defined reset value, if this field is implemented as an RW field, it resets to a value that is architecturally UNKNOWN.
Reserved, RES0.
Privilege mode control. Determines the Exception level or levels at which a Breakpoint debug event for breakpoint n is generated. This field must be interpreted along with the SSC and HMC fields, and there are constraints on the permitted values of the {HMC, SSC, PMC} fields. For more information see the DBGBCR<n>_EL1.SSC description.
For more information on the operation of the SSC, HMC, and PMC fields, see 'Execution conditions for which a breakpoint generates Breakpoint exceptions' in the ARMv8 ARM, section D2 (AArch64 Self-hosted Debug).
When this register has an architecturally-defined reset value, this field resets to a value that is architecturally UNKNOWN.
Enable breakpoint DBGBVR<n>_EL1. Possible values are:
E | Meaning |
---|---|
0 |
Breakpoint disabled. |
1 |
Breakpoint enabled. |
When this register has an architecturally-defined reset value, this field resets to a value that is architecturally UNKNOWN.
This register can be read using MRS with the following syntax:
MRS <Xt>, <systemreg>
This register can be written using MSR (register) with the following syntax:
MSR <systemreg>, <Xt>
This syntax uses the following encoding in the System instruction encoding space:
<systemreg> | op0 | op1 | CRn | CRm | op2 |
---|---|---|---|---|---|
DBGBCR<n>_EL1 | 10 | 000 | 0000 | n<3:0> | 101 |
The register is accessible as follows:
Control | Accessibility | |||||
---|---|---|---|---|---|---|
E2H | TGE | NS | EL0 | EL1 | EL2 | EL3 |
x | x | 0 | - | RW | n/a | RW |
x | 0 | 1 | - | RW | RW | RW |
x | 1 | 1 | - | n/a | RW | RW |
This table applies to all instructions that can access this register.
For a description of the prioritization of any generated exceptions, see section D1.13.2 (Synchronous exception prioritization) in the ARM® Architecture Reference Manual, ARMv8, for ARMv8-A architecture profile. Subject to the prioritization rules, the following traps and enables are applicable when accessing this register.
In both Security states, and not dependent on other configuration bits:
If EDSCR.TDA==1, and OSLSR_EL1.OSLK==0, accesses to this register from EL1, EL2, and EL3 are trapped to Debug state.
When EL2 is implemented and is using AArch64 and SCR_EL3.NS==1 :
If MDCR_EL2.TDA==1, Non-secure accesses to this register from EL1 are trapped to EL2.
When EL3 is implemented and is using AArch64 :
If MDCR_EL3.TDA==1, accesses to this register from EL1 and EL2 are trapped to EL3.
02/05/2017 15:43
Copyright © 2010-2017 ARM Limited or its affiliates. All rights reserved. This document is Non-Confidential.