Search code examples
remote-debuggingpowerpcidatrace32

Using trace32 to debug raw firmware via IDA and a BDM


I have a freescale mpc565 powerpc, I have a copy of the raw firmware I have read from the device and I have decompiled it within Ida pro.

Is it now possible to debug the assembly using trace32 and a bdm without the original elf file and none of the symbol information?

I would like to step through the assembly and view the ram contents.

I could possibly use the trace32 api to write something that will achieve this however I don't know hurdles I will need to jump due to not having the original source of symbol tables.

Any help much appreciated.


Solution

  • Stepping through the assembly and debugging the assembler code (so setting breakpoints etc) is no problem.

    But: without the symbol information/original elf file, you are limited to only assembly. Meaning: If you for example try "Break.Set main" (so set a breakpoint onto the entry of the main function), this will not work, because the debugger does not know what address the "main" function has.

    The debugger will report "symbol not found" in this example (because it does not know anything about the "main" function).

    Additionally the debugger will not be able to display the source code matching to a bunch of assembler instructions.

    I hope this helps.